Skip to content

Commit 7b96a72

Browse files
github-actions[bot]github-actions[bot]
committed
chore: update feeds 2026-10-21
1 parent 3c4233e commit 7b96a72

11 files changed

Lines changed: 21045 additions & 21045 deletions

‎feeds/elastic_threat_intel.ndjson‎

Lines changed: 2153 additions & 2153 deletions
Large diffs are not rendered by default.

‎feeds/extsentry_feed.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"feed_name": "ExtSentry - Browser Extension Threat Intelligence",
33
"feed_version": "1.0",
4-
"generated": "2026-10-20T22:39:18Z",
4+
"generated": "2026-10-21T00:57:01Z",
55
"source": "https://github.com/mthcht/awesome-lists",
66
"license": "TLP:CLEAR",
77
"total_indicators": 2153,

‎feeds/extsentry_ioc_feed.csv‎

Lines changed: 2153 additions & 2153 deletions
Large diffs are not rendered by default.

‎feeds/misp_event.json‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,8 +4,8 @@
44
"threat_level_id": "2",
55
"analysis": "2",
66
"distribution": "3",
7-
"date": "2026-10-20",
8-
"timestamp": "1792535958",
7+
"date": "2026-10-21",
8+
"timestamp": "1792544222",
99
"published": false,
1010
"uuid": "41ef2090-fab5-547e-9eb6-2aa8f195c66f",
1111
"Orgc": {

‎feeds/misp_warninglist.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "ExtSentry - Known Malicious/Suspicious Browser Extension IDs",
3-
"version": 20261020,
3+
"version": 20261021,
44
"description": "List of known malicious, suspicious, and potentially unwanted browser extension IDs. Maintained by mthcht.",
55
"type": "string",
66
"matching_attributes": [

‎feeds/opencti_import.csv‎

Lines changed: 2153 additions & 2153 deletions
Large diffs are not rendered by default.

‎feeds/openioc_browser_extensions.ioc‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
<?xml version="1.0" ?>
2-
<ioc xmlns="http://schemas.mandiant.com/2010/ioc" id="3678fd2f-03b8-5532-a002-c96e7c7abd1e" last-modified="2026-10-20T22:39:18Z">
2+
<ioc xmlns="http://schemas.mandiant.com/2010/ioc" id="3678fd2f-03b8-5532-a002-c96e7c7abd1e" last-modified="2026-10-21T00:57:01Z">
33
<short_description>ExtSentry - Malicious Browser Extension IOCs</short_description>
44
<description>Browser extension IDs flagged as malicious/suspicious. Matches extension IDs in file paths and registry entries. Source: github.com/mthcht/awesome-lists</description>
5-
<authored_date>2026-10-20T22:39:18Z</authored_date>
5+
<authored_date>2026-10-21T00:57:01Z</authored_date>
66
<definition>
77
<Indicator operator="OR" id="5fd27988-48b0-53ea-88c2-7e57099fd433">
88
<IndicatorItem id="a11ca6c5-e752-5c1b-9bb1-6c41cb643f8c" condition="contains">

‎feeds/sentinel_analytics_rule.kql‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
// ExtSentry - Browser Extension Threat Detection for Microsoft Sentinel
22
// Source: https://github.com/mthcht/awesome-lists
3-
// Generated: 2026-10-20T22:39:18Z
3+
// Generated: 2026-10-21T00:57:01Z
44
// Total extension IDs: 2153 in 11 chunks
55
//
66
// RECOMMENDATION: For production, import the IOC list as a Sentinel Watchlist

