-
Notifications
You must be signed in to change notification settings - Fork 12
Analysis Lists
Scott Sutherland edited this page May 3, 2023
·
6 revisions
Analysis lists are text file lists used by one or more analysis modules. The intent is to store them in one place so they can be updated without having to update multiple modules.
All analysis lists are stored in the windows\modules\lists folder and are used by analysis modules at run time.
Below is a list of the current analysis lists.
| List Name | Description |
|---|---|
| list-default-users | Default Windows users |
| list-lolbas | Common Windows living off the land binaries |
| list-mgmt-strings | Strings associated with remote management software |
| list-offsec-software | Strings associated with common offensive security software |
| list-loldrivers | This is a list of "Living Off the Land" drivers from the https://www.loldrivers.io/ project. |