LOLBAS Feed
"Living off the land binaries" is a term used to describe malware or hacking techniques that take advantage of legitimate tools and processes that are already present on a computer or network, rather than introducing new malware or malicious code. The goal is to blend in with normal activity and avoid detection. Examples of this include using built-in Windows commands to move laterally through a network, or using scripting languages that are commonly installed on a system to execute malicious code. LOLBAS project is documenting binaries, scripts, and libraries that can be used for Living Off The Land techniques.
- Category
- Data Enrichment & Threat Intelligence
- Pack
- FeedLOLBAS
Configuration parameters
- base_url — Base URL (required)
- feed — Fetch indicators
- feedReputation — Indicator Reputation
- feedReliability — Source Reliability
- tlp_color — Traffic Light Protocol Color
- feedExpirationInterval —
- feedBypassExclusionList — Bypass exclusion list
- proxy — Use system proxy settings
- insecure — Trust any certificate (not secure)
- feedTags — Tags
- create_relationships — Create relationships
- feedExpirationPolicy —
- feedFetchInterval — Feed Fetch Interval
Commands (1)
- lolbas-get-indicators — Retrieves a limited number of indicators.