MCPcopy Create free account

hub / github.com/ION28/BLUESPAWN / functions

Functions781 in github.com/ION28/BLUESPAWN

↓ 2 callersFunctionCheckLMCompatibilityLevel
BLUESPAWN-win-client/src/mitigation/mitigations/MitigateV1153.cpp:24
↓ 2 callersFunctionCheckNoLMHash
BLUESPAWN-win-client/src/mitigation/mitigations/MitigateV3379.cpp:22
↓ 2 callersFunctionCheckSMBv1
BLUESPAWN-win-client/src/mitigation/mitigations/MitigateV73519.cpp:25
↓ 2 callersMethodContainsRVA
BLUESPAWN-win-client/src/util/pe/PE_Section.cpp:33
↓ 2 callersMethodConvertRVAToOffset
BLUESPAWN-win-client/src/util/pe/PE_Section.cpp:41
↓ 2 callersMethodDeleteSubkey
BLUESPAWN-win-client/src/util/configurations/RegistryKey.cpp:635
↓ 2 callersMethodDereference
BLUESPAWN-win-client/headers/util/wrappers.hpp:254
↓ 2 callersFunctionEventToEventLogItem
BLUESPAWN-win-client/src/util/eventlogs/EventLogs.cpp:125
↓ 2 callersMethodExists
BLUESPAWN-win-client/src/util/configurations/RegistryKey.cpp:230
↓ 2 callersMethodGet
BLUESPAWN-win-client/src/util/configurations/RegistryKey.cpp:65
↓ 2 callersMethodGetAccessPermissions
BLUESPAWN-win-client/src/util/filesystem/FileSystem.cpp:654
↓ 2 callersMethodGetAssociatedDetections
BLUESPAWN-win-client/src/scan/Scanner.cpp:15
↓ 2 callersFunctionGetCatalog
BLUESPAWN-win-client/src/util/filesystem/FileSystem.cpp:68
↓ 2 callersMethodGetFileAttribs
BLUESPAWN-win-client/src/util/filesystem/FileSystem.cpp:269
↓ 2 callersMethodGetImageInfo
BLUESPAWN-win-client/src/util/pe/Image_Loader.cpp:126
↓ 2 callersMethodGetName
BLUESPAWN-win-client/src/util/pe/Image_Loader.cpp:62
↓ 2 callersMethodGetPolicies
BLUESPAWN-win-client/src/mitigation/Mitigation.cpp:114
↓ 2 callersMethodGetRelocRVAs
BLUESPAWN-win-client/src/util/pe/Relocation_Section.cpp:25
↓ 2 callersMethodGetSignature
BLUESPAWN-win-client/src/util/pe/PE_Section.cpp:45
↓ 2 callersMethodGetVersion
BLUESPAWN-win-client/src/mitigation/Software.cpp:115
↓ 2 callersMethodGetVersionMatch
BLUESPAWN-win-client/src/mitigation/policy/MitigationPolicy.cpp:42
↓ 2 callersMethodGrantPermissions
BLUESPAWN-win-client/src/util/filesystem/FileSystem.cpp:690
↓ 2 callersMethodHasWriteAccess
BLUESPAWN-win-client/src/util/filesystem/FileSystem.cpp:273
↓ 2 callersFunctionIsLolbinMalicious
BLUESPAWN-win-client/src/util/processes/CheckLolbin.cpp:127
↓ 2 callersFunctionIsPEFile
BLUESPAWN-win-client/src/scan/FileScanner.cpp:134
↓ 2 callersFunctionLimitBlankPasswordUse
BLUESPAWN-win-client/src/mitigation/mitigations/MitigateV3344.cpp:22
↓ 2 callersMethodLoadAllImports
BLUESPAWN-win-client/src/util/pe/Import_Section.cpp:128
↓ 2 callersMethodLoadTo
BLUESPAWN-win-client/src/util/pe/PE_Image.cpp:90
↓ 2 callersFunctionOpenChannel
BLUESPAWN-win-client/src/util/eventlogs/EventLogs.cpp:269
↓ 2 callersFunctionParseLevelName
BLUESPAWN-win-client/src/mitigation/MitigationRegister.cpp:14
↓ 2 callersMethodPrintMitigationReports
BLUESPAWN-win-client/src/mitigation/MitigationRegister.cpp:149
↓ 2 callersMethodProtect
BLUESPAWN-win-client/headers/util/wrappers.hpp:305
↓ 2 callersMethodReact
BLUESPAWN-win-client/src/reaction/DeleteFile.cpp:13
↓ 2 callersMethodRecordAssociation
BLUESPAWN-win-client/src/util/log/XMLSink.cpp:192
