Merge branch 'master' into 122_cbc_logging_bug

redcanaryco · Nov 6, 2024 · bcf36e7 · bcf36e7
2 parents b8defed + 3042ee8
commit bcf36e7
Show file tree

Hide file tree

Showing 2 changed files with 25 additions and 3 deletions.
diff --git a/definitions/scripting.json b/definitions/scripting.json
@@ -3,7 +3,7 @@
         "process_name": ["autoit.exe"]
     },
     "Powershell": { 
-        "process_name": ["powershell.exe"]
+        "process_name": ["powershell*.exe", "pwsh.exe", "posh.exe", "runscripthelper.exe"]
     },
     "PSExec": { 
         "process_name": ["psexec*.exe",
@@ -15,9 +15,24 @@
     "WScript": { 
         "process_name": ["wscript.exe"]
     },
+    "Jscript":{
+        "process_name": ["jscript.exe"]
+    },
     "CScript": { 
         "process_name": ["cscript.exe"]
     },
+    "mshta": {
+        "process_name": ["mshta.exe"]
+    },
+    "hh":{
+        "process_name": ["hh.exe"]
+    }, 
+    "Diskshadow": {
+        "process_name":["diskshadow.exe"]
+    }, 
+    "PHP":{
+        "process_name":["php.exe", "php-cgi.exe"]
+    },
     "Python": { 
         "process_name": ["python*.exe",
                          "python*"]
@@ -33,10 +48,17 @@
                          "sh",
                          "bash",
                          "zsh"]
-    }
+    },
+    "msbuild":{
+        "process_name":["msbuild.exe"]
+    }, 
+    "GPscript.exe":{
+        "process_name":["gpscript.exe"]
+    },
     "AutoHotKey": { 
         "process_name": ["autohotkey.exe",
                         "AutoHotkeyU32.exe",
                         "AutoHotkeyA32.exe",
                         "AutoHotkeyU64.exe"]      
+    }
 }
diff --git a/requirements.txt b/requirements.txt
@@ -1,6 +1,6 @@
 click~=8.0.4
 requests~=2.32.3
 cbapi~=2.0.0
-setuptools~=75.2.0
+setuptools~=75.3.0
 tqdm~=4.66.6
 carbon-black-cloud-sdk~=1.5.6