Add PoshC2 detections/extractors

0xThiebaut · Jan 16, 2024 · e306fc6 · e306fc6
1 parent 8dd34f0
commit e306fc6
Show file tree

Hide file tree

Showing 4 changed files with 2,051 additions and 0 deletions.
diff --git a/Extractors/README.md b/Extractors/README.md
@@ -0,0 +1,6 @@
+# Extractors
+This folder contains configuration extractors which can be ran both as standalone scripts as well as through [Karton's configuration extractor].
+> [!CAUTION]
+> The scripts in these repositories rely on [features which have not yet been merged upstream](https://github.com/CERT-Polska/malduck/pull/115). While this is accounted for in `requirements.txt`, Docker images such as those for [Karton's configuration extractor] will need to include these changes as well.
+
+[Karton's configuration extractor]: https://github.com/CERT-Polska/karton-config-extractor