Skip to content

Commit 35db7f3

Browse files
github-actions[bot]github-actions[bot]
committed
chore: update feeds 2026-04-12
1 parent 4b27b13 commit 35db7f3

11 files changed

Lines changed: 17296 additions & 17296 deletions

‎feeds/elastic_threat_intel.ndjson‎

Lines changed: 1772 additions & 1772 deletions
Large diffs are not rendered by default.

‎feeds/extsentry_feed.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"feed_name": "ExtSentry - Browser Extension Threat Intelligence",
33
"feed_version": "1.0",
4-
"generated": "2026-04-11T23:05:14Z",
4+
"generated": "2026-04-12T00:03:33Z",
55
"source": "https://github.com/mthcht/awesome-lists",
66
"license": "TLP:CLEAR",
77
"total_indicators": 1772,

‎feeds/extsentry_ioc_feed.csv‎

Lines changed: 1772 additions & 1772 deletions
Large diffs are not rendered by default.

‎feeds/misp_event.json‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,8 +4,8 @@
44
"threat_level_id": "2",
55
"analysis": "2",
66
"distribution": "3",
7-
"date": "2026-04-11",
8-
"timestamp": "1775948715",
7+
"date": "2026-04-12",
8+
"timestamp": "1775952214",
99
"published": false,
1010
"uuid": "41ef2090-fab5-547e-9eb6-2aa8f195c66f",
1111
"Orgc": {

‎feeds/misp_warninglist.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "ExtSentry - Known Malicious/Suspicious Browser Extension IDs",
3-
"version": 20260411,
3+
"version": 20260412,
44
"description": "List of known malicious, suspicious, and potentially unwanted browser extension IDs. Maintained by mthcht.",
55
"type": "string",
66
"matching_attributes": [

‎feeds/opencti_import.csv‎

Lines changed: 1772 additions & 1772 deletions
Large diffs are not rendered by default.

‎feeds/openioc_browser_extensions.ioc‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
<?xml version="1.0" ?>
2-
<ioc xmlns="http://schemas.mandiant.com/2010/ioc" id="3678fd2f-03b8-5532-a002-c96e7c7abd1e" last-modified="2026-04-11T23:05:14Z">
2+
<ioc xmlns="http://schemas.mandiant.com/2010/ioc" id="3678fd2f-03b8-5532-a002-c96e7c7abd1e" last-modified="2026-04-12T00:03:33Z">
33
<short_description>ExtSentry - Malicious Browser Extension IOCs</short_description>
44
<description>Browser extension IDs flagged as malicious/suspicious. Matches extension IDs in file paths and registry entries. Source: github.com/mthcht/awesome-lists</description>
5-
<authored_date>2026-04-11T23:05:14Z</authored_date>
5+
<authored_date>2026-04-12T00:03:33Z</authored_date>
66
<definition>
77
<Indicator operator="OR" id="5fd27988-48b0-53ea-88c2-7e57099fd433">
88
<IndicatorItem id="19427bea-fd79-50f2-82b3-16877f5a9bec" condition="contains">

‎feeds/sentinel_analytics_rule.kql‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
// ExtSentry - Browser Extension Threat Detection for Microsoft Sentinel
22
// Source: https://github.com/mthcht/awesome-lists
3-
// Generated: 2026-04-11T23:05:14Z
3+
// Generated: 2026-04-12T00:03:33Z
44
// Total extension IDs: 1772 in 9 chunks
55
//
66
// RECOMMENDATION: For production, import the IOC list as a Sentinel Watchlist

