mirror of
https://github.com/nomi-sec/PoC-in-GitHub.git
synced 2026-11-07 08:30:25 -10:00
35 lines
1.5 KiB
JSON
35 lines
1.5 KiB
JSON
[
|
|
{
|
|
"id": 1193475376,
|
|
"name": "conti-ransomware-writeup",
|
|
"full_name": "Justjeff211\/conti-ransomware-writeup",
|
|
"owner": {
|
|
"login": "Justjeff211",
|
|
"id": 209606051,
|
|
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/209606051?v=4",
|
|
"html_url": "https:\/\/github.com\/Justjeff211",
|
|
"user_view_type": "public"
|
|
},
|
|
"html_url": "https:\/\/github.com\/Justjeff211\/conti-ransomware-writeup",
|
|
"description": "Conducted a full SOC investigation into a Conti ransomware compromise of an Exchange server using Splunk 8.2.2. Analysed 28,145 events across Windows Security, Sysmon, and IIS log sources to reconstruct the complete attack chain. Identified three exploited CVEs (CVE-2020-0796, CVE-2018-13374, CVE-2018-13379), located a trojanised cmd.exe ",
|
|
"fork": false,
|
|
"created_at": "2026-03-27T09:09:10Z",
|
|
"updated_at": "2026-03-27T09:16:36Z",
|
|
"pushed_at": "2026-03-27T09:16:33Z",
|
|
"stargazers_count": 0,
|
|
"watchers_count": 0,
|
|
"has_discussions": false,
|
|
"forks_count": 0,
|
|
"allow_forking": true,
|
|
"is_template": false,
|
|
"web_commit_signoff_required": false,
|
|
"has_pull_requests": true,
|
|
"pull_request_creation_policy": "all",
|
|
"topics": [],
|
|
"visibility": "public",
|
|
"forks": 0,
|
|
"watchers": 0,
|
|
"score": 0,
|
|
"subscribers_count": 0
|
|
}
|
|
] |