↓ 2 callersMethodRemoveImage
BLUESPAWN-win-client/src/util/processes/PERemover.cpp:32
↓ 2 callersMethodScanFile
BLUESPAWN-win-client/src/scan/YaraScanner.cpp:161
↓ 2 callersMethodScanMemory
BLUESPAWN-win-client/src/scan/YaraScanner.cpp:186
↓ 2 callersMethodTakeOwnership
BLUESPAWN-win-client/src/util/filesystem/FileSystem.cpp:682
↓ 2 callersFunctionTokenizeCommand
BLUESPAWN-win-client/src/util/processes/CommandParser.cpp:55
↓ 2 callersMethodTrySubscribe
BLUESPAWN-win-client/src/monitor/EventListener.cpp:97
↓ 2 callersFunctionUpdateObjectACL
BLUESPAWN-win-client/src/util/permissions/permissions.cpp:79
↓ 2 callersMethodValidatePE
BLUESPAWN-win-client/src/util/pe/PE_Image.cpp:5
↓ 2 callersMethodWait
BLUESPAWN-win-client/src/util/ThreadPool.cpp:108
↓ 2 callersFunctiongetAddress
Function adopted from https://stackoverflow.com/questions/20833453/comparing-stdfunctions-for-equality
BLUESPAWN-win-client/src/monitor/EventListener.cpp:182
↓ 1 callersFunctionAccessAddAll
BLUESPAWN-win-client/src/util/permissions/permissions.cpp:41
↓ 1 callersFunctionAccessAddDelete
BLUESPAWN-win-client/src/util/permissions/permissions.cpp:61
↓ 1 callersFunctionAccessIncludesWrite
BLUESPAWN-win-client/src/util/permissions/permissions.cpp:13
↓ 1 callersMethodAddBadRule
BLUESPAWN-win-client/src/scan/YaraScanner.cpp:221
↓ 1 callersMethodAddExceptionHandler
BLUESPAWN-win-client/src/util/ThreadPool.cpp:103
↓ 1 callersMethodAddHandler
BLUESPAWN-win-client/src/reaction/ReactionManager.cpp:23
↓ 1 callersMethodAddIndicatorRule
BLUESPAWN-win-client/src/scan/YaraScanner.cpp:225
↓ 1 callersMethodAddReaction
BLUESPAWN-win-client/src/user/BLUESPAWN.cpp:130
↓ 1 callersMethodAddSink
BLUESPAWN-win-client/src/util/log/LogLevel.cpp:39
↓ 1 callersMethodApplies
BLUESPAWN-win-client/src/reaction/DeleteFile.cpp:43
↓ 1 callersMethodAuditMitigation
BLUESPAWN-win-client/src/mitigation/Mitigation.cpp:75
↓ 1 callersMethodAuditMitigations
BLUESPAWN-win-client/src/mitigation/MitigationRegister.cpp:140
↓ 1 callersMethodContainsOffset
BLUESPAWN-win-client/src/util/pe/PE_Section.cpp:29
↓ 1 callersMethodConvertOffsetToRVA
BLUESPAWN-win-client/src/util/pe/PE_Section.cpp:37
↓ 1 callersMethodCreateConfig
BLUESPAWN-win-client/src/mitigation/MitigationRegister.cpp:204
↓ 1 callersMethodDecrement
BLUESPAWN-win-client/src/util/configurations/RegistryKey.cpp:54
↓ 1 callersMethodEnforce
BLUESPAWN-win-client/src/mitigation/policy/CombinePolicy.cpp:52
↓ 1 callersMethodEnforceMitigation
BLUESPAWN-win-client/src/mitigation/Mitigation.cpp:97
↓ 1 callersMethodEnforceMitigations
BLUESPAWN-win-client/src/mitigation/MitigationRegister.cpp:131
↓ 1 callersFunctionEnumModules
BLUESPAWN-win-client/src/util/processes/ProcessUtils.cpp:150
↓ 1 callersFunctionFindBeaconInfo
BLUESPAWN-win-client/src/util/processes/ParseCobalt.cpp:59
↓ 1 callersFunctionFindBeaconInfoQuick
BLUESPAWN-win-client/src/util/processes/ParseCobalt.cpp:13
↓ 1 callersMethodFlush
BLUESPAWN-win-client/src/util/log/XMLSink.cpp:234
↓ 1 callersMethodFlush
BLUESPAWN-win-client/src/util/log/JSONSink.cpp:238
↓ 1 callersMethodFufill
* Attempts to fufill the promise with a value. This will trigger the functions * registered with OnSuccess if successful. * * @return True if