‎feeds/sigma_rules_browser_extensions.yml‎

Lines changed: 28 additions & 28 deletions
Original file line numberDiff line numberDiff line change
@@ -8,8 +8,8 @@ description: |
88
references:
99
- https://github.com/mthcht/awesome-lists
1010
author: ExtSentry / mthcht
11-
date: 2026-04-11
12-
modified: 2026-04-11
11+
date: 2026-04-12
12+
modified: 2026-04-12
1313
tags:
1414
- attack.persistence
1515
- attack.t1176
@@ -1807,8 +1807,8 @@ description: |
18071807
references:
18081808
- https://github.com/mthcht/awesome-lists
18091809
author: ExtSentry / mthcht
1810-
date: 2026-04-11
1811-
modified: 2026-04-11
1810+
date: 2026-04-12
1811+
modified: 2026-04-12
18121812
tags:
18131813
- attack.persistence
18141814
- attack.t1176
@@ -3605,8 +3605,8 @@ description: |
36053605
references:
36063606
- https://github.com/mthcht/awesome-lists
36073607
author: ExtSentry / mthcht
3608-
date: 2026-04-11
3609-
modified: 2026-04-11
3608+
date: 2026-04-12
3609+
modified: 2026-04-12
36103610
tags:
36113611
- attack.persistence
36123612
- attack.t1176
@@ -5400,8 +5400,8 @@ description: Detects browser extensions categorized as 'malware' in the ExtSentr
54005400
references:
54015401
- https://github.com/mthcht/awesome-lists
54025402
author: ExtSentry / mthcht
5403-
date: 2026-04-11
5404-
modified: 2026-04-11
5403+
date: 2026-04-12
5404+
modified: 2026-04-12
54055405
tags:
54065406
- attack.persistence
54075407
- attack.t1176
@@ -6985,8 +6985,8 @@ description: Detects browser extensions categorized as 'PUP' in the ExtSentry fe
69856985
references:
69866986
- https://github.com/mthcht/awesome-lists
69876987
author: ExtSentry / mthcht
6988-
date: 2026-04-11
6989-
modified: 2026-04-11
6988+
date: 2026-04-12
6989+
modified: 2026-04-12
69906990
tags:
69916991
- attack.persistence
69926992
- attack.t1176
@@ -7013,8 +7013,8 @@ description: Detects browser extensions categorized as 'compromised' in the ExtS
70137013
references:
70147014
- https://github.com/mthcht/awesome-lists
70157015
author: ExtSentry / mthcht
7016-
date: 2026-04-11
7017-
modified: 2026-04-11
7016+
date: 2026-04-12
7017+
modified: 2026-04-12
70187018
tags:
70197019
- attack.persistence
70207020
- attack.t1176
@@ -7128,8 +7128,8 @@ description: Detects browser extensions categorized as 'cryptocurrency' in the E
71287128
references:
71297129
- https://github.com/mthcht/awesome-lists
71307130
author: ExtSentry / mthcht
7131-
date: 2026-04-11
7132-
modified: 2026-04-11
7131+
date: 2026-04-12
7132+
modified: 2026-04-12
71337133
tags:
71347134
- attack.persistence
71357135
- attack.t1176
@@ -7241,8 +7241,8 @@ description: Detects browser extensions categorized as 'Credential Access' in th
72417241
references:
72427242
- https://github.com/mthcht/awesome-lists
72437243
author: ExtSentry / mthcht
7244-
date: 2026-04-11
7245-
modified: 2026-04-11
7244+
date: 2026-04-12
7245+
modified: 2026-04-12
72467246
tags:
72477247
- attack.persistence
72487248
- attack.t1176
@@ -7266,8 +7266,8 @@ description: Detects browser extensions categorized as 'Defense Evasion' in the
72667266
references:
72677267
- https://github.com/mthcht/awesome-lists
72687268
author: ExtSentry / mthcht
7269-
date: 2026-04-11
7270-
modified: 2026-04-11
7269+
date: 2026-04-12
7270+
modified: 2026-04-12
72717271
tags:
72727272
- attack.persistence
72737273
- attack.t1176
@@ -7290,8 +7290,8 @@ description: Detects browser extensions categorized as 'scam' in the ExtSentry f
72907290
references:
72917291
- https://github.com/mthcht/awesome-lists
72927292
author: ExtSentry / mthcht
7293-
date: 2026-04-11
7294-
modified: 2026-04-11
7293+
date: 2026-04-12
7294+
modified: 2026-04-12
72957295
tags:
72967296
- attack.persistence
72977297
- attack.t1176
@@ -7318,8 +7318,8 @@ description: Detects browser extensions categorized as 'RMM' in the ExtSentry fe
73187318
references:
73197319
- https://github.com/mthcht/awesome-lists
73207320
author: ExtSentry / mthcht
7321-
date: 2026-04-11
7322-
modified: 2026-04-11
7321+
date: 2026-04-12
7322+
modified: 2026-04-12
73237323
tags:
73247324
- attack.persistence
73257325
- attack.t1176
@@ -7342,8 +7342,8 @@ description: Detects browser extensions categorized as 'password manager' in the
73427342
references:
73437343
- https://github.com/mthcht/awesome-lists
73447344
author: ExtSentry / mthcht
7345-
date: 2026-04-11
7346-
modified: 2026-04-11
7345+
date: 2026-04-12
7346+
modified: 2026-04-12
73477347
tags:
73487348
- attack.persistence
73497349
- attack.t1176
@@ -7374,8 +7374,8 @@ description: Detects browser extensions categorized as 'PROXY/VPN' in the ExtSen
73747374
references:
73757375
- https://github.com/mthcht/awesome-lists
73767376
author: ExtSentry / mthcht
7377-
date: 2026-04-11
7378-
modified: 2026-04-11
7377+
date: 2026-04-12
7378+
modified: 2026-04-12
73797379
tags:
73807380
- attack.persistence
73817381
- attack.t1176
@@ -7404,8 +7404,8 @@ description: |
74047404
references:
74057405
- https://github.com/mthcht/awesome-lists
74067406
author: ExtSentry
7407-
date: 2026-04-11
7408-
modified: 2026-04-11
7407+
date: 2026-04-12
7408+
modified: 2026-04-12
74097409
tags:
74107410
- attack.persistence
74117411
- attack.t1176

0 commit comments

Comments
 (0)