google / timesketch

Collaborative forensic timeline analysis
Apache License 2.0
2.62k stars 589 forks source link

Add 🐀 emoji for remote access tools #2779

Closed pemontto closed 1 year ago

pemontto commented 1 year ago

Add emoji to represent remote access tools & sort the top of the list alphabetically

pemontto commented 1 year ago

Example usage:

remote_admin:
  query_string: 'message:("acticalRMM" OR "Action1" OR "AeroAdmin" OR "Ammyy" OR "AnyDesk" OR "Atera" OR "awesome-rat" OR "chaos" OR "Chrome Remote Desktop" OR "ConnectWise" OR "Dameware" OR "DameWare Mini Remote Control" OR "Deployment tools" OR "eHorus" OR "Fixme" OR "FlawedAmmyy" OR "friendspeak" OR "Get2" OR "getandgo" OR "GoToAssist" OR "Intelliadmin" OR "LogMeIn" OR "MeshCentral" OR "mRemoteNG" OR "NetSupport" OR "ngrok" OR "NinjaRMM" OR "nssm" OR "OCS Agent" OR "PDQDeploy" OR "Plink" OR "QuickAssist" OR "Radmin" OR "RealVNC" OR "Remote Manipulator System" OR "Remote Utilities" OR "Remote Utilities" OR "RemotePC" OR "RMS" OR "rustdesk" OR "ScreenConnect" OR "Splashtop" OR "SupRemo" OR "Syncro" OR "tacticalrmm" OR "Tanium" OR "TeamViewer" OR "TigerVNC" OR "TightVNC" OR "tmate" OR "UltraViewer" OR "VNCconnect" OR "WAPT" OR "Webex remote" OR "ZohoAssist")'
  tags: ['remote-admin']
  emojis: ['RAT']
  save_search: true
  search_name: 'Potential Remote Admin/Access Tools'