Skip to content

Commit 889e5cc

Browse files
github-actions[bot]github-actions[bot]
committed
chore: update feeds 2026-04-26
1 parent 7720d20 commit 889e5cc

11 files changed

Lines changed: 18386 additions & 18386 deletions

‎feeds/elastic_threat_intel.ndjson‎

Lines changed: 1881 additions & 1881 deletions
Large diffs are not rendered by default.

‎feeds/extsentry_feed.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"feed_name": "ExtSentry - Browser Extension Threat Intelligence",
33
"feed_version": "1.0",
4-
"generated": "2026-04-25T23:21:53Z",
4+
"generated": "2026-04-26T01:12:36Z",
55
"source": "https://github.com/mthcht/awesome-lists",
66
"license": "TLP:CLEAR",
77
"total_indicators": 1881,

‎feeds/extsentry_ioc_feed.csv‎

Lines changed: 1881 additions & 1881 deletions
Large diffs are not rendered by default.

‎feeds/misp_event.json‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,8 +4,8 @@
44
"threat_level_id": "2",
55
"analysis": "2",
66
"distribution": "3",
7-
"date": "2026-04-25",
8-
"timestamp": "1777159315",
7+
"date": "2026-04-26",
8+
"timestamp": "1777165956",
99
"published": false,
1010
"uuid": "41ef2090-fab5-547e-9eb6-2aa8f195c66f",
1111
"Orgc": {

‎feeds/misp_warninglist.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "ExtSentry - Known Malicious/Suspicious Browser Extension IDs",
3-
"version": 20260425,
3+
"version": 20260426,
44
"description": "List of known malicious, suspicious, and potentially unwanted browser extension IDs. Maintained by mthcht.",
55
"type": "string",
66
"matching_attributes": [

‎feeds/opencti_import.csv‎

Lines changed: 1881 additions & 1881 deletions
Large diffs are not rendered by default.

‎feeds/openioc_browser_extensions.ioc‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
<?xml version="1.0" ?>
2-
<ioc xmlns="http://schemas.mandiant.com/2010/ioc" id="3678fd2f-03b8-5532-a002-c96e7c7abd1e" last-modified="2026-04-25T23:21:53Z">
2+
<ioc xmlns="http://schemas.mandiant.com/2010/ioc" id="3678fd2f-03b8-5532-a002-c96e7c7abd1e" last-modified="2026-04-26T01:12:36Z">
33
<short_description>ExtSentry - Malicious Browser Extension IOCs</short_description>
44
<description>Browser extension IDs flagged as malicious/suspicious. Matches extension IDs in file paths and registry entries. Source: github.com/mthcht/awesome-lists</description>
5-
<authored_date>2026-04-25T23:21:53Z</authored_date>
5+
<authored_date>2026-04-26T01:12:36Z</authored_date>
66
<definition>
77
<Indicator operator="OR" id="5fd27988-48b0-53ea-88c2-7e57099fd433">
88
<IndicatorItem id="b693f458-50b9-5df6-8634-37e1a9dc94fd" condition="contains">

‎feeds/sentinel_analytics_rule.kql‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
// ExtSentry - Browser Extension Threat Detection for Microsoft Sentinel
22
// Source: https://github.com/mthcht/awesome-lists
3-
// Generated: 2026-04-25T23:21:53Z
3+
// Generated: 2026-04-26T01:12:36Z
44
// Total extension IDs: 1881 in 10 chunks
55
//
66
// RECOMMENDATION: For production, import the IOC list as a Sentinel Watchlist