‎feeds/sigma_rules_browser_extensions.yml‎

Lines changed: 30 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -8,8 +8,8 @@ description: |
88
references:
99
- https://github.com/mthcht/awesome-lists
1010
author: ExtSentry / mthcht
11-
date: 2026-10-20
12-
modified: 2026-10-20
11+
date: 2026-10-21
12+
modified: 2026-10-21
1313
tags:
1414
- attack.persistence
1515
- attack.t1176
@@ -2188,8 +2188,8 @@ description: |
21882188
references:
21892189
- https://github.com/mthcht/awesome-lists
21902190
author: ExtSentry / mthcht
2191-
date: 2026-10-20
2192-
modified: 2026-10-20
2191+
date: 2026-10-21
2192+
modified: 2026-10-21
21932193
tags:
21942194
- attack.persistence
21952195
- attack.t1176
@@ -4367,8 +4367,8 @@ description: |
43674367
references:
43684368
- https://github.com/mthcht/awesome-lists
43694369
author: ExtSentry / mthcht
4370-
date: 2026-10-20
4371-
modified: 2026-10-20
4370+
date: 2026-10-21
4371+
modified: 2026-10-21
43724372
tags:
43734373
- attack.persistence
43744374
- attack.t1176
@@ -6543,8 +6543,8 @@ description: Detects browser extensions categorized as 'malware' in the ExtSentr
65436543
references:
65446544
- https://github.com/mthcht/awesome-lists
65456545
author: ExtSentry / mthcht
6546-
date: 2026-10-20
6547-
modified: 2026-10-20
6546+
date: 2026-10-21
6547+
modified: 2026-10-21
65486548
tags:
65496549
- attack.persistence
65506550
- attack.t1176
@@ -8493,8 +8493,8 @@ description: Detects browser extensions categorized as 'PUP' in the ExtSentry fe
84938493
references:
84948494
- https://github.com/mthcht/awesome-lists
84958495
author: ExtSentry / mthcht
8496-
date: 2026-10-20
8497-
modified: 2026-10-20
8496+
date: 2026-10-21
8497+
modified: 2026-10-21
84988498
tags:
84998499
- attack.persistence
85008500
- attack.t1176
@@ -8523,8 +8523,8 @@ description: Detects browser extensions categorized as 'PROXY/VPN' in the ExtSen
85238523
references:
85248524
- https://github.com/mthcht/awesome-lists
85258525
author: ExtSentry / mthcht
8526-
date: 2026-10-20
8527-
modified: 2026-10-20
8526+
date: 2026-10-21
8527+
modified: 2026-10-21
85288528
tags:
85298529
- attack.persistence
85308530
- attack.t1176
@@ -8563,8 +8563,8 @@ description: Detects browser extensions categorized as 'compromised' in the ExtS
85638563
references:
85648564
- https://github.com/mthcht/awesome-lists
85658565
author: ExtSentry / mthcht
8566-
date: 2026-10-20
8567-
modified: 2026-10-20
8566+
date: 2026-10-21
8567+
modified: 2026-10-21
85688568
tags:
85698569
- attack.persistence
85708570
- attack.t1176
@@ -8678,8 +8678,8 @@ description: Detects browser extensions categorized as 'cryptocurrency' in the E
86788678
references:
86798679
- https://github.com/mthcht/awesome-lists
86808680
author: ExtSentry / mthcht
8681-
date: 2026-10-20
8682-
modified: 2026-10-20
8681+
date: 2026-10-21
8682+
modified: 2026-10-21
86838683
tags:
86848684
- attack.persistence
86858685
- attack.t1176
@@ -8791,8 +8791,8 @@ description: Detects browser extensions categorized as 'Credential Access' in th
87918791
references:
87928792
- https://github.com/mthcht/awesome-lists
87938793
author: ExtSentry / mthcht
8794-
date: 2026-10-20
8795-
modified: 2026-10-20
8794+
date: 2026-10-21
8795+
modified: 2026-10-21
87968796
tags:
87978797
- attack.persistence
87988798
- attack.t1176
@@ -8816,8 +8816,8 @@ description: Detects browser extensions categorized as 'Defense Evasion' in the
88168816
references:
88178817
- https://github.com/mthcht/awesome-lists
88188818
author: ExtSentry / mthcht
8819-
date: 2026-10-20
8820-
modified: 2026-10-20
8819+
date: 2026-10-21
8820+
modified: 2026-10-21
88218821
tags:
88228822
- attack.persistence
88238823
- attack.t1176
@@ -8840,8 +8840,8 @@ description: Detects browser extensions categorized as 'scam' in the ExtSentry f
88408840
references:
88418841
- https://github.com/mthcht/awesome-lists
88428842
author: ExtSentry / mthcht
8843-
date: 2026-10-20
8844-
modified: 2026-10-20
8843+
date: 2026-10-21
8844+
modified: 2026-10-21
88458845
tags:
88468846
- attack.persistence
88478847
- attack.t1176
@@ -8868,8 +8868,8 @@ description: Detects browser extensions categorized as 'RMM' in the ExtSentry fe
88688868
references:
88698869
- https://github.com/mthcht/awesome-lists
88708870
author: ExtSentry / mthcht
8871-
date: 2026-10-20
8872-
modified: 2026-10-20
8871+
date: 2026-10-21
8872+
modified: 2026-10-21
88738873
tags:
88748874
- attack.persistence
88758875
- attack.t1176
@@ -8893,8 +8893,8 @@ description: Detects browser extensions categorized as 'password manager' in the
88938893
references:
88948894
- https://github.com/mthcht/awesome-lists
88958895
author: ExtSentry / mthcht
8896-
date: 2026-10-20
8897-
modified: 2026-10-20
8896+
date: 2026-10-21
8897+
modified: 2026-10-21
88988898
tags:
88998899
- attack.persistence
89008900
- attack.t1176
@@ -8925,8 +8925,8 @@ description: Detects browser extensions categorized as 'metadata_category' in th
89258925
references:
89268926
- https://github.com/mthcht/awesome-lists
89278927
author: ExtSentry / mthcht
8928-
date: 2026-10-20
8929-
modified: 2026-10-20
8928+
date: 2026-10-21
8929+
modified: 2026-10-21
89308930
tags:
89318931
- attack.persistence
89328932
- attack.t1176
@@ -8951,8 +8951,8 @@ description: |
89518951
references:
89528952
- https://github.com/mthcht/awesome-lists
89538953
author: ExtSentry
8954-
date: 2026-10-20
8955-
modified: 2026-10-20
8954+
date: 2026-10-21
8955+
modified: 2026-10-21
89568956
tags:
89578957
- attack.persistence
89588958
- attack.t1176

0 commit comments

Comments
 (0)