diff --git a/.github/FUNDING.yml b/.github/FUNDING.yml
new file mode 100644
index 00000000..13fdfa73
--- /dev/null
+++ b/.github/FUNDING.yml
@@ -0,0 +1 @@
+github: [ION28]
diff --git a/.github/workflows/cloud-web.yml b/.github/workflows/cloud-web.yml
deleted file mode 100644
index 61a5806a..00000000
--- a/.github/workflows/cloud-web.yml
+++ /dev/null
@@ -1,57 +0,0 @@
-name: Deploy Project Website to bluespawn.cloud
-on:
- push:
- branches:
- - master
- - develop
- pull_request:
- branches:
- - master
- - develop
-
-jobs:
- build:
- name: Update Project site
- runs-on: ubuntu-latest
- steps:
- - name: SSH into server and update
- uses: appleboy/ssh-action@master
- with:
- host: bluespawn.cloud
- username: ubuntu
- key: ${{ secrets.PRIVATE_KEY }}
- port: 22
- script: |
- cd ~/BLUESPAWN
- git fetch --all
- git checkout ${{ github.ref }}
- git pull origin ${{ github.ref }}
- source ~/venv/bin/activate
- cd docs
- pip install -r requirements.txt
- python3 manage.py makemigrations
- python3 manage.py migrate
- sudo service uwsgi restart
- sudo /etc/init.d/nginx restart
- if: github.event_name == 'push'
-
- - name: SSH into server and update
- uses: appleboy/ssh-action@master
- with:
- host: bluespawn.cloud
- username: ubuntu
- key: ${{ secrets.PRIVATE_KEY }}
- port: 22
- script: |
- cd ~/BLUESPAWN
- git fetch --all
- git checkout ${{ github.head_ref }}
- git pull origin ${{ github.head_ref }}
- source ~/venv/bin/activate
- cd docs
- pip install -r requirements.txt
- python3 manage.py makemigrations
- python3 manage.py migrate
- sudo service uwsgi restart
- sudo /etc/init.d/nginx restart
- if: github.event_name == 'pull_request'
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 45781c6c..3059119b 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -25,12 +25,10 @@ jobs:
- name: Update submodules
run: git submodule update --init --recursive
- - name: Restore from cache, and install vcpkg and project dependencies
- uses: lukka/run-vcpkg@v6
+ - name: Setup vcpkg environment
+ uses: lukka/run-vcpkg@v11
with:
- vcpkgArguments: '@../vcpkg_response_file.txt'
- vcpkgDirectory: 'vcpkg'
- appendedCacheKey: ${{ hashFiles(env.vcpkgResponseFile) }}
+ vcpkgDirectory: '${{ github.workspace }}/vcpkg'
- name: Integrate vcpkg packages
shell: powershell
@@ -39,10 +37,12 @@ jobs:
.\vcpkg.exe integrate install
cd ..
+ - name: Setup MSBuild
+ uses: microsoft/setup-msbuild@v2
+
- name: Build BLUESPAWN-client
- run: |
- "%ProgramFiles(x86)%\Microsoft Visual Studio\2019\Enterprise\MSBuild\Current\Bin\MSBuild.exe" BLUESPAWN.sln /p:Configuration=${{ matrix.buildtype }} /p:Platform=${{ matrix.buildarch }}
shell: cmd
+ run: msbuild BLUESPAWN.sln /p:Configuration=${{ matrix.buildtype }} /p:Platform=${{ matrix.buildarch }} /p:VcpkgEnableManifest=true /p:VcpkgManifestDir=${{ github.workspace }}
- name: Set PowerShell Execution Policy
run: powershell set-executionpolicy Unrestricted
diff --git a/BLUESPAWN-win-client/BLUESPAWN-client.vcxproj b/BLUESPAWN-win-client/BLUESPAWN-client.vcxproj
index 9d1221f0..fe2be8ed 100644
--- a/BLUESPAWN-win-client/BLUESPAWN-client.vcxproj
+++ b/BLUESPAWN-win-client/BLUESPAWN-client.vcxproj
@@ -287,7 +287,7 @@
Application
- v142
+ v143
diff --git a/BLUESPAWN-win-client/headers/hunt/hunts/HuntT1484.h b/BLUESPAWN-win-client/headers/hunt/hunts/HuntT1484.h
index cd6cae3f..861737e4 100644
--- a/BLUESPAWN-win-client/headers/hunt/hunts/HuntT1484.h
+++ b/BLUESPAWN-win-client/headers/hunt/hunts/HuntT1484.h
@@ -12,6 +12,8 @@ namespace Hunts {
public:
HuntT1484();
+ void Subtechnique001(IN CONST Scope& scope, OUT std::vector>& detections);
+
virtual std::vector> RunHunt(const Scope& scope) override;
virtual std::vector, Scope>> GetMonitoringEvents() override;
};
diff --git a/BLUESPAWN-win-client/headers/monitor/EventListener.h b/BLUESPAWN-win-client/headers/monitor/EventListener.h
index 54681d04..544f46fd 100644
--- a/BLUESPAWN-win-client/headers/monitor/EventListener.h
+++ b/BLUESPAWN-win-client/headers/monitor/EventListener.h
@@ -5,6 +5,7 @@
#include
#include