diff --git a/definitions/scripting.json b/definitions/scripting.json index 2eb5744..2b8d1fd 100644 --- a/definitions/scripting.json +++ b/definitions/scripting.json @@ -3,7 +3,7 @@ "process_name": ["autoit.exe"] }, "Powershell": { - "process_name": ["powershell.exe"] + "process_name": ["powershell*.exe", "pwsh.exe", "posh.exe", "runscripthelper.exe"] }, "PSExec": { "process_name": ["psexec*.exe", @@ -15,9 +15,24 @@ "WScript": { "process_name": ["wscript.exe"] }, + "Jscript":{ + "process_name": ["jscript.exe"] + }, "CScript": { "process_name": ["cscript.exe"] }, + "mshta": { + "process_name": ["mshta.exe"] + }, + "hh":{ + "process_name": ["hh.exe"] + }, + "Diskshadow": { + "process_name":["diskshadow.exe"] + }, + "PHP":{ + "process_name":["php.exe", "php-cgi.exe"] + }, "Python": { "process_name": ["python*.exe", "python*"] @@ -33,10 +48,17 @@ "sh", "bash", "zsh"] - } + }, + "msbuild":{ + "process_name":["msbuild.exe"] + }, + "GPscript.exe":{ + "process_name":["gpscript.exe"] + }, "AutoHotKey": { "process_name": ["autohotkey.exe", "AutoHotkeyU32.exe", "AutoHotkeyA32.exe", "AutoHotkeyU64.exe"] + } } diff --git a/requirements.txt b/requirements.txt index 48e98a7..8e0d069 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,6 +1,6 @@ click~=8.0.4 requests~=2.32.3 cbapi~=2.0.0 -setuptools~=75.2.0 +setuptools~=75.3.0 tqdm~=4.66.6 carbon-black-cloud-sdk~=1.5.6