diff --git a/bin/jinja2_templates/rmm.md.j2 b/bin/jinja2_templates/rmm.md.j2 index 78ae707e..609b615a 100644 --- a/bin/jinja2_templates/rmm.md.j2 +++ b/bin/jinja2_templates/rmm.md.j2 @@ -111,5 +111,6 @@ import {EuiSpacer} from "@elastic/eui" ### Acknowledgements {% for ack in rmm.Acknowledgement %} - {{ ack.Person }}{% if ack.Handle %} ({{ ack.Handle }}){% endif %} + {% endfor %} {% endif %} diff --git a/website/package-lock.json b/website/package-lock.json new file mode 100644 index 00000000..623ca3e4 --- /dev/null +++ b/website/package-lock.json @@ -0,0 +1,10406 @@ +{ + "name": "LOLRMM", + "version": "0.0.1", + "lockfileVersion": 3, + "requires": true, + "packages": { + "": { + "name": "LOLRMM", + "version": "0.0.1", + "license": "MIT", + "dependencies": { + "@elastic/datemath": "^5.0.3", + "@elastic/eui": "^95.9.0", + "@emotion/css": "^11.13.0", + "@emotion/react": "^11.13.3", + "@fortawesome/fontawesome-svg-core": "^6.6.0", + "@fortawesome/free-brands-svg-icons": "^6.6.0", + "@fortawesome/free-solid-svg-icons": "^6.6.0", + "@fortawesome/react-fontawesome": "^0.2.2", + "@tanstack/react-query": "^5.52.2", + "@vercel/analytics": "^1.3.1", + "autoprefixer": "^10.4.20", + "axios": "^1.7.5", + "classnames": "^2.5.1", + "lodash": "^4.17.21", + "moment": "^2.30.1", + "next": "^14.2.7", + "nextra": "^2.13.4", + "nextra-theme-docs": "^2.13.4", + "papaparse": "^5.4.1", + "postcss": "^8.4.41", + "prop-types": "^15.8.1", + "react": "^18.3.1", + "react-dom": "^18.3.1", + "sharp": "^0.33.5", + "tailwindcss": "^3.4.10" + }, + "devDependencies": { + "@biomejs/biome": "1.8.3", + "@types/node": "22.1.0", + "@types/react": "^18.3.4", + "@types/react-dom": "^18.3.0", + "typescript": "~4.5.5" + } + }, + "node_modules/@alloc/quick-lru": { + "version": "5.2.0", + "resolved": "https://registry.npmjs.org/@alloc/quick-lru/-/quick-lru-5.2.0.tgz", + "integrity": "sha512-UrcABB+4bUrFABwbluTIBErXwvbsU/V7TZWfmbgJfbkwiBuziS9gxdODUyuiecfdGQ85jglMW6juS3+z5TsKLw==", + "license": "MIT", + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/@babel/code-frame": { + "version": "7.24.7", + "resolved": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.24.7.tgz", + "integrity": "sha512-BcYH1CVJBO9tvyIZ2jVeXgSIMvGZ2FDRvDdOIVQyuklNKSsx+eppDEBq/g47Ayw+RqNFE+URvOShmf+f/qwAlA==", + "license": "MIT", + "dependencies": { + "@babel/highlight": "^7.24.7", + "picocolors": "^1.0.0" + }, + "engines": { + "node": ">=6.9.0" + } + }, + "node_modules/@babel/generator": { + "version": "7.25.5", + "resolved": "https://registry.npmjs.org/@babel/generator/-/generator-7.25.5.tgz", + "integrity": "sha512-abd43wyLfbWoxC6ahM8xTkqLpGB2iWBVyuKC9/srhFunCd1SDNrV1s72bBpK4hLj8KLzHBBcOblvLQZBNw9r3w==", + "license": "MIT", + "dependencies": { + "@babel/types": "^7.25.4", + "@jridgewell/gen-mapping": "^0.3.5", + "@jridgewell/trace-mapping": "^0.3.25", + "jsesc": "^2.5.1" + }, + "engines": { + "node": ">=6.9.0" + } + }, + "node_modules/@babel/helper-module-imports": { + "version": "7.24.7", + "resolved": "https://registry.npmjs.org/@babel/helper-module-imports/-/helper-module-imports-7.24.7.tgz", + "integrity": "sha512-8AyH3C+74cgCVVXow/myrynrAGv+nTVg5vKu2nZph9x7RcRwzmh0VFallJuFTZ9mx6u4eSdXZfcOzSqTUm0HCA==", + "license": "MIT", + "dependencies": { + "@babel/traverse": "^7.24.7", + "@babel/types": "^7.24.7" + }, + "engines": { + "node": ">=6.9.0" + } + }, + "node_modules/@babel/helper-string-parser": { + "version": "7.24.8", + "resolved": "https://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.24.8.tgz", + "integrity": "sha512-pO9KhhRcuUyGnJWwyEgnRJTSIZHiT+vMD0kPeD+so0l7mxkMT19g3pjY9GTnHySck/hDzq+dtW/4VgnMkippsQ==", + "license": "MIT", + "engines": { + "node": ">=6.9.0" + } + }, + "node_modules/@babel/helper-validator-identifier": { + "version": "7.24.7", + "resolved": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.24.7.tgz", + "integrity": "sha512-rR+PBcQ1SMQDDyF6X0wxtG8QyLCgUB0eRAGguqRLfkCA87l7yAP7ehq8SNj96OOGTO8OBV70KhuFYcIkHXOg0w==", + "license": "MIT", + "engines": { + "node": ">=6.9.0" + } + }, + "node_modules/@babel/highlight": { + "version": "7.24.7", + "resolved": "https://registry.npmjs.org/@babel/highlight/-/highlight-7.24.7.tgz", + "integrity": "sha512-EStJpq4OuY8xYfhGVXngigBJRWxftKX9ksiGDnmlY3o7B/V7KIAc9X4oiK87uPJSc/vs5L869bem5fhZa8caZw==", + "license": "MIT", + "dependencies": { + "@babel/helper-validator-identifier": "^7.24.7", + "chalk": "^2.4.2", + "js-tokens": "^4.0.0", + "picocolors": "^1.0.0" + }, + "engines": { + "node": ">=6.9.0" + } + }, + "node_modules/@babel/parser": { + "version": "7.25.4", + "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.25.4.tgz", + "integrity": "sha512-nq+eWrOgdtu3jG5Os4TQP3x3cLA8hR8TvJNjD8vnPa20WGycimcparWnLK4jJhElTK6SDyuJo1weMKO/5LpmLA==", + "license": "MIT", + "dependencies": { + "@babel/types": "^7.25.4" + }, + "bin": { + "parser": "bin/babel-parser.js" + }, + "engines": { + "node": ">=6.0.0" + } + }, + "node_modules/@babel/runtime": { + "version": "7.25.4", + "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.25.4.tgz", + "integrity": "sha512-DSgLeL/FNcpXuzav5wfYvHCGvynXkJbn3Zvc3823AEe9nPwW9IK4UoCSS5yGymmQzN0pCPvivtgS6/8U2kkm1w==", + "license": "MIT", + "dependencies": { + "regenerator-runtime": "^0.14.0" + }, + "engines": { + "node": ">=6.9.0" + } + }, + "node_modules/@babel/template": { + "version": "7.25.0", + "resolved": "https://registry.npmjs.org/@babel/template/-/template-7.25.0.tgz", + "integrity": "sha512-aOOgh1/5XzKvg1jvVz7AVrx2piJ2XBi227DHmbY6y+bM9H2FlN+IfecYu4Xl0cNiiVejlsCri89LUsbj8vJD9Q==", + "license": "MIT", + "dependencies": { + "@babel/code-frame": "^7.24.7", + "@babel/parser": "^7.25.0", + "@babel/types": "^7.25.0" + }, + "engines": { + "node": ">=6.9.0" + } + }, + "node_modules/@babel/traverse": { + "version": "7.25.4", + "resolved": "https://registry.npmjs.org/@babel/traverse/-/traverse-7.25.4.tgz", + "integrity": "sha512-VJ4XsrD+nOvlXyLzmLzUs/0qjFS4sK30te5yEFlvbbUNEgKaVb2BHZUpAL+ttLPQAHNrsI3zZisbfha5Cvr8vg==", + "license": "MIT", + "dependencies": { + "@babel/code-frame": "^7.24.7", + "@babel/generator": "^7.25.4", + "@babel/parser": "^7.25.4", + "@babel/template": "^7.25.0", + "@babel/types": "^7.25.4", + "debug": "^4.3.1", + "globals": "^11.1.0" + }, + "engines": { + "node": ">=6.9.0" + } + }, + "node_modules/@babel/types": { + "version": "7.25.4", + "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.25.4.tgz", + "integrity": "sha512-zQ1ijeeCXVEh+aNL0RlmkPkG8HUiDcU2pzQQFjtbntgAczRASFzj4H+6+bV+dy1ntKR14I/DypeuRG1uma98iQ==", + "license": "MIT", + "dependencies": { + "@babel/helper-string-parser": "^7.24.8", + "@babel/helper-validator-identifier": "^7.24.7", + "to-fast-properties": "^2.0.0" + }, + "engines": { + "node": ">=6.9.0" + } + }, + "node_modules/@base2/pretty-print-object": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/@base2/pretty-print-object/-/pretty-print-object-1.0.1.tgz", + "integrity": "sha512-4iri8i1AqYHJE2DstZYkyEprg6Pq6sKx3xn5FpySk9sNhH7qN2LLlHJCfDTZRILNwQNPD7mATWM0TBui7uC1pA==", + "license": "BSD-2-Clause" + }, + "node_modules/@biomejs/biome": { + "version": "1.8.3", + "resolved": "https://registry.npmjs.org/@biomejs/biome/-/biome-1.8.3.tgz", + "integrity": "sha512-/uUV3MV+vyAczO+vKrPdOW0Iaet7UnJMU4bNMinggGJTAnBPjCoLEYcyYtYHNnUNYlv4xZMH6hVIQCAozq8d5w==", + "dev": true, + "hasInstallScript": true, + "license": "MIT OR Apache-2.0", + "bin": { + "biome": "bin/biome" + }, + "engines": { + "node": ">=14.21.3" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/biome" + }, + "optionalDependencies": { + "@biomejs/cli-darwin-arm64": "1.8.3", + "@biomejs/cli-darwin-x64": "1.8.3", + "@biomejs/cli-linux-arm64": "1.8.3", + "@biomejs/cli-linux-arm64-musl": "1.8.3", + "@biomejs/cli-linux-x64": "1.8.3", + "@biomejs/cli-linux-x64-musl": "1.8.3", + "@biomejs/cli-win32-arm64": "1.8.3", + "@biomejs/cli-win32-x64": "1.8.3" + } + }, + "node_modules/@biomejs/cli-darwin-arm64": { + "version": "1.8.3", + "resolved": "https://registry.npmjs.org/@biomejs/cli-darwin-arm64/-/cli-darwin-arm64-1.8.3.tgz", + "integrity": "sha512-9DYOjclFpKrH/m1Oz75SSExR8VKvNSSsLnVIqdnKexj6NwmiMlKk94Wa1kZEdv6MCOHGHgyyoV57Cw8WzL5n3A==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT OR Apache-2.0", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": ">=14.21.3" + } + }, + "node_modules/@biomejs/cli-darwin-x64": { + "version": "1.8.3", + "resolved": "https://registry.npmjs.org/@biomejs/cli-darwin-x64/-/cli-darwin-x64-1.8.3.tgz", + "integrity": "sha512-UeW44L/AtbmOF7KXLCoM+9PSgPo0IDcyEUfIoOXYeANaNXXf9mLUwV1GeF2OWjyic5zj6CnAJ9uzk2LT3v/wAw==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT OR Apache-2.0", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": ">=14.21.3" + } + }, + "node_modules/@biomejs/cli-linux-arm64": { + "version": "1.8.3", + "resolved": "https://registry.npmjs.org/@biomejs/cli-linux-arm64/-/cli-linux-arm64-1.8.3.tgz", + "integrity": "sha512-fed2ji8s+I/m8upWpTJGanqiJ0rnlHOK3DdxsyVLZQ8ClY6qLuPc9uehCREBifRJLl/iJyQpHIRufLDeotsPtw==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT OR Apache-2.0", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=14.21.3" + } + }, + "node_modules/@biomejs/cli-linux-arm64-musl": { + "version": "1.8.3", + "resolved": "https://registry.npmjs.org/@biomejs/cli-linux-arm64-musl/-/cli-linux-arm64-musl-1.8.3.tgz", + "integrity": "sha512-9yjUfOFN7wrYsXt/T/gEWfvVxKlnh3yBpnScw98IF+oOeCYb5/b/+K7YNqKROV2i1DlMjg9g/EcN9wvj+NkMuQ==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT OR Apache-2.0", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=14.21.3" + } + }, + "node_modules/@biomejs/cli-linux-x64": { + "version": "1.8.3", + "resolved": "https://registry.npmjs.org/@biomejs/cli-linux-x64/-/cli-linux-x64-1.8.3.tgz", + "integrity": "sha512-I8G2QmuE1teISyT8ie1HXsjFRz9L1m5n83U1O6m30Kw+kPMPSKjag6QGUn+sXT8V+XWIZxFFBoTDEDZW2KPDDw==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT OR Apache-2.0", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=14.21.3" + } + }, + "node_modules/@biomejs/cli-linux-x64-musl": { + "version": "1.8.3", + "resolved": "https://registry.npmjs.org/@biomejs/cli-linux-x64-musl/-/cli-linux-x64-musl-1.8.3.tgz", + "integrity": "sha512-UHrGJX7PrKMKzPGoEsooKC9jXJMa28TUSMjcIlbDnIO4EAavCoVmNQaIuUSH0Ls2mpGMwUIf+aZJv657zfWWjA==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT OR Apache-2.0", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=14.21.3" + } + }, + "node_modules/@biomejs/cli-win32-arm64": { + "version": "1.8.3", + "resolved": "https://registry.npmjs.org/@biomejs/cli-win32-arm64/-/cli-win32-arm64-1.8.3.tgz", + "integrity": "sha512-J+Hu9WvrBevfy06eU1Na0lpc7uR9tibm9maHynLIoAjLZpQU3IW+OKHUtyL8p6/3pT2Ju5t5emReeIS2SAxhkQ==", + "cpu": [ + "arm64" + ], + "dev": true, + "license": "MIT OR Apache-2.0", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">=14.21.3" + } + }, + "node_modules/@biomejs/cli-win32-x64": { + "version": "1.8.3", + "resolved": "https://registry.npmjs.org/@biomejs/cli-win32-x64/-/cli-win32-x64-1.8.3.tgz", + "integrity": "sha512-/PJ59vA1pnQeKahemaQf4Nyj7IKUvGQSc3Ze1uIGi+Wvr1xF7rGobSrAAG01T/gUDG21vkDsZYM03NAmPiVkqg==", + "cpu": [ + "x64" + ], + "dev": true, + "license": "MIT OR Apache-2.0", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">=14.21.3" + } + }, + "node_modules/@braintree/sanitize-url": { + "version": "6.0.4", + "resolved": "https://registry.npmjs.org/@braintree/sanitize-url/-/sanitize-url-6.0.4.tgz", + "integrity": "sha512-s3jaWicZd0pkP0jf5ysyHUI/RE7MHos6qlToFcGWXVp+ykHOy77OUMrfbgJ9it2C5bow7OIQwYYaHjk9XlBQ2A==", + "license": "MIT" + }, + "node_modules/@elastic/datemath": { + "version": "5.0.3", + "resolved": "https://registry.npmjs.org/@elastic/datemath/-/datemath-5.0.3.tgz", + "integrity": "sha512-8Hbr1Uyjm5OcYBfEB60K7sCP6U3IXuWDaLaQmYv3UxgI4jqBWbakoemwWvsqPVUvnwEjuX6z7ghPZbefs8xiaA==", + "license": "Apache-2.0", + "dependencies": { + "tslib": "^1.9.3" + }, + "peerDependencies": { + "moment": "^2.24.0" + } + }, + "node_modules/@elastic/eui": { + "version": "95.9.0", + "resolved": "https://registry.npmjs.org/@elastic/eui/-/eui-95.9.0.tgz", + "integrity": "sha512-Ppna5bGjamttqHdwhYYrdXOprF3OpEY0schX7mOVJmtpcBtp7wAMYQq/bBELBVb7idO4NytbzI1Q6R6NYs5Tdg==", + "license": "SEE LICENSE IN LICENSE.txt", + "dependencies": { + "@hello-pangea/dnd": "^16.6.0", + "@types/lodash": "^4.14.202", + "@types/numeral": "^2.0.5", + "@types/react-window": "^1.8.8", + "@types/refractor": "^3.4.0", + "chroma-js": "^2.4.2", + "classnames": "^2.5.1", + "lodash": "^4.17.21", + "mdast-util-to-hast": "^10.2.0", + "numeral": "^2.0.6", + "prop-types": "^15.8.1", + "react-dropzone": "^11.7.1", + "react-element-to-jsx-string": "^15.0.0", + "react-focus-on": "^3.9.1", + "react-is": "^17.0.2", + "react-remove-scroll-bar": "^2.3.4", + "react-virtualized-auto-sizer": "^1.0.24", + "react-window": "^1.8.10", + "refractor": "^3.6.0", + "rehype-raw": "^5.1.0", + "rehype-react": "^6.2.1", + "rehype-stringify": "^8.0.0", + "remark-breaks": "^2.0.2", + "remark-emoji": "^2.1.0", + "remark-parse-no-trim": "^8.0.4", + "remark-rehype": "^8.1.0", + "tabbable": "^5.3.3", + "text-diff": "^1.0.1", + "unified": "^9.2.2", + "unist-util-visit": "^2.0.3", + "url-parse": "^1.5.10", + "uuid": "^8.3.0", + "vfile": "^4.2.1" + }, + "engines": { + "node": "16.x || 18.x || >=20.x" + }, + "peerDependencies": { + "@elastic/datemath": "^5.0.2", + "@emotion/css": "11.x", + "@emotion/react": "11.x", + "@types/react": "^16.9 || ^17.0 || ^18.0", + "@types/react-dom": "^16.9 || ^17.0 || ^18.0", + "moment": "^2.13.0", + "react": "^16.12 || ^17.0 || ^18.0", + "react-dom": "^16.12 || ^17.0 || ^18.0", + "typescript": "~4.5.3 || ^5" + } + }, + "node_modules/@emnapi/runtime": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.2.0.tgz", + "integrity": "sha512-bV21/9LQmcQeCPEg3BDFtvwL6cwiTMksYNWQQ4KOxCZikEGalWtenoZ0wCiukJINlGCIi2KXx01g4FoH/LxpzQ==", + "license": "MIT", + "optional": true, + "dependencies": { + "tslib": "^2.4.0" + } + }, + "node_modules/@emnapi/runtime/node_modules/tslib": { + "version": "2.7.0", + "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.7.0.tgz", + "integrity": "sha512-gLXCKdN1/j47AiHiOkJN69hJmcbGTHI0ImLmbYLHykhgeN0jVGola9yVjFgzCUklsZQMW55o+dW7IXv3RCXDzA==", + "license": "0BSD", + "optional": true + }, + "node_modules/@emotion/babel-plugin": { + "version": "11.12.0", + "resolved": "https://registry.npmjs.org/@emotion/babel-plugin/-/babel-plugin-11.12.0.tgz", + "integrity": "sha512-y2WQb+oP8Jqvvclh8Q55gLUyb7UFvgv7eJfsj7td5TToBrIUtPay2kMrZi4xjq9qw2vD0ZR5fSho0yqoFgX7Rw==", + "license": "MIT", + "dependencies": { + "@babel/helper-module-imports": "^7.16.7", + "@babel/runtime": "^7.18.3", + "@emotion/hash": "^0.9.2", + "@emotion/memoize": "^0.9.0", + "@emotion/serialize": "^1.2.0", + "babel-plugin-macros": "^3.1.0", + "convert-source-map": "^1.5.0", + "escape-string-regexp": "^4.0.0", + "find-root": "^1.1.0", + "source-map": "^0.5.7", + "stylis": "4.2.0" + } + }, + "node_modules/@emotion/cache": { + "version": "11.13.1", + "resolved": "https://registry.npmjs.org/@emotion/cache/-/cache-11.13.1.tgz", + "integrity": "sha512-iqouYkuEblRcXmylXIwwOodiEK5Ifl7JcX7o6V4jI3iW4mLXX3dmt5xwBtIkJiQEXFAI+pC8X0i67yiPkH9Ucw==", + "license": "MIT", + "dependencies": { + "@emotion/memoize": "^0.9.0", + "@emotion/sheet": "^1.4.0", + "@emotion/utils": "^1.4.0", + "@emotion/weak-memoize": "^0.4.0", + "stylis": "4.2.0" + } + }, + "node_modules/@emotion/css": { + "version": "11.13.0", + "resolved": "https://registry.npmjs.org/@emotion/css/-/css-11.13.0.tgz", + "integrity": "sha512-BUk99ylT+YHl+W/HN7nv1RCTkDYmKKqa1qbvM/qLSQEg61gipuBF5Hptk/2/ERmX2DCv0ccuFGhz9i0KSZOqPg==", + "license": "MIT", + "dependencies": { + "@emotion/babel-plugin": "^11.12.0", + "@emotion/cache": "^11.13.0", + "@emotion/serialize": "^1.3.0", + "@emotion/sheet": "^1.4.0", + "@emotion/utils": "^1.4.0" + } + }, + "node_modules/@emotion/hash": { + "version": "0.9.2", + "resolved": "https://registry.npmjs.org/@emotion/hash/-/hash-0.9.2.tgz", + "integrity": "sha512-MyqliTZGuOm3+5ZRSaaBGP3USLw6+EGykkwZns2EPC5g8jJ4z9OrdZY9apkl3+UP9+sdz76YYkwCKP5gh8iY3g==", + "license": "MIT" + }, + "node_modules/@emotion/memoize": { + "version": "0.9.0", + "resolved": "https://registry.npmjs.org/@emotion/memoize/-/memoize-0.9.0.tgz", + "integrity": "sha512-30FAj7/EoJ5mwVPOWhAyCX+FPfMDrVecJAM+Iw9NRoSl4BBAQeqj4cApHHUXOVvIPgLVDsCFoz/hGD+5QQD1GQ==", + "license": "MIT" + }, + "node_modules/@emotion/react": { + "version": "11.13.3", + "resolved": "https://registry.npmjs.org/@emotion/react/-/react-11.13.3.tgz", + "integrity": "sha512-lIsdU6JNrmYfJ5EbUCf4xW1ovy5wKQ2CkPRM4xogziOxH1nXxBSjpC9YqbFAP7circxMfYp+6x676BqWcEiixg==", + "license": "MIT", + "dependencies": { + "@babel/runtime": "^7.18.3", + "@emotion/babel-plugin": "^11.12.0", + "@emotion/cache": "^11.13.0", + "@emotion/serialize": "^1.3.1", + "@emotion/use-insertion-effect-with-fallbacks": "^1.1.0", + "@emotion/utils": "^1.4.0", + "@emotion/weak-memoize": "^0.4.0", + "hoist-non-react-statics": "^3.3.1" + }, + "peerDependencies": { + "react": ">=16.8.0" + }, + "peerDependenciesMeta": { + "@types/react": { + "optional": true + } + } + }, + "node_modules/@emotion/serialize": { + "version": "1.3.1", + "resolved": "https://registry.npmjs.org/@emotion/serialize/-/serialize-1.3.1.tgz", + "integrity": "sha512-dEPNKzBPU+vFPGa+z3axPRn8XVDetYORmDC0wAiej+TNcOZE70ZMJa0X7JdeoM6q/nWTMZeLpN/fTnD9o8MQBA==", + "license": "MIT", + "dependencies": { + "@emotion/hash": "^0.9.2", + "@emotion/memoize": "^0.9.0", + "@emotion/unitless": "^0.10.0", + "@emotion/utils": "^1.4.0", + "csstype": "^3.0.2" + } + }, + "node_modules/@emotion/sheet": { + "version": "1.4.0", + "resolved": "https://registry.npmjs.org/@emotion/sheet/-/sheet-1.4.0.tgz", + "integrity": "sha512-fTBW9/8r2w3dXWYM4HCB1Rdp8NLibOw2+XELH5m5+AkWiL/KqYX6dc0kKYlaYyKjrQ6ds33MCdMPEwgs2z1rqg==", + "license": "MIT" + }, + "node_modules/@emotion/unitless": { + "version": "0.10.0", + "resolved": "https://registry.npmjs.org/@emotion/unitless/-/unitless-0.10.0.tgz", + "integrity": "sha512-dFoMUuQA20zvtVTuxZww6OHoJYgrzfKM1t52mVySDJnMSEa08ruEvdYQbhvyu6soU+NeLVd3yKfTfT0NeV6qGg==", + "license": "MIT" + }, + "node_modules/@emotion/use-insertion-effect-with-fallbacks": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/@emotion/use-insertion-effect-with-fallbacks/-/use-insertion-effect-with-fallbacks-1.1.0.tgz", + "integrity": "sha512-+wBOcIV5snwGgI2ya3u99D7/FJquOIniQT1IKyDsBmEgwvpxMNeS65Oib7OnE2d2aY+3BU4OiH+0Wchf8yk3Hw==", + "license": "MIT", + "peerDependencies": { + "react": ">=16.8.0" + } + }, + "node_modules/@emotion/utils": { + "version": "1.4.0", + "resolved": "https://registry.npmjs.org/@emotion/utils/-/utils-1.4.0.tgz", + "integrity": "sha512-spEnrA1b6hDR/C68lC2M7m6ALPUHZC0lIY7jAS/B/9DuuO1ZP04eov8SMv/6fwRd8pzmsn2AuJEznRREWlQrlQ==", + "license": "MIT" + }, + "node_modules/@emotion/weak-memoize": { + "version": "0.4.0", + "resolved": "https://registry.npmjs.org/@emotion/weak-memoize/-/weak-memoize-0.4.0.tgz", + "integrity": "sha512-snKqtPW01tN0ui7yu9rGv69aJXr/a/Ywvl11sUjNtEcRc+ng/mQriFL0wLXMef74iHa/EkftbDzU9F8iFbH+zg==", + "license": "MIT" + }, + "node_modules/@fortawesome/fontawesome-common-types": { + "version": "6.6.0", + "resolved": "https://registry.npmjs.org/@fortawesome/fontawesome-common-types/-/fontawesome-common-types-6.6.0.tgz", + "integrity": "sha512-xyX0X9mc0kyz9plIyryrRbl7ngsA9jz77mCZJsUkLl+ZKs0KWObgaEBoSgQiYWAsSmjz/yjl0F++Got0Mdp4Rw==", + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/@fortawesome/fontawesome-svg-core": { + "version": "6.6.0", + "resolved": "https://registry.npmjs.org/@fortawesome/fontawesome-svg-core/-/fontawesome-svg-core-6.6.0.tgz", + "integrity": "sha512-KHwPkCk6oRT4HADE7smhfsKudt9N/9lm6EJ5BVg0tD1yPA5hht837fB87F8pn15D8JfTqQOjhKTktwmLMiD7Kg==", + "license": "MIT", + "dependencies": { + "@fortawesome/fontawesome-common-types": "6.6.0" + }, + "engines": { + "node": ">=6" + } + }, + "node_modules/@fortawesome/free-brands-svg-icons": { + "version": "6.6.0", + "resolved": "https://registry.npmjs.org/@fortawesome/free-brands-svg-icons/-/free-brands-svg-icons-6.6.0.tgz", + "integrity": "sha512-1MPD8lMNW/earme4OQi1IFHtmHUwAKgghXlNwWi9GO7QkTfD+IIaYpIai4m2YJEzqfEji3jFHX1DZI5pbY/biQ==", + "license": "(CC-BY-4.0 AND MIT)", + "dependencies": { + "@fortawesome/fontawesome-common-types": "6.6.0" + }, + "engines": { + "node": ">=6" + } + }, + "node_modules/@fortawesome/free-solid-svg-icons": { + "version": "6.6.0", + "resolved": "https://registry.npmjs.org/@fortawesome/free-solid-svg-icons/-/free-solid-svg-icons-6.6.0.tgz", + "integrity": "sha512-IYv/2skhEDFc2WGUcqvFJkeK39Q+HyPf5GHUrT/l2pKbtgEIv1al1TKd6qStR5OIwQdN1GZP54ci3y4mroJWjA==", + "license": "(CC-BY-4.0 AND MIT)", + "dependencies": { + "@fortawesome/fontawesome-common-types": "6.6.0" + }, + "engines": { + "node": ">=6" + } + }, + "node_modules/@fortawesome/react-fontawesome": { + "version": "0.2.2", + "resolved": "https://registry.npmjs.org/@fortawesome/react-fontawesome/-/react-fontawesome-0.2.2.tgz", + "integrity": "sha512-EnkrprPNqI6SXJl//m29hpaNzOp1bruISWaOiRtkMi/xSvHJlzc2j2JAYS7egxt/EbjSNV/k6Xy0AQI6vB2+1g==", + "license": "MIT", + "dependencies": { + "prop-types": "^15.8.1" + }, + "peerDependencies": { + "@fortawesome/fontawesome-svg-core": "~1 || ~6", + "react": ">=16.3" + } + }, + "node_modules/@headlessui/react": { + "version": "1.7.19", + "resolved": "https://registry.npmjs.org/@headlessui/react/-/react-1.7.19.tgz", + "integrity": "sha512-Ll+8q3OlMJfJbAKM/+/Y2q6PPYbryqNTXDbryx7SXLIDamkF6iQFbriYHga0dY44PvDhvvBWCx1Xj4U5+G4hOw==", + "license": "MIT", + "dependencies": { + "@tanstack/react-virtual": "^3.0.0-beta.60", + "client-only": "^0.0.1" + }, + "engines": { + "node": ">=10" + }, + "peerDependencies": { + "react": "^16 || ^17 || ^18", + "react-dom": "^16 || ^17 || ^18" + } + }, + "node_modules/@hello-pangea/dnd": { + "version": "16.6.0", + "resolved": "https://registry.npmjs.org/@hello-pangea/dnd/-/dnd-16.6.0.tgz", + "integrity": "sha512-vfZ4GydqbtUPXSLfAvKvXQ6xwRzIjUSjVU0Sx+70VOhc2xx6CdmJXJ8YhH70RpbTUGjxctslQTHul9sIOxCfFQ==", + "license": "Apache-2.0", + "dependencies": { + "@babel/runtime": "^7.24.1", + "css-box-model": "^1.2.1", + "memoize-one": "^6.0.0", + "raf-schd": "^4.0.3", + "react-redux": "^8.1.3", + "redux": "^4.2.1", + "use-memo-one": "^1.1.3" + }, + "peerDependencies": { + "react": "^16.8.5 || ^17.0.0 || ^18.0.0", + "react-dom": "^16.8.5 || ^17.0.0 || ^18.0.0" + } + }, + "node_modules/@img/sharp-darwin-arm64": { + "version": "0.33.5", + "resolved": "https://registry.npmjs.org/@img/sharp-darwin-arm64/-/sharp-darwin-arm64-0.33.5.tgz", + "integrity": "sha512-UT4p+iz/2H4twwAoLCqfA9UH5pI6DggwKEGuaPy7nCVQ8ZsiY5PIcrRvD1DzuY3qYL07NtIQcWnBSY/heikIFQ==", + "cpu": [ + "arm64" + ], + "license": "Apache-2.0", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": "^18.17.0 || ^20.3.0 || >=21.0.0" + }, + "funding": { + "url": "https://opencollective.com/libvips" + }, + "optionalDependencies": { + "@img/sharp-libvips-darwin-arm64": "1.0.4" + } + }, + "node_modules/@img/sharp-darwin-x64": { + "version": "0.33.5", + "resolved": "https://registry.npmjs.org/@img/sharp-darwin-x64/-/sharp-darwin-x64-0.33.5.tgz", + "integrity": "sha512-fyHac4jIc1ANYGRDxtiqelIbdWkIuQaI84Mv45KvGRRxSAa7o7d1ZKAOBaYbnepLC1WqxfpimdeWfvqqSGwR2Q==", + "cpu": [ + "x64" + ], + "license": "Apache-2.0", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": "^18.17.0 || ^20.3.0 || >=21.0.0" + }, + "funding": { + "url": "https://opencollective.com/libvips" + }, + "optionalDependencies": { + "@img/sharp-libvips-darwin-x64": "1.0.4" + } + }, + "node_modules/@img/sharp-libvips-darwin-arm64": { + "version": "1.0.4", + "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-arm64/-/sharp-libvips-darwin-arm64-1.0.4.tgz", + "integrity": "sha512-XblONe153h0O2zuFfTAbQYAX2JhYmDHeWikp1LM9Hul9gVPjFY427k6dFEcOL72O01QxQsWi761svJ/ev9xEDg==", + "cpu": [ + "arm64" + ], + "license": "LGPL-3.0-or-later", + "optional": true, + "os": [ + "darwin" + ], + "funding": { + "url": "https://opencollective.com/libvips" + } + }, + "node_modules/@img/sharp-libvips-darwin-x64": { + "version": "1.0.4", + "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-x64/-/sharp-libvips-darwin-x64-1.0.4.tgz", + "integrity": "sha512-xnGR8YuZYfJGmWPvmlunFaWJsb9T/AO2ykoP3Fz/0X5XV2aoYBPkX6xqCQvUTKKiLddarLaxpzNe+b1hjeWHAQ==", + "cpu": [ + "x64" + ], + "license": "LGPL-3.0-or-later", + "optional": true, + "os": [ + "darwin" + ], + "funding": { + "url": "https://opencollective.com/libvips" + } + }, + "node_modules/@img/sharp-libvips-linux-arm": { + "version": "1.0.5", + "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm/-/sharp-libvips-linux-arm-1.0.5.tgz", + "integrity": "sha512-gvcC4ACAOPRNATg/ov8/MnbxFDJqf/pDePbBnuBDcjsI8PssmjoKMAz4LtLaVi+OnSb5FK/yIOamqDwGmXW32g==", + "cpu": [ + "arm" + ], + "license": "LGPL-3.0-or-later", + "optional": true, + "os": [ + "linux" + ], + "funding": { + "url": "https://opencollective.com/libvips" + } + }, + "node_modules/@img/sharp-libvips-linux-arm64": { + "version": "1.0.4", + "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm64/-/sharp-libvips-linux-arm64-1.0.4.tgz", + "integrity": "sha512-9B+taZ8DlyyqzZQnoeIvDVR/2F4EbMepXMc/NdVbkzsJbzkUjhXv/70GQJ7tdLA4YJgNP25zukcxpX2/SueNrA==", + "cpu": [ + "arm64" + ], + "license": "LGPL-3.0-or-later", + "optional": true, + "os": [ + "linux" + ], + "funding": { + "url": "https://opencollective.com/libvips" + } + }, + "node_modules/@img/sharp-libvips-linux-s390x": { + "version": "1.0.4", + "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-s390x/-/sharp-libvips-linux-s390x-1.0.4.tgz", + "integrity": "sha512-u7Wz6ntiSSgGSGcjZ55im6uvTrOxSIS8/dgoVMoiGE9I6JAfU50yH5BoDlYA1tcuGS7g/QNtetJnxA6QEsCVTA==", + "cpu": [ + "s390x" + ], + "license": "LGPL-3.0-or-later", + "optional": true, + "os": [ + "linux" + ], + "funding": { + "url": "https://opencollective.com/libvips" + } + }, + "node_modules/@img/sharp-libvips-linux-x64": { + "version": "1.0.4", + "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-x64/-/sharp-libvips-linux-x64-1.0.4.tgz", + "integrity": "sha512-MmWmQ3iPFZr0Iev+BAgVMb3ZyC4KeFc3jFxnNbEPas60e1cIfevbtuyf9nDGIzOaW9PdnDciJm+wFFaTlj5xYw==", + "cpu": [ + "x64" + ], + "license": "LGPL-3.0-or-later", + "optional": true, + "os": [ + "linux" + ], + "funding": { + "url": "https://opencollective.com/libvips" + } + }, + "node_modules/@img/sharp-libvips-linuxmusl-arm64": { + "version": "1.0.4", + "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-arm64/-/sharp-libvips-linuxmusl-arm64-1.0.4.tgz", + "integrity": "sha512-9Ti+BbTYDcsbp4wfYib8Ctm1ilkugkA/uscUn6UXK1ldpC1JjiXbLfFZtRlBhjPZ5o1NCLiDbg8fhUPKStHoTA==", + "cpu": [ + "arm64" + ], + "license": "LGPL-3.0-or-later", + "optional": true, + "os": [ + "linux" + ], + "funding": { + "url": "https://opencollective.com/libvips" + } + }, + "node_modules/@img/sharp-libvips-linuxmusl-x64": { + "version": "1.0.4", + "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-x64/-/sharp-libvips-linuxmusl-x64-1.0.4.tgz", + "integrity": "sha512-viYN1KX9m+/hGkJtvYYp+CCLgnJXwiQB39damAO7WMdKWlIhmYTfHjwSbQeUK/20vY154mwezd9HflVFM1wVSw==", + "cpu": [ + "x64" + ], + "license": "LGPL-3.0-or-later", + "optional": true, + "os": [ + "linux" + ], + "funding": { + "url": "https://opencollective.com/libvips" + } + }, + "node_modules/@img/sharp-linux-arm": { + "version": "0.33.5", + "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm/-/sharp-linux-arm-0.33.5.tgz", + "integrity": "sha512-JTS1eldqZbJxjvKaAkxhZmBqPRGmxgu+qFKSInv8moZ2AmT5Yib3EQ1c6gp493HvrvV8QgdOXdyaIBrhvFhBMQ==", + "cpu": [ + "arm" + ], + "license": "Apache-2.0", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^18.17.0 || ^20.3.0 || >=21.0.0" + }, + "funding": { + "url": "https://opencollective.com/libvips" + }, + "optionalDependencies": { + "@img/sharp-libvips-linux-arm": "1.0.5" + } + }, + "node_modules/@img/sharp-linux-arm64": { + "version": "0.33.5", + "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm64/-/sharp-linux-arm64-0.33.5.tgz", + "integrity": "sha512-JMVv+AMRyGOHtO1RFBiJy/MBsgz0x4AWrT6QoEVVTyh1E39TrCUpTRI7mx9VksGX4awWASxqCYLCV4wBZHAYxA==", + "cpu": [ + "arm64" + ], + "license": "Apache-2.0", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^18.17.0 || ^20.3.0 || >=21.0.0" + }, + "funding": { + "url": "https://opencollective.com/libvips" + }, + "optionalDependencies": { + "@img/sharp-libvips-linux-arm64": "1.0.4" + } + }, + "node_modules/@img/sharp-linux-s390x": { + "version": "0.33.5", + "resolved": "https://registry.npmjs.org/@img/sharp-linux-s390x/-/sharp-linux-s390x-0.33.5.tgz", + "integrity": "sha512-y/5PCd+mP4CA/sPDKl2961b+C9d+vPAveS33s6Z3zfASk2j5upL6fXVPZi7ztePZ5CuH+1kW8JtvxgbuXHRa4Q==", + "cpu": [ + "s390x" + ], + "license": "Apache-2.0", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^18.17.0 || ^20.3.0 || >=21.0.0" + }, + "funding": { + "url": "https://opencollective.com/libvips" + }, + "optionalDependencies": { + "@img/sharp-libvips-linux-s390x": "1.0.4" + } + }, + "node_modules/@img/sharp-linux-x64": { + "version": "0.33.5", + "resolved": "https://registry.npmjs.org/@img/sharp-linux-x64/-/sharp-linux-x64-0.33.5.tgz", + "integrity": "sha512-opC+Ok5pRNAzuvq1AG0ar+1owsu842/Ab+4qvU879ippJBHvyY5n2mxF1izXqkPYlGuP/M556uh53jRLJmzTWA==", + "cpu": [ + "x64" + ], + "license": "Apache-2.0", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^18.17.0 || ^20.3.0 || >=21.0.0" + }, + "funding": { + "url": "https://opencollective.com/libvips" + }, + "optionalDependencies": { + "@img/sharp-libvips-linux-x64": "1.0.4" + } + }, + "node_modules/@img/sharp-linuxmusl-arm64": { + "version": "0.33.5", + "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-arm64/-/sharp-linuxmusl-arm64-0.33.5.tgz", + "integrity": "sha512-XrHMZwGQGvJg2V/oRSUfSAfjfPxO+4DkiRh6p2AFjLQztWUuY/o8Mq0eMQVIY7HJ1CDQUJlxGGZRw1a5bqmd1g==", + "cpu": [ + "arm64" + ], + "license": "Apache-2.0", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^18.17.0 || ^20.3.0 || >=21.0.0" + }, + "funding": { + "url": "https://opencollective.com/libvips" + }, + "optionalDependencies": { + "@img/sharp-libvips-linuxmusl-arm64": "1.0.4" + } + }, + "node_modules/@img/sharp-linuxmusl-x64": { + "version": "0.33.5", + "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-x64/-/sharp-linuxmusl-x64-0.33.5.tgz", + "integrity": "sha512-WT+d/cgqKkkKySYmqoZ8y3pxx7lx9vVejxW/W4DOFMYVSkErR+w7mf2u8m/y4+xHe7yY9DAXQMWQhpnMuFfScw==", + "cpu": [ + "x64" + ], + "license": "Apache-2.0", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": "^18.17.0 || ^20.3.0 || >=21.0.0" + }, + "funding": { + "url": "https://opencollective.com/libvips" + }, + "optionalDependencies": { + "@img/sharp-libvips-linuxmusl-x64": "1.0.4" + } + }, + "node_modules/@img/sharp-wasm32": { + "version": "0.33.5", + "resolved": "https://registry.npmjs.org/@img/sharp-wasm32/-/sharp-wasm32-0.33.5.tgz", + "integrity": "sha512-ykUW4LVGaMcU9lu9thv85CbRMAwfeadCJHRsg2GmeRa/cJxsVY9Rbd57JcMxBkKHag5U/x7TSBpScF4U8ElVzg==", + "cpu": [ + "wasm32" + ], + "license": "Apache-2.0 AND LGPL-3.0-or-later AND MIT", + "optional": true, + "dependencies": { + "@emnapi/runtime": "^1.2.0" + }, + "engines": { + "node": "^18.17.0 || ^20.3.0 || >=21.0.0" + }, + "funding": { + "url": "https://opencollective.com/libvips" + } + }, + "node_modules/@img/sharp-win32-ia32": { + "version": "0.33.5", + "resolved": "https://registry.npmjs.org/@img/sharp-win32-ia32/-/sharp-win32-ia32-0.33.5.tgz", + "integrity": "sha512-T36PblLaTwuVJ/zw/LaH0PdZkRz5rd3SmMHX8GSmR7vtNSP5Z6bQkExdSK7xGWyxLw4sUknBuugTelgw2faBbQ==", + "cpu": [ + "ia32" + ], + "license": "Apache-2.0 AND LGPL-3.0-or-later", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": "^18.17.0 || ^20.3.0 || >=21.0.0" + }, + "funding": { + "url": "https://opencollective.com/libvips" + } + }, + "node_modules/@img/sharp-win32-x64": { + "version": "0.33.5", + "resolved": "https://registry.npmjs.org/@img/sharp-win32-x64/-/sharp-win32-x64-0.33.5.tgz", + "integrity": "sha512-MpY/o8/8kj+EcnxwvrP4aTJSWw/aZ7JIGR4aBeZkZw5B7/Jn+tY9/VNwtcoGmdT7GfggGIU4kygOMSbYnOrAbg==", + "cpu": [ + "x64" + ], + "license": "Apache-2.0 AND LGPL-3.0-or-later", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": "^18.17.0 || ^20.3.0 || >=21.0.0" + }, + "funding": { + "url": "https://opencollective.com/libvips" + } + }, + "node_modules/@isaacs/cliui": { + "version": "8.0.2", + "resolved": "https://registry.npmjs.org/@isaacs/cliui/-/cliui-8.0.2.tgz", + "integrity": "sha512-O8jcjabXaleOG9DQ0+ARXWZBTfnP4WNAqzuiJK7ll44AmxGKv/J2M4TPjxjY3znBCfvBXFzucm1twdyFybFqEA==", + "license": "ISC", + "dependencies": { + "string-width": "^5.1.2", + "string-width-cjs": "npm:string-width@^4.2.0", + "strip-ansi": "^7.0.1", + "strip-ansi-cjs": "npm:strip-ansi@^6.0.1", + "wrap-ansi": "^8.1.0", + "wrap-ansi-cjs": "npm:wrap-ansi@^7.0.0" + }, + "engines": { + "node": ">=12" + } + }, + "node_modules/@jridgewell/gen-mapping": { + "version": "0.3.5", + "resolved": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.5.tgz", + "integrity": "sha512-IzL8ZoEDIBRWEzlCcRhOaCupYyN5gdIK+Q6fbFdPDg6HqX6jpkItn7DFIpW9LQzXG6Df9sA7+OKnq0qlz/GaQg==", + "license": "MIT", + "dependencies": { + "@jridgewell/set-array": "^1.2.1", + "@jridgewell/sourcemap-codec": "^1.4.10", + "@jridgewell/trace-mapping": "^0.3.24" + }, + "engines": { + "node": ">=6.0.0" + } + }, + "node_modules/@jridgewell/resolve-uri": { + "version": "3.1.2", + "resolved": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz", + "integrity": "sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw==", + "license": "MIT", + "engines": { + "node": ">=6.0.0" + } + }, + "node_modules/@jridgewell/set-array": { + "version": "1.2.1", + "resolved": "https://registry.npmjs.org/@jridgewell/set-array/-/set-array-1.2.1.tgz", + "integrity": "sha512-R8gLRTZeyp03ymzP/6Lil/28tGeGEzhx1q2k703KGWRAI1VdvPIXdG70VJc2pAMw3NA6JKL5hhFu1sJX0Mnn/A==", + "license": "MIT", + "engines": { + "node": ">=6.0.0" + } + }, + "node_modules/@jridgewell/sourcemap-codec": { + "version": "1.5.0", + "resolved": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.0.tgz", + "integrity": "sha512-gv3ZRaISU3fjPAgNsriBRqGWQL6quFx04YMPW/zD8XMLsU32mhCCbfbO6KZFLjvYpCZ8zyDEgqsgf+PwPaM7GQ==", + "license": "MIT" + }, + "node_modules/@jridgewell/trace-mapping": { + "version": "0.3.25", + "resolved": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.25.tgz", + "integrity": "sha512-vNk6aEwybGtawWmy/PzwnGDOjCkLWSD2wqvjGGAgOAwCGWySYXfYoxt00IJkTF+8Lb57DwOb3Aa0o9CApepiYQ==", + "license": "MIT", + "dependencies": { + "@jridgewell/resolve-uri": "^3.1.0", + "@jridgewell/sourcemap-codec": "^1.4.14" + } + }, + "node_modules/@mapbox/hast-util-table-cell-style": { + "version": "0.2.1", + "resolved": "https://registry.npmjs.org/@mapbox/hast-util-table-cell-style/-/hast-util-table-cell-style-0.2.1.tgz", + "integrity": "sha512-LyQz4XJIdCdY/+temIhD/Ed0x/p4GAOUycpFSEK2Ads1CPKZy6b7V/2ROEtQiLLQ8soIs0xe/QAoR6kwpyW/yw==", + "license": "BSD-2-Clause", + "dependencies": { + "unist-util-visit": "^1.4.1" + }, + "engines": { + "node": ">=12" + } + }, + "node_modules/@mapbox/hast-util-table-cell-style/node_modules/unist-util-is": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/unist-util-is/-/unist-util-is-3.0.0.tgz", + "integrity": "sha512-sVZZX3+kspVNmLWBPAB6r+7D9ZgAFPNWm66f7YNb420RlQSbn+n8rG8dGZSkrER7ZIXGQYNm5pqC3v3HopH24A==", + "license": "MIT" + }, + "node_modules/@mapbox/hast-util-table-cell-style/node_modules/unist-util-visit": { + "version": "1.4.1", + "resolved": "https://registry.npmjs.org/unist-util-visit/-/unist-util-visit-1.4.1.tgz", + "integrity": "sha512-AvGNk7Bb//EmJZyhtRUnNMEpId/AZ5Ph/KUpTI09WHQuDZHKovQ1oEv3mfmKpWKtoMzyMC4GLBm1Zy5k12fjIw==", + "license": "MIT", + "dependencies": { + "unist-util-visit-parents": "^2.0.0" + } + }, + "node_modules/@mapbox/hast-util-table-cell-style/node_modules/unist-util-visit-parents": { + "version": "2.1.2", + "resolved": "https://registry.npmjs.org/unist-util-visit-parents/-/unist-util-visit-parents-2.1.2.tgz", + "integrity": "sha512-DyN5vD4NE3aSeB+PXYNKxzGsfocxp6asDc2XXE3b0ekO2BaRUpBicbbUygfSvYfUz1IkmjFR1YF7dPklraMZ2g==", + "license": "MIT", + "dependencies": { + "unist-util-is": "^3.0.0" + } + }, + "node_modules/@mdx-js/mdx": { + "version": "2.3.0", + "resolved": "https://registry.npmjs.org/@mdx-js/mdx/-/mdx-2.3.0.tgz", + "integrity": "sha512-jLuwRlz8DQfQNiUCJR50Y09CGPq3fLtmtUQfVrj79E0JWu3dvsVcxVIcfhR5h0iXu+/z++zDrYeiJqifRynJkA==", + "license": "MIT", + "dependencies": { + "@types/estree-jsx": "^1.0.0", + "@types/mdx": "^2.0.0", + "estree-util-build-jsx": "^2.0.0", + "estree-util-is-identifier-name": "^2.0.0", + "estree-util-to-js": "^1.1.0", + "estree-walker": "^3.0.0", + "hast-util-to-estree": "^2.0.0", + "markdown-extensions": "^1.0.0", + "periscopic": "^3.0.0", + "remark-mdx": "^2.0.0", + "remark-parse": "^10.0.0", + "remark-rehype": "^10.0.0", + "unified": "^10.0.0", + "unist-util-position-from-estree": "^1.0.0", + "unist-util-stringify-position": "^3.0.0", + "unist-util-visit": "^4.0.0", + "vfile": "^5.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/@mdx-js/mdx/node_modules/bail": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/bail/-/bail-2.0.2.tgz", + "integrity": "sha512-0xO6mYd7JB2YesxDKplafRpsiOzPt9V02ddPCLbY1xYGPOX24NTyN50qnUxgCPcSoYMhKpAuBTjQoRZCAkUDRw==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/@mdx-js/mdx/node_modules/is-plain-obj": { + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-4.1.0.tgz", + "integrity": "sha512-+Pgi+vMuUNkJyExiMBt5IlFoMyKnr5zhJ4Uspz58WOhBF5QoIZkFyNHIbBAtHwzVAgk5RtndVNsDRN61/mmDqg==", + "license": "MIT", + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/@mdx-js/mdx/node_modules/mdast-util-definitions": { + "version": "5.1.2", + "resolved": "https://registry.npmjs.org/mdast-util-definitions/-/mdast-util-definitions-5.1.2.tgz", + "integrity": "sha512-8SVPMuHqlPME/z3gqVwWY4zVXn8lqKv/pAhC57FuJ40ImXyBpmO5ukh98zB2v7Blql2FiHjHv9LVztSIqjY+MA==", + "license": "MIT", + "dependencies": { + "@types/mdast": "^3.0.0", + "@types/unist": "^2.0.0", + "unist-util-visit": "^4.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/@mdx-js/mdx/node_modules/mdast-util-to-hast": { + "version": "12.3.0", + "resolved": "https://registry.npmjs.org/mdast-util-to-hast/-/mdast-util-to-hast-12.3.0.tgz", + "integrity": "sha512-pits93r8PhnIoU4Vy9bjW39M2jJ6/tdHyja9rrot9uujkN7UTU9SDnE6WNJz/IGyQk3XHX6yNNtrBH6cQzm8Hw==", + "license": "MIT", + "dependencies": { + "@types/hast": "^2.0.0", + "@types/mdast": "^3.0.0", + "mdast-util-definitions": "^5.0.0", + "micromark-util-sanitize-uri": "^1.1.0", + "trim-lines": "^3.0.0", + "unist-util-generated": "^2.0.0", + "unist-util-position": "^4.0.0", + "unist-util-visit": "^4.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/@mdx-js/mdx/node_modules/remark-rehype": { + "version": "10.1.0", + "resolved": "https://registry.npmjs.org/remark-rehype/-/remark-rehype-10.1.0.tgz", + "integrity": "sha512-EFmR5zppdBp0WQeDVZ/b66CWJipB2q2VLNFMabzDSGR66Z2fQii83G5gTBbgGEnEEA0QRussvrFHxk1HWGJskw==", + "license": "MIT", + "dependencies": { + "@types/hast": "^2.0.0", + "@types/mdast": "^3.0.0", + "mdast-util-to-hast": "^12.1.0", + "unified": "^10.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/@mdx-js/mdx/node_modules/trough": { + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/trough/-/trough-2.2.0.tgz", + "integrity": "sha512-tmMpK00BjZiUyVyvrBK7knerNgmgvcV/KLVyuma/SC+TQN167GrMRciANTz09+k3zW8L8t60jWO1GpfkZdjTaw==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/@mdx-js/mdx/node_modules/unified": { + "version": "10.1.2", + "resolved": "https://registry.npmjs.org/unified/-/unified-10.1.2.tgz", + "integrity": "sha512-pUSWAi/RAnVy1Pif2kAoeWNBa3JVrx0MId2LASj8G+7AiHWoKZNTomq6LG326T68U7/e263X6fTdcXIy7XnF7Q==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "bail": "^2.0.0", + "extend": "^3.0.0", + "is-buffer": "^2.0.0", + "is-plain-obj": "^4.0.0", + "trough": "^2.0.0", + "vfile": "^5.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/@mdx-js/mdx/node_modules/unist-util-generated": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/unist-util-generated/-/unist-util-generated-2.0.1.tgz", + "integrity": "sha512-qF72kLmPxAw0oN2fwpWIqbXAVyEqUzDHMsbtPvOudIlUzXYFIeQIuxXQCRCFh22B7cixvU0MG7m3MW8FTq/S+A==", + "license": "MIT", + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/@mdx-js/mdx/node_modules/unist-util-position": { + "version": "4.0.4", + "resolved": "https://registry.npmjs.org/unist-util-position/-/unist-util-position-4.0.4.tgz", + "integrity": "sha512-kUBE91efOWfIVBo8xzh/uZQ7p9ffYRtUbMRZBNFYwf0RK8koUMx6dGUfwylLOKmaT2cs4wSW96QoYUSXAyEtpg==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/@mdx-js/mdx/node_modules/unist-util-visit": { + "version": "4.1.2", + "resolved": "https://registry.npmjs.org/unist-util-visit/-/unist-util-visit-4.1.2.tgz", + "integrity": "sha512-MSd8OUGISqHdVvfY9TPhyK2VdUrPgxkUtWSuMHF6XAAFuL4LokseigBnZtPnJMu+FbynTkFNnFlyjxpVKujMRg==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "unist-util-is": "^5.0.0", + "unist-util-visit-parents": "^5.1.1" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/@mdx-js/mdx/node_modules/unist-util-visit-parents": { + "version": "5.1.3", + "resolved": "https://registry.npmjs.org/unist-util-visit-parents/-/unist-util-visit-parents-5.1.3.tgz", + "integrity": "sha512-x6+y8g7wWMyQhL1iZfhIPhDAs7Xwbn9nRosDXl7qoPTSCy0yNxnKc+hWokFifWQIDGi154rdUqKvbCa4+1kLhg==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "unist-util-is": "^5.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/@mdx-js/mdx/node_modules/vfile": { + "version": "5.3.7", + "resolved": "https://registry.npmjs.org/vfile/-/vfile-5.3.7.tgz", + "integrity": "sha512-r7qlzkgErKjobAmyNIkkSpizsFPYiUPuJb5pNW1RB4JcYVZhs4lIbVqk8XPk033CV/1z8ss5pkax8SuhGpcG8g==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "is-buffer": "^2.0.0", + "unist-util-stringify-position": "^3.0.0", + "vfile-message": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/@mdx-js/mdx/node_modules/vfile-message": { + "version": "3.1.4", + "resolved": "https://registry.npmjs.org/vfile-message/-/vfile-message-3.1.4.tgz", + "integrity": "sha512-fa0Z6P8HUrQN4BZaX05SIVXic+7kE3b05PWAtPuYP9QLHsLKYR7/AlLW3NtOrpXRLeawpDLMsVkmk5DG0NXgWw==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "unist-util-stringify-position": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/@mdx-js/react": { + "version": "2.3.0", + "resolved": "https://registry.npmjs.org/@mdx-js/react/-/react-2.3.0.tgz", + "integrity": "sha512-zQH//gdOmuu7nt2oJR29vFhDv88oGPmVw6BggmrHeMI+xgEkp1B2dX9/bMBSYtK0dyLX/aOmesKS09g222K1/g==", + "license": "MIT", + "dependencies": { + "@types/mdx": "^2.0.0", + "@types/react": ">=16" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + }, + "peerDependencies": { + "react": ">=16" + } + }, + "node_modules/@napi-rs/simple-git": { + "version": "0.1.19", + "resolved": "https://registry.npmjs.org/@napi-rs/simple-git/-/simple-git-0.1.19.tgz", + "integrity": "sha512-jMxvwzkKzd3cXo2EB9GM2ic0eYo2rP/BS6gJt6HnWbsDO1O8GSD4k7o2Cpr2YERtMpGF/MGcDfsfj2EbQPtrXw==", + "license": "MIT", + "engines": { + "node": ">= 10" + }, + "optionalDependencies": { + "@napi-rs/simple-git-android-arm-eabi": "0.1.19", + "@napi-rs/simple-git-android-arm64": "0.1.19", + "@napi-rs/simple-git-darwin-arm64": "0.1.19", + "@napi-rs/simple-git-darwin-x64": "0.1.19", + "@napi-rs/simple-git-freebsd-x64": "0.1.19", + "@napi-rs/simple-git-linux-arm-gnueabihf": "0.1.19", + "@napi-rs/simple-git-linux-arm64-gnu": "0.1.19", + "@napi-rs/simple-git-linux-arm64-musl": "0.1.19", + "@napi-rs/simple-git-linux-powerpc64le-gnu": "0.1.19", + "@napi-rs/simple-git-linux-s390x-gnu": "0.1.19", + "@napi-rs/simple-git-linux-x64-gnu": "0.1.19", + "@napi-rs/simple-git-linux-x64-musl": "0.1.19", + "@napi-rs/simple-git-win32-arm64-msvc": "0.1.19", + "@napi-rs/simple-git-win32-x64-msvc": "0.1.19" + } + }, + "node_modules/@napi-rs/simple-git-android-arm-eabi": { + "version": "0.1.19", + "resolved": "https://registry.npmjs.org/@napi-rs/simple-git-android-arm-eabi/-/simple-git-android-arm-eabi-0.1.19.tgz", + "integrity": "sha512-XryEH/hadZ4Duk/HS/HC/cA1j0RHmqUGey3MsCf65ZS0VrWMqChXM/xlTPWuY5jfCc/rPubHaqI7DZlbexnX/g==", + "cpu": [ + "arm" + ], + "license": "MIT", + "optional": true, + "os": [ + "android" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@napi-rs/simple-git-android-arm64": { + "version": "0.1.19", + "resolved": "https://registry.npmjs.org/@napi-rs/simple-git-android-arm64/-/simple-git-android-arm64-0.1.19.tgz", + "integrity": "sha512-ZQ0cPvY6nV9p7zrR9ZPo7hQBkDAcY/CHj3BjYNhykeUCiSNCrhvwX+WEeg5on8M1j4d5jcI/cwVG2FslfiByUg==", + "cpu": [ + "arm64" + ], + "license": "MIT", + "optional": true, + "os": [ + "android" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@napi-rs/simple-git-darwin-arm64": { + "version": "0.1.19", + "resolved": "https://registry.npmjs.org/@napi-rs/simple-git-darwin-arm64/-/simple-git-darwin-arm64-0.1.19.tgz", + "integrity": "sha512-viZB5TYgjA1vH+QluhxZo0WKro3xBA+1xSzYx8mcxUMO5gnAoUMwXn0ZO/6Zy6pai+aGae+cj6XihGnrBRu3Pg==", + "cpu": [ + "arm64" + ], + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@napi-rs/simple-git-darwin-x64": { + "version": "0.1.19", + "resolved": "https://registry.npmjs.org/@napi-rs/simple-git-darwin-x64/-/simple-git-darwin-x64-0.1.19.tgz", + "integrity": "sha512-6dNkzSNUV5X9rsVYQbpZLyJu4Gtkl2vNJ3abBXHX/Etk0ILG5ZasO3ncznIANZQpqcbn/QPHr49J2QYAXGoKJA==", + "cpu": [ + "x64" + ], + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@napi-rs/simple-git-freebsd-x64": { + "version": "0.1.19", + "resolved": "https://registry.npmjs.org/@napi-rs/simple-git-freebsd-x64/-/simple-git-freebsd-x64-0.1.19.tgz", + "integrity": "sha512-sB9krVIchzd20FjI2ZZ8FDsTSsXLBdnwJ6CpeVyrhXHnoszfcqxt49ocZHujAS9lMpXq7i2Nv1EXJmCy4KdhwA==", + "cpu": [ + "x64" + ], + "license": "MIT", + "optional": true, + "os": [ + "freebsd" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@napi-rs/simple-git-linux-arm-gnueabihf": { + "version": "0.1.19", + "resolved": "https://registry.npmjs.org/@napi-rs/simple-git-linux-arm-gnueabihf/-/simple-git-linux-arm-gnueabihf-0.1.19.tgz", + "integrity": "sha512-6HPn09lr9N1n5/XKfP8Np53g4fEXVxOFqNkS6rTH3Rm1lZHdazTRH62RggXLTguZwjcE+MvOLvoTIoR5kAS8+g==", + "cpu": [ + "arm" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@napi-rs/simple-git-linux-arm64-gnu": { + "version": "0.1.19", + "resolved": "https://registry.npmjs.org/@napi-rs/simple-git-linux-arm64-gnu/-/simple-git-linux-arm64-gnu-0.1.19.tgz", + "integrity": "sha512-G0gISckt4cVDp3oh5Z6PV3GHJrJO6Z8bIS+9xA7vTtKdqB1i5y0n3cSFLlzQciLzhr+CajFD27doW4lEyErQ/Q==", + "cpu": [ + "arm64" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@napi-rs/simple-git-linux-arm64-musl": { + "version": "0.1.19", + "resolved": "https://registry.npmjs.org/@napi-rs/simple-git-linux-arm64-musl/-/simple-git-linux-arm64-musl-0.1.19.tgz", + "integrity": "sha512-OwTRF+H4IZYxmDFRi1IrLMfqbdIpvHeYbJl2X94NVsLVOY+3NUHvEzL3fYaVx5urBaMnIK0DD3wZLbcueWvxbA==", + "cpu": [ + "arm64" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@napi-rs/simple-git-linux-powerpc64le-gnu": { + "version": "0.1.19", + "resolved": "https://registry.npmjs.org/@napi-rs/simple-git-linux-powerpc64le-gnu/-/simple-git-linux-powerpc64le-gnu-0.1.19.tgz", + "integrity": "sha512-p7zuNNVyzpRvkCt2RIGv9FX/WPcPbZ6/FRUgUTZkA2WU33mrbvNqSi4AOqCCl6mBvEd+EOw5NU4lS9ORRJvAEg==", + "cpu": [ + "powerpc64le" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@napi-rs/simple-git-linux-s390x-gnu": { + "version": "0.1.19", + "resolved": "https://registry.npmjs.org/@napi-rs/simple-git-linux-s390x-gnu/-/simple-git-linux-s390x-gnu-0.1.19.tgz", + "integrity": "sha512-6N2vwJUPLiak8GLrS0a3is0gSb0UwI2CHOOqtvQxPmv+JVI8kn3vKiUscsktdDb0wGEPeZ8PvZs0y8UWix7K4g==", + "cpu": [ + "s390x" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@napi-rs/simple-git-linux-x64-gnu": { + "version": "0.1.19", + "resolved": "https://registry.npmjs.org/@napi-rs/simple-git-linux-x64-gnu/-/simple-git-linux-x64-gnu-0.1.19.tgz", + "integrity": "sha512-61YfeO1J13WK7MalLgP3QlV6of2rWnVw1aqxWkAgy/lGxoOFSJ4Wid6ANVCEZk4tJpPX/XNeneqkUz5xpeb2Cw==", + "cpu": [ + "x64" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@napi-rs/simple-git-linux-x64-musl": { + "version": "0.1.19", + "resolved": "https://registry.npmjs.org/@napi-rs/simple-git-linux-x64-musl/-/simple-git-linux-x64-musl-0.1.19.tgz", + "integrity": "sha512-cCTWNpMJnN3PrUBItWcs3dQKCydsIasbrS3laMzq8k7OzF93Zrp2LWDTPlLCO9brbBVpBzy2Qk5Xg9uAfe/Ukw==", + "cpu": [ + "x64" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@napi-rs/simple-git-win32-arm64-msvc": { + "version": "0.1.19", + "resolved": "https://registry.npmjs.org/@napi-rs/simple-git-win32-arm64-msvc/-/simple-git-win32-arm64-msvc-0.1.19.tgz", + "integrity": "sha512-sWavb1BjeLKKBA+PbTsRSSzVNfb7V/dOpaJvkgR5d2kWFn/AHmCZHSSj/3nyZdYf0BdDC+DIvqk3daAEZ6QMVw==", + "cpu": [ + "arm64" + ], + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@napi-rs/simple-git-win32-x64-msvc": { + "version": "0.1.19", + "resolved": "https://registry.npmjs.org/@napi-rs/simple-git-win32-x64-msvc/-/simple-git-win32-x64-msvc-0.1.19.tgz", + "integrity": "sha512-FmNuPoK4+qwaSCkp8lm3sJlrxk374enW+zCE5ZksXlZzj/9BDJAULJb5QUJ7o9Y8A/G+d8LkdQLPBE2Jaxe5XA==", + "cpu": [ + "x64" + ], + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@next/env": { + "version": "14.2.7", + "resolved": "https://registry.npmjs.org/@next/env/-/env-14.2.7.tgz", + "integrity": "sha512-OTx9y6I3xE/eih+qtthppwLytmpJVPM5PPoJxChFsbjIEFXIayG0h/xLzefHGJviAa3Q5+Fd+9uYojKkHDKxoQ==", + "license": "MIT" + }, + "node_modules/@next/swc-darwin-arm64": { + "version": "14.2.7", + "resolved": "https://registry.npmjs.org/@next/swc-darwin-arm64/-/swc-darwin-arm64-14.2.7.tgz", + "integrity": "sha512-UhZGcOyI9LE/tZL3h9rs/2wMZaaJKwnpAyegUVDGZqwsla6hMfeSj9ssBWQS9yA4UXun3pPhrFLVnw5KXZs3vw==", + "cpu": [ + "arm64" + ], + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@next/swc-darwin-x64": { + "version": "14.2.7", + "resolved": "https://registry.npmjs.org/@next/swc-darwin-x64/-/swc-darwin-x64-14.2.7.tgz", + "integrity": "sha512-ys2cUgZYRc+CbyDeLAaAdZgS7N1Kpyy+wo0b/gAj+SeOeaj0Lw/q+G1hp+DuDiDAVyxLBCJXEY/AkhDmtihUTA==", + "cpu": [ + "x64" + ], + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@next/swc-linux-arm64-gnu": { + "version": "14.2.7", + "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-gnu/-/swc-linux-arm64-gnu-14.2.7.tgz", + "integrity": "sha512-2xoWtE13sUJ3qrC1lwE/HjbDPm+kBQYFkkiVECJWctRASAHQ+NwjMzgrfqqMYHfMxFb5Wws3w9PqzZJqKFdWcQ==", + "cpu": [ + "arm64" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@next/swc-linux-arm64-musl": { + "version": "14.2.7", + "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-musl/-/swc-linux-arm64-musl-14.2.7.tgz", + "integrity": "sha512-+zJ1gJdl35BSAGpkCbfyiY6iRTaPrt3KTl4SF/B1NyELkqqnrNX6cp4IjjjxKpd64/7enI0kf6b9O1Uf3cL0pw==", + "cpu": [ + "arm64" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@next/swc-linux-x64-gnu": { + "version": "14.2.7", + "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-gnu/-/swc-linux-x64-gnu-14.2.7.tgz", + "integrity": "sha512-m6EBqrskeMUzykBrv0fDX/28lWIBGhMzOYaStp0ihkjzIYJiKUOzVYD1gULHc8XDf5EMSqoH/0/TRAgXqpQwmw==", + "cpu": [ + "x64" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@next/swc-linux-x64-musl": { + "version": "14.2.7", + "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-musl/-/swc-linux-x64-musl-14.2.7.tgz", + "integrity": "sha512-gUu0viOMvMlzFRz1r1eQ7Ql4OE+hPOmA7smfZAhn8vC4+0swMZaZxa9CSIozTYavi+bJNDZ3tgiSdMjmMzRJlQ==", + "cpu": [ + "x64" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@next/swc-win32-arm64-msvc": { + "version": "14.2.7", + "resolved": "https://registry.npmjs.org/@next/swc-win32-arm64-msvc/-/swc-win32-arm64-msvc-14.2.7.tgz", + "integrity": "sha512-PGbONHIVIuzWlYmLvuFKcj+8jXnLbx4WrlESYlVnEzDsa3+Q2hI1YHoXaSmbq0k4ZwZ7J6sWNV4UZfx1OeOlbQ==", + "cpu": [ + "arm64" + ], + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@next/swc-win32-ia32-msvc": { + "version": "14.2.7", + "resolved": "https://registry.npmjs.org/@next/swc-win32-ia32-msvc/-/swc-win32-ia32-msvc-14.2.7.tgz", + "integrity": "sha512-BiSY5umlx9ed5RQDoHcdbuKTUkuFORDqzYKPHlLeS+STUWQKWziVOn3Ic41LuTBvqE0TRJPKpio9GSIblNR+0w==", + "cpu": [ + "ia32" + ], + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@next/swc-win32-x64-msvc": { + "version": "14.2.7", + "resolved": "https://registry.npmjs.org/@next/swc-win32-x64-msvc/-/swc-win32-x64-msvc-14.2.7.tgz", + "integrity": "sha512-pxsI23gKWRt/SPHFkDEsP+w+Nd7gK37Hpv0ngc5HpWy2e7cKx9zR/+Q2ptAUqICNTecAaGWvmhway7pj/JLEWA==", + "cpu": [ + "x64" + ], + "license": "MIT", + "optional": true, + "os": [ + "win32" + ], + "engines": { + "node": ">= 10" + } + }, + "node_modules/@nodelib/fs.scandir": { + "version": "2.1.5", + "resolved": "https://registry.npmjs.org/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz", + "integrity": "sha512-vq24Bq3ym5HEQm2NKCr3yXDwjc7vTsEThRDnkp2DK9p1uqLR+DHurm/NOTo0KG7HYHU7eppKZj3MyqYuMBf62g==", + "license": "MIT", + "dependencies": { + "@nodelib/fs.stat": "2.0.5", + "run-parallel": "^1.1.9" + }, + "engines": { + "node": ">= 8" + } + }, + "node_modules/@nodelib/fs.stat": { + "version": "2.0.5", + "resolved": "https://registry.npmjs.org/@nodelib/fs.stat/-/fs.stat-2.0.5.tgz", + "integrity": "sha512-RkhPPp2zrqDAQA/2jNhnztcPAlv64XdhIp7a7454A5ovI7Bukxgt7MX7udwAu3zg1DcpPU0rz3VV1SeaqvY4+A==", + "license": "MIT", + "engines": { + "node": ">= 8" + } + }, + "node_modules/@nodelib/fs.walk": { + "version": "1.2.8", + "resolved": "https://registry.npmjs.org/@nodelib/fs.walk/-/fs.walk-1.2.8.tgz", + "integrity": "sha512-oGB+UxlgWcgQkgwo8GcEGwemoTFt3FIO9ababBmaGwXIoBKZ+GTy0pP185beGg7Llih/NSHSV2XAs1lnznocSg==", + "license": "MIT", + "dependencies": { + "@nodelib/fs.scandir": "2.1.5", + "fastq": "^1.6.0" + }, + "engines": { + "node": ">= 