‎feeds/sigma_rules_browser_extensions.yml‎

Lines changed: 28 additions & 28 deletions
Original file line numberDiff line numberDiff line change
@@ -8,8 +8,8 @@ description: |
88
references:
99
- https://github.com/mthcht/awesome-lists
1010
author: ExtSentry / mthcht
11-
date: 2026-04-25
12-
modified: 2026-04-25
11+
date: 2026-04-26
12+
modified: 2026-04-26
1313
tags:
1414
- attack.persistence
1515
- attack.t1176
@@ -1916,8 +1916,8 @@ description: |
19161916
references:
19171917
- https://github.com/mthcht/awesome-lists
19181918
author: ExtSentry / mthcht
1919-
date: 2026-04-25
1920-
modified: 2026-04-25
1919+
date: 2026-04-26
1920+
modified: 2026-04-26
19211921
tags:
19221922
- attack.persistence
19231923
- attack.t1176
@@ -3823,8 +3823,8 @@ description: |
38233823
references:
38243824
- https://github.com/mthcht/awesome-lists
38253825
author: ExtSentry / mthcht
3826-
date: 2026-04-25
3827-
modified: 2026-04-25
3826+
date: 2026-04-26
3827+
modified: 2026-04-26
38283828
tags:
38293829
- attack.persistence
38303830
- attack.t1176
@@ -5727,8 +5727,8 @@ description: Detects browser extensions categorized as 'malware' in the ExtSentr
57275727
references:
57285728
- https://github.com/mthcht/awesome-lists
57295729
author: ExtSentry / mthcht
5730-
date: 2026-04-25
5731-
modified: 2026-04-25
5730+
date: 2026-04-26
5731+
modified: 2026-04-26
57325732
tags:
57335733
- attack.persistence
57345734
- attack.t1176
@@ -7421,8 +7421,8 @@ description: Detects browser extensions categorized as 'PUP' in the ExtSentry fe
74217421
references:
74227422
- https://github.com/mthcht/awesome-lists
74237423
author: ExtSentry / mthcht
7424-
date: 2026-04-25
7425-
modified: 2026-04-25
7424+
date: 2026-04-26
7425+
modified: 2026-04-26
74267426
tags:
74277427
- attack.persistence
74287428
- attack.t1176
@@ -7449,8 +7449,8 @@ description: Detects browser extensions categorized as 'compromised' in the ExtS
74497449
references:
74507450
- https://github.com/mthcht/awesome-lists
74517451
author: ExtSentry / mthcht
7452-
date: 2026-04-25
7453-
modified: 2026-04-25
7452+
date: 2026-04-26
7453+
modified: 2026-04-26
74547454
tags:
74557455
- attack.persistence
74567456
- attack.t1176
@@ -7564,8 +7564,8 @@ description: Detects browser extensions categorized as 'cryptocurrency' in the E
75647564
references:
75657565
- https://github.com/mthcht/awesome-lists
75667566
author: ExtSentry / mthcht
7567-
date: 2026-04-25
7568-
modified: 2026-04-25
7567+
date: 2026-04-26
7568+
modified: 2026-04-26
75697569
tags:
75707570
- attack.persistence
75717571
- attack.t1176
@@ -7677,8 +7677,8 @@ description: Detects browser extensions categorized as 'Credential Access' in th
76777677
references:
76787678
- https://github.com/mthcht/awesome-lists
76797679
author: ExtSentry / mthcht
7680-
date: 2026-04-25
7681-
modified: 2026-04-25
7680+
date: 2026-04-26
7681+
modified: 2026-04-26
76827682
tags:
76837683
- attack.persistence
76847684
- attack.t1176
@@ -7702,8 +7702,8 @@ description: Detects browser extensions categorized as 'Defense Evasion' in the
77027702
references:
77037703
- https://github.com/mthcht/awesome-lists
77047704
author: ExtSentry / mthcht
7705-
date: 2026-04-25
7706-
modified: 2026-04-25
7705+
date: 2026-04-26
7706+
modified: 2026-04-26
77077707
tags:
77087708
- attack.persistence
77097709
- attack.t1176
@@ -7726,8 +7726,8 @@ description: Detects browser extensions categorized as 'scam' in the ExtSentry f
77267726
references:
77277727
- https://github.com/mthcht/awesome-lists
77287728
author: ExtSentry / mthcht
7729-
date: 2026-04-25
7730-
modified: 2026-04-25
7729+
date: 2026-04-26
7730+
modified: 2026-04-26
77317731
tags:
77327732
- attack.persistence
77337733
- attack.t1176
@@ -7754,8 +7754,8 @@ description: Detects browser extensions categorized as 'RMM' in the ExtSentry fe
77547754
references:
77557755
- https://github.com/mthcht/awesome-lists
77567756
author: ExtSentry / mthcht
7757-
date: 2026-04-25
7758-
modified: 2026-04-25
7757+
date: 2026-04-26
7758+
modified: 2026-04-26
77597759
tags:
77607760
- attack.persistence
77617761
- attack.t1176
@@ -7778,8 +7778,8 @@ description: Detects browser extensions categorized as 'password manager' in the
77787778
references:
77797779
- https://github.com/mthcht/awesome-lists
77807780
author: ExtSentry / mthcht
7781-
date: 2026-04-25
7782-
modified: 2026-04-25
7781+
date: 2026-04-26
7782+
modified: 2026-04-26
77837783
tags:
77847784
- attack.persistence
77857785
- attack.t1176
@@ -7810,8 +7810,8 @@ description: Detects browser extensions categorized as 'PROXY/VPN' in the ExtSen
78107810
references:
78117811
- https://github.com/mthcht/awesome-lists
78127812
author: ExtSentry / mthcht
7813-
date: 2026-04-25
7814-
modified: 2026-04-25
7813+
date: 2026-04-26
7814+
modified: 2026-04-26
78157815
tags:
78167816
- attack.persistence
78177817
- attack.t1176
@@ -7840,8 +7840,8 @@ description: |
78407840
references:
78417841
- https://github.com/mthcht/awesome-lists
78427842
author: ExtSentry
7843-
date: 2026-04-25
7844-
modified: 2026-04-25
7843+
date: 2026-04-26
7844+
modified: 2026-04-26
78457845
tags:
78467846
- attack.persistence
78477847
- attack.t1176

0 commit comments

Comments
 (0)