Skip to content

Commit fc6d062

Browse files
github-actions[bot]github-actions[bot]
committed
chore: update feeds 2026-04-15
1 parent c519c32 commit fc6d062

11 files changed

Lines changed: 18376 additions & 18376 deletions

‎feeds/elastic_threat_intel.ndjson‎

Lines changed: 1880 additions & 1880 deletions
Large diffs are not rendered by default.

‎feeds/extsentry_feed.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"feed_name": "ExtSentry - Browser Extension Threat Intelligence",
33
"feed_version": "1.0",
4-
"generated": "2026-04-14T23:28:27Z",
4+
"generated": "2026-04-15T01:08:20Z",
55
"source": "https://github.com/mthcht/awesome-lists",
66
"license": "TLP:CLEAR",
77
"total_indicators": 1880,

‎feeds/extsentry_ioc_feed.csv‎

Lines changed: 1880 additions & 1880 deletions
Large diffs are not rendered by default.

‎feeds/misp_event.json‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,8 +4,8 @@
44
"threat_level_id": "2",
55
"analysis": "2",
66
"distribution": "3",
7-
"date": "2026-04-14",
8-
"timestamp": "1776209307",
7+
"date": "2026-04-15",
8+
"timestamp": "1776215301",
99
"published": false,
1010
"uuid": "41ef2090-fab5-547e-9eb6-2aa8f195c66f",
1111
"Orgc": {

‎feeds/misp_warninglist.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "ExtSentry - Known Malicious/Suspicious Browser Extension IDs",
3-
"version": 20260414,
3+
"version": 20260415,
44
"description": "List of known malicious, suspicious, and potentially unwanted browser extension IDs. Maintained by mthcht.",
55
"type": "string",
66
"matching_attributes": [

‎feeds/opencti_import.csv‎

Lines changed: 1880 additions & 1880 deletions
Large diffs are not rendered by default.

‎feeds/openioc_browser_extensions.ioc‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
<?xml version="1.0" ?>
2-
<ioc xmlns="http://schemas.mandiant.com/2010/ioc" id="3678fd2f-03b8-5532-a002-c96e7c7abd1e" last-modified="2026-04-14T23:28:27Z">
2+
<ioc xmlns="http://schemas.mandiant.com/2010/ioc" id="3678fd2f-03b8-5532-a002-c96e7c7abd1e" last-modified="2026-04-15T01:08:20Z">
33
<short_description>ExtSentry - Malicious Browser Extension IOCs</short_description>
44
<description>Browser extension IDs flagged as malicious/suspicious. Matches extension IDs in file paths and registry entries. Source: github.com/mthcht/awesome-lists</description>
5-
<authored_date>2026-04-14T23:28:27Z</authored_date>
5+
<authored_date>2026-04-15T01:08:20Z</authored_date>
66
<definition>
77
<Indicator operator="OR" id="5fd27988-48b0-53ea-88c2-7e57099fd433">
88
<IndicatorItem id="61ef079f-7d49-5770-8fa0-70aaf16bc0ca" condition="contains">

‎feeds/sentinel_analytics_rule.kql‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
// ExtSentry - Browser Extension Threat Detection for Microsoft Sentinel
22
// Source: https://github.com/mthcht/awesome-lists
3-
// Generated: 2026-04-14T23:28:27Z
3+
// Generated: 2026-04-15T01:08:20Z
44
// Total extension IDs: 1880 in 10 chunks
55
//
66
// RECOMMENDATION: For production, import the IOC list as a Sentinel Watchlist