8" + } + }, + "node_modules/@pkgjs/parseargs": { + "version": "0.11.0", + "resolved": "https://registry.npmjs.org/@pkgjs/parseargs/-/parseargs-0.11.0.tgz", + "integrity": "sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg==", + "license": "MIT", + "optional": true, + "engines": { + "node": ">=14" + } + }, + "node_modules/@popperjs/core": { + "version": "2.11.8", + "resolved": "https://registry.npmjs.org/@popperjs/core/-/core-2.11.8.tgz", + "integrity": "sha512-P1st0aksCrn9sGZhp8GMYwBnQsbvAWsZAX44oXNNvLHGqAOcoVxmjZiohstwQ7SqKnbR47akdNi+uleWD8+g6A==", + "license": "MIT", + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/popperjs" + } + }, + "node_modules/@swc/counter": { + "version": "0.1.3", + "resolved": "https://registry.npmjs.org/@swc/counter/-/counter-0.1.3.tgz", + "integrity": "sha512-e2BR4lsJkkRlKZ/qCHPw9ZaSxc0MVUd7gtbtaB7aMvHeJVYe8sOB8DBZkP2DtISHGSku9sCK6T6cnY0CtXrOCQ==", + "license": "Apache-2.0" + }, + "node_modules/@swc/helpers": { + "version": "0.5.5", + "resolved": "https://registry.npmjs.org/@swc/helpers/-/helpers-0.5.5.tgz", + "integrity": "sha512-KGYxvIOXcceOAbEk4bi/dVLEK9z8sZ0uBB3Il5b1rhfClSpcX0yfRO0KmTkqR2cnQDymwLB+25ZyMzICg/cm/A==", + "license": "Apache-2.0", + "dependencies": { + "@swc/counter": "^0.1.3", + "tslib": "^2.4.0" + } + }, + "node_modules/@swc/helpers/node_modules/tslib": { + "version": "2.7.0", + "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.7.0.tgz", + "integrity": "sha512-gLXCKdN1/j47AiHiOkJN69hJmcbGTHI0ImLmbYLHykhgeN0jVGola9yVjFgzCUklsZQMW55o+dW7IXv3RCXDzA==", + "license": "0BSD" + }, + "node_modules/@tanstack/query-core": { + "version": "5.52.2", + "resolved": "https://registry.npmjs.org/@tanstack/query-core/-/query-core-5.52.2.tgz", + "integrity": "sha512-9vvbFecK4A0nDnrc/ks41e3UHONF1DAnGz8Tgbxkl59QcvKWmc0ewhYuIKRh8NC4ja5LTHT9EH16KHbn2AIYWA==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/tannerlinsley" + } + }, + "node_modules/@tanstack/react-query": { + "version": "5.52.2", + "resolved": "https://registry.npmjs.org/@tanstack/react-query/-/react-query-5.52.2.tgz", + "integrity": "sha512-d4OwmobpP+6+SvuAxW1RzAY95Pv87Gu+0GjtErzFOUXo+n0FGcwxKvzhswCsXKxsgnAr3bU2eJ2u+GXQAutkCQ==", + "license": "MIT", + "dependencies": { + "@tanstack/query-core": "5.52.2" + }, + "funding": { + "type": "github", + "url": "https://github.com/sponsors/tannerlinsley" + }, + "peerDependencies": { + "react": "^18 || ^19" + } + }, + "node_modules/@tanstack/react-virtual": { + "version": "3.10.5", + "resolved": "https://registry.npmjs.org/@tanstack/react-virtual/-/react-virtual-3.10.5.tgz", + "integrity": "sha512-PP6QeixGyNli7edy6CmjYX9CaJiqkWzaVx5NmSnBMjjD4WOwXDjX+5JM0sNXpUjJ2gIRFl8Sno/KlZ6X1dbRfg==", + "license": "MIT", + "dependencies": { + "@tanstack/virtual-core": "3.10.5" + }, + "funding": { + "type": "github", + "url": "https://github.com/sponsors/tannerlinsley" + }, + "peerDependencies": { + "react": "^16.8.0 || ^17.0.0 || ^18.0.0", + "react-dom": "^16.8.0 || ^17.0.0 || ^18.0.0" + } + }, + "node_modules/@tanstack/virtual-core": { + "version": "3.10.5", + "resolved": "https://registry.npmjs.org/@tanstack/virtual-core/-/virtual-core-3.10.5.tgz", + "integrity": "sha512-WlJp8CipNzBz8Q4g159uMfswYHZ8p1+xJwLBdnbBTcSSu0zVoY6i27Suw5J0Y88YBnJ9jHR8jJMH/qSuZWWfNw==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/tannerlinsley" + } + }, + "node_modules/@theguild/remark-mermaid": { + "version": "0.0.5", + "resolved": "https://registry.npmjs.org/@theguild/remark-mermaid/-/remark-mermaid-0.0.5.tgz", + "integrity": "sha512-e+ZIyJkEv9jabI4m7q29wZtZv+2iwPGsXJ2d46Zi7e+QcFudiyuqhLhHG/3gX3ZEB+hxTch+fpItyMS8jwbIcw==", + "license": "MIT", + "dependencies": { + "mermaid": "^10.2.2", + "unist-util-visit": "^5.0.0" + }, + "peerDependencies": { + "react": "^18.2.0" + } + }, + "node_modules/@theguild/remark-mermaid/node_modules/@types/unist": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/@types/unist/-/unist-3.0.3.tgz", + "integrity": "sha512-ko/gIFJRv177XgZsZcBwnqJN5x/Gien8qNOn0D5bQU/zAzVf9Zt3BlcUiLqhV9y4ARk0GbT3tnUiPNgnTXzc/Q==", + "license": "MIT" + }, + "node_modules/@theguild/remark-mermaid/node_modules/unist-util-is": { + "version": "6.0.0", + "resolved": "https://registry.npmjs.org/unist-util-is/-/unist-util-is-6.0.0.tgz", + "integrity": "sha512-2qCTHimwdxLfz+YzdGfkqNlH0tLi9xjTnHddPmJwtIG9MGsdbutfTc4P+haPD7l7Cjxf/WZj+we5qfVPvvxfYw==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/@theguild/remark-mermaid/node_modules/unist-util-visit": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/unist-util-visit/-/unist-util-visit-5.0.0.tgz", + "integrity": "sha512-MR04uvD+07cwl/yhVuVWAtw+3GOR/knlL55Nd/wAdblk27GCVt3lqpTivy/tkJcZoNPzTwS1Y+KMojlLDhoTzg==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0", + "unist-util-is": "^6.0.0", + "unist-util-visit-parents": "^6.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/@theguild/remark-npm2yarn": { + "version": "0.2.1", + "resolved": "https://registry.npmjs.org/@theguild/remark-npm2yarn/-/remark-npm2yarn-0.2.1.tgz", + "integrity": "sha512-jUTFWwDxtLEFtGZh/TW/w30ySaDJ8atKWH8dq2/IiQF61dPrGfETpl0WxD0VdBfuLOeU14/kop466oBSRO/5CA==", + "license": "MIT", + "dependencies": { + "npm-to-yarn": "^2.1.0", + "unist-util-visit": "^5.0.0" + } + }, + "node_modules/@theguild/remark-npm2yarn/node_modules/@types/unist": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/@types/unist/-/unist-3.0.3.tgz", + "integrity": "sha512-ko/gIFJRv177XgZsZcBwnqJN5x/Gien8qNOn0D5bQU/zAzVf9Zt3BlcUiLqhV9y4ARk0GbT3tnUiPNgnTXzc/Q==", + "license": "MIT" + }, + "node_modules/@theguild/remark-npm2yarn/node_modules/unist-util-is": { + "version": "6.0.0", + "resolved": "https://registry.npmjs.org/unist-util-is/-/unist-util-is-6.0.0.tgz", + "integrity": "sha512-2qCTHimwdxLfz+YzdGfkqNlH0tLi9xjTnHddPmJwtIG9MGsdbutfTc4P+haPD7l7Cjxf/WZj+we5qfVPvvxfYw==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/@theguild/remark-npm2yarn/node_modules/unist-util-visit": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/unist-util-visit/-/unist-util-visit-5.0.0.tgz", + "integrity": "sha512-MR04uvD+07cwl/yhVuVWAtw+3GOR/knlL55Nd/wAdblk27GCVt3lqpTivy/tkJcZoNPzTwS1Y+KMojlLDhoTzg==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0", + "unist-util-is": "^6.0.0", + "unist-util-visit-parents": "^6.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/@types/acorn": { + "version": "4.0.6", + "resolved": "https://registry.npmjs.org/@types/acorn/-/acorn-4.0.6.tgz", + "integrity": "sha512-veQTnWP+1D/xbxVrPC3zHnCZRjSrKfhbMUlEA43iMZLu7EsnTtkJklIuwrCPbOi8YkvDQAiW05VQQFvvz9oieQ==", + "license": "MIT", + "dependencies": { + "@types/estree": "*" + } + }, + "node_modules/@types/d3-scale": { + "version": "4.0.8", + "resolved": "https://registry.npmjs.org/@types/d3-scale/-/d3-scale-4.0.8.tgz", + "integrity": "sha512-gkK1VVTr5iNiYJ7vWDI+yUFFlszhNMtVeneJ6lUTKPjprsvLLI9/tgEGiXJOnlINJA8FyA88gfnQsHbybVZrYQ==", + "license": "MIT", + "dependencies": { + "@types/d3-time": "*" + } + }, + "node_modules/@types/d3-scale-chromatic": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/@types/d3-scale-chromatic/-/d3-scale-chromatic-3.0.3.tgz", + "integrity": "sha512-laXM4+1o5ImZv3RpFAsTRn3TEkzqkytiOY0Dz0sq5cnd1dtNlk6sHLon4OvqaiJb28T0S/TdsBI3Sjsy+keJrw==", + "license": "MIT" + }, + "node_modules/@types/d3-time": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/@types/d3-time/-/d3-time-3.0.3.tgz", + "integrity": "sha512-2p6olUZ4w3s+07q3Tm2dbiMZy5pCDfYwtLXXHUnVzXgQlZ/OyPtUz6OL382BkOuGlLXqfT+wqv8Fw2v8/0geBw==", + "license": "MIT" + }, + "node_modules/@types/debug": { + "version": "4.1.12", + "resolved": "https://registry.npmjs.org/@types/debug/-/debug-4.1.12.tgz", + "integrity": "sha512-vIChWdVG3LG1SMxEvI/AK+FWJthlrqlTu7fbrlywTkkaONwk/UAGaULXRlf8vkzFBLVm0zkMdCquhL5aOjhXPQ==", + "license": "MIT", + "dependencies": { + "@types/ms": "*" + } + }, + "node_modules/@types/estree": { + "version": "1.0.5", + "resolved": "https://registry.npmjs.org/@types/estree/-/estree-1.0.5.tgz", + "integrity": "sha512-/kYRxGDLWzHOB7q+wtSUQlFrtcdUccpfy+X+9iMBpHK8QLLhx2wIPYuS5DYtR9Wa/YlZAbIovy7qVdB1Aq6Lyw==", + "license": "MIT" + }, + "node_modules/@types/estree-jsx": { + "version": "1.0.5", + "resolved": "https://registry.npmjs.org/@types/estree-jsx/-/estree-jsx-1.0.5.tgz", + "integrity": "sha512-52CcUVNFyfb1A2ALocQw/Dd1BQFNmSdkuC3BkZ6iqhdMfQz7JWOFRuJFloOzjk+6WijU56m9oKXFAXc7o3Towg==", + "license": "MIT", + "dependencies": { + "@types/estree": "*" + } + }, + "node_modules/@types/hast": { + "version": "2.3.10", + "resolved": "https://registry.npmjs.org/@types/hast/-/hast-2.3.10.tgz", + "integrity": "sha512-McWspRw8xx8J9HurkVBfYj0xKoE25tOFlHGdx4MJ5xORQrMGZNqJhVQWaIbm6Oyla5kYOXtDiopzKRJzEOkwJw==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2" + } + }, + "node_modules/@types/hoist-non-react-statics": { + "version": "3.3.5", + "resolved": "https://registry.npmjs.org/@types/hoist-non-react-statics/-/hoist-non-react-statics-3.3.5.tgz", + "integrity": "sha512-SbcrWzkKBw2cdwRTwQAswfpB9g9LJWfjtUeW/jvNwbhC8cpmmNYVePa+ncbUe0rGTQ7G3Ff6mYUN2VMfLVr+Sg==", + "license": "MIT", + "dependencies": { + "@types/react": "*", + "hoist-non-react-statics": "^3.3.0" + } + }, + "node_modules/@types/js-yaml": { + "version": "4.0.9", + "resolved": "https://registry.npmjs.org/@types/js-yaml/-/js-yaml-4.0.9.tgz", + "integrity": "sha512-k4MGaQl5TGo/iipqb2UDG2UwjXziSWkh0uysQelTlJpX1qGlpUZYm8PnO4DxG1qBomtJUdYJ6qR6xdIah10JLg==", + "license": "MIT" + }, + "node_modules/@types/katex": { + "version": "0.16.7", + "resolved": "https://registry.npmjs.org/@types/katex/-/katex-0.16.7.tgz", + "integrity": "sha512-HMwFiRujE5PjrgwHQ25+bsLJgowjGjm5Z8FVSf0N6PwgJrwxH0QxzHYDcKsTfV3wva0vzrpqMTJS2jXPr5BMEQ==", + "license": "MIT" + }, + "node_modules/@types/lodash": { + "version": "4.17.7", + "resolved": "https://registry.npmjs.org/@types/lodash/-/lodash-4.17.7.tgz", + "integrity": "sha512-8wTvZawATi/lsmNu10/j2hk1KEP0IvjubqPE3cu1Xz7xfXXt5oCq3SNUz4fMIP4XGF9Ky+Ue2tBA3hcS7LSBlA==", + "license": "MIT" + }, + "node_modules/@types/mdast": { + "version": "3.0.15", + "resolved": "https://registry.npmjs.org/@types/mdast/-/mdast-3.0.15.tgz", + "integrity": "sha512-LnwD+mUEfxWMa1QpDraczIn6k0Ee3SMicuYSSzS6ZYl2gKS09EClnJYGd8Du6rfc5r/GZEk5o1mRb8TaTj03sQ==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2" + } + }, + "node_modules/@types/mdx": { + "version": "2.0.13", + "resolved": "https://registry.npmjs.org/@types/mdx/-/mdx-2.0.13.tgz", + "integrity": "sha512-+OWZQfAYyio6YkJb3HLxDrvnx6SWWDbC0zVPfBRzUk0/nqoDyf6dNxQi3eArPe8rJ473nobTMQ/8Zk+LxJ+Yuw==", + "license": "MIT" + }, + "node_modules/@types/ms": { + "version": "0.7.34", + "resolved": "https://registry.npmjs.org/@types/ms/-/ms-0.7.34.tgz", + "integrity": "sha512-nG96G3Wp6acyAgJqGasjODb+acrI7KltPiRxzHPXnP3NgI28bpQDRv53olbqGXbfcgF5aiiHmO3xpwEpS5Ld9g==", + "license": "MIT" + }, + "node_modules/@types/node": { + "version": "22.1.0", + "resolved": "https://registry.npmjs.org/@types/node/-/node-22.1.0.tgz", + "integrity": "sha512-AOmuRF0R2/5j1knA3c6G3HOk523Ga+l+ZXltX8SF1+5oqcXijjfTd8fY3XRZqSihEu9XhtQnKYLmkFaoxgsJHw==", + "dev": true, + "license": "MIT", + "dependencies": { + "undici-types": "~6.13.0" + } + }, + "node_modules/@types/numeral": { + "version": "2.0.5", + "resolved": "https://registry.npmjs.org/@types/numeral/-/numeral-2.0.5.tgz", + "integrity": "sha512-kH8I7OSSwQu9DS9JYdFWbuvhVzvFRoCPCkGxNwoGgaPeDfEPJlcxNvEOypZhQ3XXHsGbfIuYcxcJxKUfJHnRfw==", + "license": "MIT" + }, + "node_modules/@types/parse-json": { + "version": "4.0.2", + "resolved": "https://registry.npmjs.org/@types/parse-json/-/parse-json-4.0.2.tgz", + "integrity": "sha512-dISoDXWWQwUquiKsyZ4Ng+HX2KsPL7LyHKHQwgGFEA3IaKac4Obd+h2a/a6waisAoepJlBcx9paWqjA8/HVjCw==", + "license": "MIT" + }, + "node_modules/@types/parse5": { + "version": "5.0.3", + "resolved": "https://registry.npmjs.org/@types/parse5/-/parse5-5.0.3.tgz", + "integrity": "sha512-kUNnecmtkunAoQ3CnjmMkzNU/gtxG8guhi+Fk2U/kOpIKjIMKnXGp4IJCgQJrXSgMsWYimYG4TGjz/UzbGEBTw==", + "license": "MIT" + }, + "node_modules/@types/prismjs": { + "version": "1.26.4", + "resolved": "https://registry.npmjs.org/@types/prismjs/-/prismjs-1.26.4.tgz", + "integrity": "sha512-rlAnzkW2sZOjbqZ743IHUhFcvzaGbqijwOu8QZnZCjfQzBqFE3s4lOTJEsxikImav9uzz/42I+O7YUs1mWgMlg==", + "license": "MIT" + }, + "node_modules/@types/prop-types": { + "version": "15.7.12", + "resolved": "https://registry.npmjs.org/@types/prop-types/-/prop-types-15.7.12.tgz", + "integrity": "sha512-5zvhXYtRNRluoE/jAp4GVsSduVUzNWKkOZrCDBWYtE7biZywwdC2AcEzg+cSMLFRfVgeAFqpfNabiPjxFddV1Q==", + "license": "MIT" + }, + "node_modules/@types/react": { + "version": "18.3.4", + "resolved": "https://registry.npmjs.org/@types/react/-/react-18.3.4.tgz", + "integrity": "sha512-J7W30FTdfCxDDjmfRM+/JqLHBIyl7xUIp9kwK637FGmY7+mkSFSe6L4jpZzhj5QMfLssSDP4/i75AKkrdC7/Jw==", + "license": "MIT", + "dependencies": { + "@types/prop-types": "*", + "csstype": "^3.0.2" + } + }, + "node_modules/@types/react-dom": { + "version": "18.3.0", + "resolved": "https://registry.npmjs.org/@types/react-dom/-/react-dom-18.3.0.tgz", + "integrity": "sha512-EhwApuTmMBmXuFOikhQLIBUn6uFg81SwLMOAUgodJF14SOBOCMdU04gDoYi0WOJJHD144TL32z4yDqCW3dnkQg==", + "license": "MIT", + "dependencies": { + "@types/react": "*" + } + }, + "node_modules/@types/react-window": { + "version": "1.8.8", + "resolved": "https://registry.npmjs.org/@types/react-window/-/react-window-1.8.8.tgz", + "integrity": "sha512-8Ls660bHR1AUA2kuRvVG9D/4XpRC6wjAaPT9dil7Ckc76eP9TKWZwwmgfq8Q1LANX3QNDnoU4Zp48A3w+zK69Q==", + "license": "MIT", + "dependencies": { + "@types/react": "*" + } + }, + "node_modules/@types/refractor": { + "version": "3.4.1", + "resolved": "https://registry.npmjs.org/@types/refractor/-/refractor-3.4.1.tgz", + "integrity": "sha512-wYuorIiCTSuvRT9srwt+taF6mH/ww+SyN2psM0sjef2qW+sS8GmshgDGTEDgWB1sTVGgYVE6EK7dBA2MxQxibg==", + "license": "MIT", + "dependencies": { + "@types/prismjs": "*" + } + }, + "node_modules/@types/unist": { + "version": "2.0.11", + "resolved": "https://registry.npmjs.org/@types/unist/-/unist-2.0.11.tgz", + "integrity": "sha512-CmBKiL6NNo/OqgmMn95Fk9Whlp2mtvIv+KNpQKN2F4SjvrEesubTRWGYSg+BnWZOnlCaSTU1sMpsBOzgbYhnsA==", + "license": "MIT" + }, + "node_modules/@types/use-sync-external-store": { + "version": "0.0.3", + "resolved": "https://registry.npmjs.org/@types/use-sync-external-store/-/use-sync-external-store-0.0.3.tgz", + "integrity": "sha512-EwmlvuaxPNej9+T4v5AuBPJa2x2UOJVdjCtDHgcDqitUeOtjnJKJ+apYjVcAoBEMjKW1VVFGZLUb5+qqa09XFA==", + "license": "MIT" + }, + "node_modules/@ungap/structured-clone": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/@ungap/structured-clone/-/structured-clone-1.2.0.tgz", + "integrity": "sha512-zuVdFrMJiuCDQUMCzQaD6KL28MjnqqN8XnAqiEq9PNm/hCPTSGfrXCOfwj1ow4LFb/tNymJPwsNbVePc1xFqrQ==", + "license": "ISC" + }, + "node_modules/@vercel/analytics": { + "version": "1.3.1", + "resolved": "https://registry.npmjs.org/@vercel/analytics/-/analytics-1.3.1.tgz", + "integrity": "sha512-xhSlYgAuJ6Q4WQGkzYTLmXwhYl39sWjoMA3nHxfkvG+WdBT25c563a7QhwwKivEOZtPJXifYHR1m2ihoisbWyA==", + "license": "MPL-2.0", + "dependencies": { + "server-only": "^0.0.1" + }, + "peerDependencies": { + "next": ">= 13", + "react": "^18 || ^19" + }, + "peerDependenciesMeta": { + "next": { + "optional": true + }, + "react": { + "optional": true + } + } + }, + "node_modules/acorn": { + "version": "8.12.1", + "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.12.1.tgz", + "integrity": "sha512-tcpGyI9zbizT9JbV6oYE477V6mTlXvvi0T0G3SNIYE2apm/G5huBa1+K89VGeovbg+jycCrfhl3ADxErOuO6Jg==", + "license": "MIT", + "bin": { + "acorn": "bin/acorn" + }, + "engines": { + "node": ">=0.4.0" + } + }, + "node_modules/acorn-jsx": { + "version": "5.3.2", + "resolved": "https://registry.npmjs.org/acorn-jsx/-/acorn-jsx-5.3.2.tgz", + "integrity": "sha512-rq9s+JNhf0IChjtDXxllJ7g41oZk5SlXtp0LHwyA5cejwn7vKmKp4pPri6YEePv2PU65sAsegbXtIinmDFDXgQ==", + "license": "MIT", + "peerDependencies": { + "acorn": "^6.0.0 || ^7.0.0 || ^8.0.0" + } + }, + "node_modules/ansi-regex": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.0.1.tgz", + "integrity": "sha512-n5M855fKb2SsfMIiFFoVrABHJC8QtHwVx+mHWP3QcEqBHYienj5dHSgjbxtC0WEZXYt4wcD6zrQElDPhFuZgfA==", + "license": "MIT", + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/chalk/ansi-regex?sponsor=1" + } + }, + "node_modules/ansi-sequence-parser": { + "version": "1.1.1", + "resolved": "https://registry.npmjs.org/ansi-sequence-parser/-/ansi-sequence-parser-1.1.1.tgz", + "integrity": "sha512-vJXt3yiaUL4UU546s3rPXlsry/RnM730G1+HkpKE012AN0sx1eOrxSu95oKDIonskeLTijMgqWZ3uDEe3NFvyg==", + "license": "MIT" + }, + "node_modules/ansi-styles": { + "version": "3.2.1", + "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.1.tgz", + "integrity": "sha512-VT0ZI6kZRdTh8YyJw3SMbYm/u+NqfsAxEpWO0Pf9sq8/e94WxxOpPKx9FR1FlyCtOVDNOQ+8ntlqFxiRc+r5qA==", + "license": "MIT", + "dependencies": { + "color-convert": "^1.9.0" + }, + "engines": { + "node": ">=4" + } + }, + "node_modules/any-promise": { + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/any-promise/-/any-promise-1.3.0.tgz", + "integrity": "sha512-7UvmKalWRt1wgjL1RrGxoSJW/0QZFIegpeGvZG9kjp8vrRu55XTHbwnqq2GpXm9uLbcuhxm3IqX9OB4MZR1b2A==", + "license": "MIT" + }, + "node_modules/anymatch": { + "version": "3.1.3", + "resolved": "https://registry.npmjs.org/anymatch/-/anymatch-3.1.3.tgz", + "integrity": "sha512-KMReFUr0B4t+D+OBkjR3KYqvocp2XaSzO55UcB6mgQMd3KbcE+mWTyvVV7D/zsdEbNnV6acZUutkiHQXvTr1Rw==", + "license": "ISC", + "dependencies": { + "normalize-path": "^3.0.0", + "picomatch": "^2.0.4" + }, + "engines": { + "node": ">= 8" + } + }, + "node_modules/arch": { + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/arch/-/arch-2.2.0.tgz", + "integrity": "sha512-Of/R0wqp83cgHozfIYLbBMnej79U/SVGOOyuB3VVFv1NRM/PSFMK12x9KVtiYzJqmnU5WR2qp0Z5rHb7sWGnFQ==", + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/feross" + }, + { + "type": "patreon", + "url": "https://www.patreon.com/feross" + }, + { + "type": "consulting", + "url": "https://feross.org/support" + } + ], + "license": "MIT" + }, + "node_modules/arg": { + "version": "5.0.2", + "resolved": "https://registry.npmjs.org/arg/-/arg-5.0.2.tgz", + "integrity": "sha512-PYjyFOLKQ9y57JvQ6QLo8dAgNqswh8M1RMJYdQduT6xbWSgK36P/Z/v+p888pM69jMMfS8Xd8F6I1kQ/I9HUGg==", + "license": "MIT" + }, + "node_modules/argparse": { + "version": "1.0.10", + "resolved": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz", + "integrity": "sha512-o5Roy6tNG4SL/FOkCAN6RzjiakZS25RLYFrcMttJqbdd8BWrnA+fGz57iN5Pb06pvBGvl5gQ0B48dJlslXvoTg==", + "license": "MIT", + "dependencies": { + "sprintf-js": "~1.0.2" + } + }, + "node_modules/aria-hidden": { + "version": "1.2.4", + "resolved": "https://registry.npmjs.org/aria-hidden/-/aria-hidden-1.2.4.tgz", + "integrity": "sha512-y+CcFFwelSXpLZk/7fMB2mUbGtX9lKycf1MWJ7CaTIERyitVlyQx6C+sxcROU2BAJ24OiZyK+8wj2i8AlBoS3A==", + "license": "MIT", + "dependencies": { + "tslib": "^2.0.0" + }, + "engines": { + "node": ">=10" + } + }, + "node_modules/aria-hidden/node_modules/tslib": { + "version": "2.7.0", + "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.7.0.tgz", + "integrity": "sha512-gLXCKdN1/j47AiHiOkJN69hJmcbGTHI0ImLmbYLHykhgeN0jVGola9yVjFgzCUklsZQMW55o+dW7IXv3RCXDzA==", + "license": "0BSD" + }, + "node_modules/astring": { + "version": "1.9.0", + "resolved": "https://registry.npmjs.org/astring/-/astring-1.9.0.tgz", + "integrity": "sha512-LElXdjswlqjWrPpJFg1Fx4wpkOCxj1TDHlSV4PlaRxHGWko024xICaa97ZkMfs6DRKlCguiAI+rbXv5GWwXIkg==", + "license": "MIT", + "bin": { + "astring": "bin/astring" + } + }, + "node_modules/asynckit": { + "version": "0.4.0", + "resolved": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz", + "integrity": "sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q==", + "license": "MIT" + }, + "node_modules/attr-accept": { + "version": "2.2.2", + "resolved": "https://registry.npmjs.org/attr-accept/-/attr-accept-2.2.2.tgz", + "integrity": "sha512-7prDjvt9HmqiZ0cl5CRjtS84sEyhsHP2coDkaZKRKVfCDo9s7iw7ChVmar78Gu9pC4SoR/28wFu/G5JJhTnqEg==", + "license": "MIT", + "engines": { + "node": ">=4" + } + }, + "node_modules/autoprefixer": { + "version": "10.4.20", + "resolved": "https://registry.npmjs.org/autoprefixer/-/autoprefixer-10.4.20.tgz", + "integrity": "sha512-XY25y5xSv/wEoqzDyXXME4AFfkZI0P23z6Fs3YgymDnKJkCGOnkL0iTxCa85UTqaSgfcqyf3UA6+c7wUvx/16g==", + "funding": [ + { + "type": "opencollective", + "url": "https://opencollective.com/postcss/" + }, + { + "type": "tidelift", + "url": "https://tidelift.com/funding/github/npm/autoprefixer" + }, + { + "type": "github", + "url": "https://github.com/sponsors/ai" + } + ], + "license": "MIT", + "dependencies": { + "browserslist": "^4.23.3", + "caniuse-lite": "^1.0.30001646", + "fraction.js": "^4.3.7", + "normalize-range": "^0.1.2", + "picocolors": "^1.0.1", + "postcss-value-parser": "^4.2.0" + }, + "bin": { + "autoprefixer": "bin/autoprefixer" + }, + "engines": { + "node": "^10 || ^12 || >=14" + }, + "peerDependencies": { + "postcss": "^8.1.0" + } + }, + "node_modules/axios": { + "version": "1.7.5", + "resolved": "https://registry.npmjs.org/axios/-/axios-1.7.5.tgz", + "integrity": "sha512-fZu86yCo+svH3uqJ/yTdQ0QHpQu5oL+/QE+QPSv6BZSkDAoky9vytxp7u5qk83OJFS3kEBcesWni9WTZAv3tSw==", + "license": "MIT", + "dependencies": { + "follow-redirects": "^1.15.6", + "form-data": "^4.0.0", + "proxy-from-env": "^1.1.0" + } + }, + "node_modules/babel-plugin-macros": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/babel-plugin-macros/-/babel-plugin-macros-3.1.0.tgz", + "integrity": "sha512-Cg7TFGpIr01vOQNODXOOaGz2NpCU5gl8x1qJFbb6hbZxR7XrcE2vtbAsTAbJ7/xwJtUuJEw8K8Zr/AE0LHlesg==", + "license": "MIT", + "dependencies": { + "@babel/runtime": "^7.12.5", + "cosmiconfig": "^7.0.0", + "resolve": "^1.19.0" + }, + "engines": { + "node": ">=10", + "npm": ">=6" + } + }, + "node_modules/bail": { + "version": "1.0.5", + "resolved": "https://registry.npmjs.org/bail/-/bail-1.0.5.tgz", + "integrity": "sha512-xFbRxM1tahm08yHBP16MMjVUAvDaBMD38zsM9EMAUN61omwLmKlOpB/Zku5QkjZ8TZ4vn53pj+t518cH0S03RQ==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/balanced-match": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz", + "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==", + "license": "MIT" + }, + "node_modules/binary-extensions": { + "version": "2.3.0", + "resolved": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-2.3.0.tgz", + "integrity": "sha512-Ceh+7ox5qe7LJuLHoY0feh3pHuUDHAcRUeyL2VYghZwfpkNIy/+8Ocg0a3UuSoYzavmylwuLWQOf3hl0jjMMIw==", + "license": "MIT", + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/brace-expansion": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz", + "integrity": "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==", + "license": "MIT", + "dependencies": { + "balanced-match": "^1.0.0" + } + }, + "node_modules/braces": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/braces/-/braces-3.0.3.tgz", + "integrity": "sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==", + "license": "MIT", + "dependencies": { + "fill-range": "^7.1.