BLUESPAWN-win-client/headers/util/Promise.h:162
↓ 1 callersMethodFufilled
* Indicates whether the promise has been fufilled. * * @return true if this promise has been fufilled; false otherwise. */
BLUESPAWN-win-client/headers/util/Promise.h:223
↓ 1 callersMethodGetAccessTime
BLUESPAWN-win-client/src/util/filesystem/FileSystem.cpp:739
↓ 1 callersFunctionGetAggressiveness
BLUESPAWN-win-client/src/user/BLUESPAWN.cpp:275
↓ 1 callersFunctionGetArgumentTokens
BLUESPAWN-win-client/src/util/processes/CommandParser.cpp:100
↓ 1 callersMethodGetCertificateIssuer
BLUESPAWN-win-client/src/util/filesystem/FileSystem.cpp:456
↓ 1 callersMethodGetChannel
BLUESPAWN-win-client/src/monitor/Event.cpp:38
↓ 1 callersMethodGetCreationTime
BLUESPAWN-win-client/src/util/filesystem/FileSystem.cpp:709
↓ 1 callersMethodGetCurIsFile
BLUESPAWN-win-client/src/util/filesystem/FileSystem.cpp:821
↓ 1 callersMethodGetEnforcementLevel
BLUESPAWN-win-client/src/mitigation/policy/MitigationPolicy.cpp:9
↓ 1 callersMethodGetEventID
BLUESPAWN-win-client/src/monitor/Event.cpp:42
↓ 1 callersMethodGetExportAddress
BLUESPAWN-win-client/src/util/pe/Export_Section.cpp:68
↓ 1 callersMethodGetFileSize
BLUESPAWN-win-client/src/util/filesystem/FileSystem.cpp:608
↓ 1 callersMethodGetFolderWrite
BLUESPAWN-win-client/src/util/filesystem/FileSystem.cpp:823
↓ 1 callersMethodGetMD5Hash
BLUESPAWN-win-client/src/util/filesystem/FileSystem.cpp:528
↓ 1 callersFunctionGetMappedFile
BLUESPAWN-win-client/src/util/processes/ProcessUtils.cpp:263
↓ 1 callersMethodGetMonitoringEvents
BLUESPAWN-win-client/src/hunt/Hunt.cpp:26
↓ 1 callersMethodGetRVA
BLUESPAWN-win-client/src/util/pe/Relocation_Section.cpp:12
↓ 1 callersMethodGetRequiredLibraries
BLUESPAWN-win-client/src/util/pe/Import_Section.cpp:139
↓ 1 callersFunctionGetResource
BLUESPAWN-win-client/src/hunt/hunts/HuntT1553.cpp:32
↓ 1 callersMethodGetSHA1Hash
BLUESPAWN-win-client/src/util/filesystem/FileSystem.cpp:533
↓ 1 callersMethodGetTimeCreated
BLUESPAWN-win-client/src/util/eventlogs/EventLogItem.cpp:20
↓ 1 callersMethodGetValue
BLUESPAWN-win-client/src/util/configurations/RegistryKey.cpp:352
↓ 1 callersMethodInitialize
BLUESPAWN-win-client/src/mitigation/MitigationRegister.cpp:114
↓ 1 callersMethodInvalidate
* Attempts to invalidate the promise, indicating that no value ever be * returned. This will trigger the functions registered with OnFailure if *
BLUESPAWN-win-client/headers/util/Promise.h:194
↓ 1 callersFunctionIsLolbin
BLUESPAWN-win-client/src/util/processes/CheckLolbin.cpp:101
↓ 1 callersMethodIsPresent
BLUESPAWN-win-client/src/mitigation/Software.cpp:112
↓ 1 callersMethodLoadImportLibrary
BLUESPAWN-win-client/src/util/pe/Import_Section.cpp:97
↓ 1 callersFunctionLoadLibraries
BLUESPAWN-win-client/src/util/pe/Import_Section.cpp:8
↓ 1 callersMethodLogMessage
BLUESPAWN-win-client/src/util/log/Log.cpp:36
↓ 1 callersMethodMatchesAttributes
BLUESPAWN-win-client/src/util/filesystem/FileSystem.cpp:394
↓ 1 callersMethodMatchesSystem
BLUESPAWN-win-client/src/mitigation/policy/CombinePolicy.cpp:73
← previousnext →101–200 of 781, ranked by callers