‎feeds/sigma_rules_browser_extensions.yml‎

Lines changed: 28 additions & 28 deletions
Original file line numberDiff line numberDiff line change
@@ -8,8 +8,8 @@ description: |
88
references:
99
- https://github.com/mthcht/awesome-lists
1010
author: ExtSentry / mthcht
11-
date: 2026-04-14
12-
modified: 2026-04-14
11+
date: 2026-04-15
12+
modified: 2026-04-15
1313
tags:
1414
- attack.persistence
1515
- attack.t1176
@@ -1915,8 +1915,8 @@ description: |
19151915
references:
19161916
- https://github.com/mthcht/awesome-lists
19171917
author: ExtSentry / mthcht
1918-
date: 2026-04-14
1919-
modified: 2026-04-14
1918+
date: 2026-04-15
1919+
modified: 2026-04-15
19201920
tags:
19211921
- attack.persistence
19221922
- attack.t1176
@@ -3821,8 +3821,8 @@ description: |
38213821
references:
38223822
- https://github.com/mthcht/awesome-lists
38233823
author: ExtSentry / mthcht
3824-
date: 2026-04-14
3825-
modified: 2026-04-14
3824+
date: 2026-04-15
3825+
modified: 2026-04-15
38263826
tags:
38273827
- attack.persistence
38283828
- attack.t1176
@@ -5724,8 +5724,8 @@ description: Detects browser extensions categorized as 'malware' in the ExtSentr
57245724
references:
57255725
- https://github.com/mthcht/awesome-lists
57265726
author: ExtSentry / mthcht
5727-
date: 2026-04-14
5728-
modified: 2026-04-14
5727+
date: 2026-04-15
5728+
modified: 2026-04-15
57295729
tags:
57305730
- attack.persistence
57315731
- attack.t1176
@@ -7417,8 +7417,8 @@ description: Detects browser extensions categorized as 'PUP' in the ExtSentry fe
74177417
references:
74187418
- https://github.com/mthcht/awesome-lists
74197419
author: ExtSentry / mthcht
7420-
date: 2026-04-14
7421-
modified: 2026-04-14
7420+
date: 2026-04-15
7421+
modified: 2026-04-15
74227422
tags:
74237423
- attack.persistence
74247424
- attack.t1176
@@ -7445,8 +7445,8 @@ description: Detects browser extensions categorized as 'compromised' in the ExtS
74457445
references:
74467446
- https://github.com/mthcht/awesome-lists
74477447
author: ExtSentry / mthcht
7448-
date: 2026-04-14
7449-
modified: 2026-04-14
7448+
date: 2026-04-15
7449+
modified: 2026-04-15
74507450
tags:
74517451
- attack.persistence
74527452
- attack.t1176
@@ -7560,8 +7560,8 @@ description: Detects browser extensions categorized as 'cryptocurrency' in the E
75607560
references:
75617561
- https://github.com/mthcht/awesome-lists
75627562
author: ExtSentry / mthcht
7563-
date: 2026-04-14
7564-
modified: 2026-04-14
7563+
date: 2026-04-15
7564+
modified: 2026-04-15
75657565
tags:
75667566
- attack.persistence
75677567
- attack.t1176
@@ -7673,8 +7673,8 @@ description: Detects browser extensions categorized as 'Credential Access' in th
76737673
references:
76747674
- https://github.com/mthcht/awesome-lists
76757675
author: ExtSentry / mthcht
7676-
date: 2026-04-14
7677-
modified: 2026-04-14
7676+
date: 2026-04-15
7677+
modified: 2026-04-15
76787678
tags:
76797679
- attack.persistence
76807680
- attack.t1176
@@ -7698,8 +7698,8 @@ description: Detects browser extensions categorized as 'Defense Evasion' in the
76987698
references:
76997699
- https://github.com/mthcht/awesome-lists
77007700
author: ExtSentry / mthcht
7701-
date: 2026-04-14
7702-
modified: 2026-04-14
7701+
date: 2026-04-15
7702+
modified: 2026-04-15
77037703
tags:
77047704
- attack.persistence
77057705
- attack.t1176
@@ -7722,8 +7722,8 @@ description: Detects browser extensions categorized as 'scam' in the ExtSentry f
77227722
references:
77237723
- https://github.com/mthcht/awesome-lists
77247724
author: ExtSentry / mthcht
7725-
date: 2026-04-14
7726-
modified: 2026-04-14
7725+
date: 2026-04-15
7726+
modified: 2026-04-15
77277727
tags:
77287728
- attack.persistence
77297729
- attack.t1176
@@ -7750,8 +7750,8 @@ description: Detects browser extensions categorized as 'RMM' in the ExtSentry fe
77507750
references:
77517751
- https://github.com/mthcht/awesome-lists
77527752
author: ExtSentry / mthcht
7753-
date: 2026-04-14
7754-
modified: 2026-04-14
7753+
date: 2026-04-15
7754+
modified: 2026-04-15
77557755
tags:
77567756
- attack.persistence
77577757
- attack.t1176
@@ -7774,8 +7774,8 @@ description: Detects browser extensions categorized as 'password manager' in the
77747774
references:
77757775
- https://github.com/mthcht/awesome-lists
77767776
author: ExtSentry / mthcht
7777-
date: 2026-04-14
7778-
modified: 2026-04-14
7777+
date: 2026-04-15
7778+
modified: 2026-04-15
77797779
tags:
77807780
- attack.persistence
77817781
- attack.t1176
@@ -7806,8 +7806,8 @@ description: Detects browser extensions categorized as 'PROXY/VPN' in the ExtSen
78067806
references:
78077807
- https://github.com/mthcht/awesome-lists
78087808
author: ExtSentry / mthcht
7809-
date: 2026-04-14
7810-
modified: 2026-04-14
7809+
date: 2026-04-15
7810+
modified: 2026-04-15
78117811
tags:
78127812
- attack.persistence
78137813
- attack.t1176
@@ -7836,8 +7836,8 @@ description: |
78367836
references:
78377837
- https://github.com/mthcht/awesome-lists
78387838
author: ExtSentry
7839-
date: 2026-04-14
7840-
modified: 2026-04-14
7839+
date: 2026-04-15
7840+
modified: 2026-04-15
78417841
tags:
78427842
- attack.persistence
78437843
- attack.t1176

0 commit comments

Comments
 (0)