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/browserslist": { + "version": "4.23.3", + "resolved": "https://registry.npmjs.org/browserslist/-/browserslist-4.23.3.tgz", + "integrity": "sha512-btwCFJVjI4YWDNfau8RhZ+B1Q/VLoUITrm3RlP6y1tYGWIOa+InuYiRGXUBXo8nA1qKmHMyLB/iVQg5TT4eFoA==", + "funding": [ + { + "type": "opencollective", + "url": "https://opencollective.com/browserslist" + }, + { + "type": "tidelift", + "url": "https://tidelift.com/funding/github/npm/browserslist" + }, + { + "type": "github", + "url": "https://github.com/sponsors/ai" + } + ], + "license": "MIT", + "dependencies": { + "caniuse-lite": "^1.0.30001646", + "electron-to-chromium": "^1.5.4", + "node-releases": "^2.0.18", + "update-browserslist-db": "^1.1.0" + }, + "bin": { + "browserslist": "cli.js" + }, + "engines": { + "node": "^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7" + } + }, + "node_modules/busboy": { + "version": "1.6.0", + "resolved": "https://registry.npmjs.org/busboy/-/busboy-1.6.0.tgz", + "integrity": "sha512-8SFQbg/0hQ9xy3UNTB0YEnsNBbWfhf7RtnzpL7TkBiTBRfrQ9Fxcnz7VJsleJpyp6rVLvXiuORqjlHi5q+PYuA==", + "dependencies": { + "streamsearch": "^1.1.0" + }, + "engines": { + "node": ">=10.16.0" + } + }, + "node_modules/callsites": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/callsites/-/callsites-3.1.0.tgz", + "integrity": "sha512-P8BjAsXvZS+VIDUI11hHCQEv74YT67YUi5JJFNWIqL235sBmjX4+qx9Muvls5ivyNENctx46xQLQ3aTuE7ssaQ==", + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/camelcase-css": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/camelcase-css/-/camelcase-css-2.0.1.tgz", + "integrity": "sha512-QOSvevhslijgYwRx6Rv7zKdMF8lbRmx+uQGx2+vDc+KI/eBnsy9kit5aj23AgGu3pa4t9AgwbnXWqS+iOY+2aA==", + "license": "MIT", + "engines": { + "node": ">= 6" + } + }, + "node_modules/caniuse-lite": { + "version": "1.0.30001653", + "resolved": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001653.tgz", + "integrity": "sha512-XGWQVB8wFQ2+9NZwZ10GxTYC5hk0Fa+q8cSkr0tgvMhYhMHP/QC+WTgrePMDBWiWc/pV+1ik82Al20XOK25Gcw==", + "funding": [ + { + "type": "opencollective", + "url": "https://opencollective.com/browserslist" + }, + { + "type": "tidelift", + "url": "https://tidelift.com/funding/github/npm/caniuse-lite" + }, + { + "type": "github", + "url": "https://github.com/sponsors/ai" + } + ], + "license": "CC-BY-4.0" + }, + "node_modules/ccount": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/ccount/-/ccount-1.1.0.tgz", + "integrity": "sha512-vlNK021QdI7PNeiUh/lKkC/mNHHfV0m/Ad5JoI0TYtlBnJAslM/JIkm/tGC88bkLIwO6OQ5uV6ztS6kVAtCDlg==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/chalk": { + "version": "2.4.2", + "resolved": "https://registry.npmjs.org/chalk/-/chalk-2.4.2.tgz", + "integrity": "sha512-Mti+f9lpJNcwF4tWV8/OrTTtF1gZi+f8FqlyAdouralcFWFQWF2+NgCHShjkCb+IFBLq9buZwE1xckQU4peSuQ==", + "license": "MIT", + "dependencies": { + "ansi-styles": "^3.2.1", + "escape-string-regexp": "^1.0.5", + "supports-color": "^5.3.0" + }, + "engines": { + "node": ">=4" + } + }, + "node_modules/chalk/node_modules/escape-string-regexp": { + "version": "1.0.5", + "resolved": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz", + "integrity": "sha512-vbRorB5FUQWvla16U8R/qgaFIya2qGzwDrNmCZuYKrbdSUMG6I1ZCGQRefkRVhuOkIGVne7BQ35DSfo1qvJqFg==", + "license": "MIT", + "engines": { + "node": ">=0.8.0" + } + }, + "node_modules/character-entities": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/character-entities/-/character-entities-2.0.2.tgz", + "integrity": "sha512-shx7oQ0Awen/BRIdkjkvz54PnEEI/EjwXDSIZp86/KKdbafHh1Df/RYGBhn4hbe2+uKC9FnT5UCEdyPz3ai9hQ==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/character-entities-html4": { + "version": "1.1.4", + "resolved": "https://registry.npmjs.org/character-entities-html4/-/character-entities-html4-1.1.4.tgz", + "integrity": "sha512-HRcDxZuZqMx3/a+qrzxdBKBPUpxWEq9xw2OPZ3a/174ihfrQKVsFhqtthBInFy1zZ9GgZyFXOatNujm8M+El3g==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/character-entities-legacy": { + "version": "1.1.4", + "resolved": "https://registry.npmjs.org/character-entities-legacy/-/character-entities-legacy-1.1.4.tgz", + "integrity": "sha512-3Xnr+7ZFS1uxeiUDvV02wQ+QDbc55o97tIV5zHScSPJpcLm/r0DFPcoY3tYRp+VZukxuMeKgXYmsXQHO05zQeA==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/character-reference-invalid": { + "version": "1.1.4", + "resolved": "https://registry.npmjs.org/character-reference-invalid/-/character-reference-invalid-1.1.4.tgz", + "integrity": "sha512-mKKUkUbhPpQlCOfIuZkvSEgktjPFIsZKRRbC6KWVEMvlzblj3i3asQv5ODsrwt0N3pHAEvjP8KTQPHkp0+6jOg==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/chokidar": { + "version": "3.6.0", + "resolved": "https://registry.npmjs.org/chokidar/-/chokidar-3.6.0.tgz", + "integrity": "sha512-7VT13fmjotKpGipCW9JEQAusEPE+Ei8nl6/g4FBAmIm0GOOLMua9NDDo/DWp0ZAxCr3cPq5ZpBqmPAQgDda2Pw==", + "license": "MIT", + "dependencies": { + "anymatch": "~3.1.2", + "braces": "~3.0.2", + "glob-parent": "~5.1.2", + "is-binary-path": "~2.1.0", + "is-glob": "~4.0.1", + "normalize-path": "~3.0.0", + "readdirp": "~3.6.0" + }, + "engines": { + "node": ">= 8.10.0" + }, + "funding": { + "url": "https://paulmillr.com/funding/" + }, + "optionalDependencies": { + "fsevents": "~2.3.2" + } + }, + "node_modules/chokidar/node_modules/glob-parent": { + "version": "5.1.2", + "resolved": "https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.2.tgz", + "integrity": "sha512-AOIgSQCepiJYwP3ARnGx+5VnTu2HBYdzbGP45eLw1vr3zB3vZLeyed1sC9hnbcOc9/SrMyM5RPQrkGz4aS9Zow==", + "license": "ISC", + "dependencies": { + "is-glob": "^4.0.1" + }, + "engines": { + "node": ">= 6" + } + }, + "node_modules/chroma-js": { + "version": "2.6.0", + "resolved": "https://registry.npmjs.org/chroma-js/-/chroma-js-2.6.0.tgz", + "integrity": "sha512-BLHvCB9s8Z1EV4ethr6xnkl/P2YRFOGqfgvuMG/MyCbZPrTA+NeiByY6XvgF0zP4/2deU2CXnWyMa3zu1LqQ3A==", + "license": "(BSD-3-Clause AND Apache-2.0)" + }, + "node_modules/classnames": { + "version": "2.5.1", + "resolved": "https://registry.npmjs.org/classnames/-/classnames-2.5.1.tgz", + "integrity": "sha512-saHYOzhIQs6wy2sVxTM6bUDsQO4F50V9RQ22qBpEdCW+I+/Wmke2HOl6lS6dTpdxVhb88/I6+Hs+438c3lfUow==", + "license": "MIT" + }, + "node_modules/client-only": { + "version": "0.0.1", + "resolved": "https://registry.npmjs.org/client-only/-/client-only-0.0.1.tgz", + "integrity": "sha512-IV3Ou0jSMzZrd3pZ48nLkT9DA7Ag1pnPzaiQhpW7c3RbcqqzvzzVu+L8gfqMp/8IM2MQtSiqaCxrrcfu8I8rMA==", + "license": "MIT" + }, + "node_modules/clipboardy": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/clipboardy/-/clipboardy-1.2.2.tgz", + "integrity": "sha512-16KrBOV7bHmHdxcQiCvfUFYVFyEah4FI8vYT1Fr7CGSA4G+xBWMEfUEQJS1hxeHGtI9ju1Bzs9uXSbj5HZKArw==", + "license": "MIT", + "dependencies": { + "arch": "^2.1.0", + "execa": "^0.8.0" + }, + "engines": { + "node": ">=4" + } + }, + "node_modules/clsx": { + "version": "2.1.1", + "resolved": "https://registry.npmjs.org/clsx/-/clsx-2.1.1.tgz", + "integrity": "sha512-eYm0QWBtUrBWZWG0d386OGAw16Z995PiOVo2B7bjWSbHedGl5e0ZWaq65kOGgUSNesEIDkB9ISbTg/JK9dhCZA==", + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/collapse-white-space": { + "version": "1.0.6", + "resolved": "https://registry.npmjs.org/collapse-white-space/-/collapse-white-space-1.0.6.tgz", + "integrity": "sha512-jEovNnrhMuqyCcjfEJA56v0Xq8SkIoPKDyaHahwo3POf4qcSXqMYuwNcOTzp74vTsR9Tn08z4MxWqAhcekogkQ==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/color": { + "version": "4.2.3", + "resolved": "https://registry.npmjs.org/color/-/color-4.2.3.tgz", + "integrity": "sha512-1rXeuUUiGGrykh+CeBdu5Ie7OJwinCgQY0bc7GCRxy5xVHy+moaqkpL/jqQq0MtQOeYcrqEz4abc5f0KtU7W4A==", + "license": "MIT", + "dependencies": { + "color-convert": "^2.0.1", + "color-string": "^1.9.0" + }, + "engines": { + "node": ">=12.5.0" + } + }, + "node_modules/color-convert": { + "version": "1.9.3", + "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-1.9.3.tgz", + "integrity": "sha512-QfAUtd+vFdAtFQcC8CCyYt1fYWxSqAiK2cSD6zDB8N3cpsEBAvRxp9zOGg6G/SHHJYAT88/az/IuDGALsNVbGg==", + "license": "MIT", + "dependencies": { + "color-name": "1.1.3" + } + }, + "node_modules/color-name": { + "version": "1.1.3", + "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz", + "integrity": "sha512-72fSenhMw2HZMTVHeCA9KCmpEIbzWiQsjN+BHcBbS9vr1mtt+vJjPdksIBNUmKAW8TFUDPJK5SUU3QhE9NEXDw==", + "license": "MIT" + }, + "node_modules/color-string": { + "version": "1.9.1", + "resolved": "https://registry.npmjs.org/color-string/-/color-string-1.9.1.tgz", + "integrity": "sha512-shrVawQFojnZv6xM40anx4CkoDP+fZsw/ZerEMsW/pyzsRbElpsL/DBVW7q3ExxwusdNXI3lXpuhEZkzs8p5Eg==", + "license": "MIT", + "dependencies": { + "color-name": "^1.0.0", + "simple-swizzle": "^0.2.2" + } + }, + "node_modules/color/node_modules/color-convert": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz", + "integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==", + "license": "MIT", + "dependencies": { + "color-name": "~1.1.4" + }, + "engines": { + "node": ">=7.0.0" + } + }, + "node_modules/color/node_modules/color-name": { + "version": "1.1.4", + "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz", + "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==", + "license": "MIT" + }, + "node_modules/combined-stream": { + "version": "1.0.8", + "resolved": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz", + "integrity": "sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==", + "license": "MIT", + "dependencies": { + "delayed-stream": "~1.0.0" + }, + "engines": { + "node": ">= 0.8" + } + }, + "node_modules/comma-separated-tokens": { + "version": "2.0.3", + "resolved": "https://registry.npmjs.org/comma-separated-tokens/-/comma-separated-tokens-2.0.3.tgz", + "integrity": "sha512-Fu4hJdvzeylCfQPp9SGWidpzrMs7tTrlu6Vb8XGaRGck8QSNZJJp538Wrb60Lax4fPwR64ViY468OIUTbRlGZg==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/commander": { + "version": "8.3.0", + "resolved": "https://registry.npmjs.org/commander/-/commander-8.3.0.tgz", + "integrity": "sha512-OkTL9umf+He2DZkUq8f8J9of7yL6RJKI24dVITBmNfZBmri9zYZQrKkuXiKhyfPSu8tUhnVBB1iKXevvnlR4Ww==", + "license": "MIT", + "engines": { + "node": ">= 12" + } + }, + "node_modules/compute-scroll-into-view": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/compute-scroll-into-view/-/compute-scroll-into-view-3.1.0.tgz", + "integrity": "sha512-rj8l8pD4bJ1nx+dAkMhV1xB5RuZEyVysfxJqB1pRchh1KVvwOv9b7CGB8ZfjTImVv2oF+sYMUkMZq6Na5Ftmbg==", + "license": "MIT" + }, + "node_modules/convert-source-map": { + "version": "1.9.0", + "resolved": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-1.9.0.tgz", + "integrity": "sha512-ASFBup0Mz1uyiIjANan1jzLQami9z1PoYSZCiiYW2FczPbenXc45FZdBZLzOT+r6+iciuEModtmCti+hjaAk0A==", + "license": "MIT" + }, + "node_modules/cose-base": { + "version": "1.0.3", + "resolved": "https://registry.npmjs.org/cose-base/-/cose-base-1.0.3.tgz", + "integrity": "sha512-s9whTXInMSgAp/NVXVNuVxVKzGH2qck3aQlVHxDCdAEPgtMKwc4Wq6/QKhgdEdgbLSi9rBTAcPoRa6JpiG4ksg==", + "license": "MIT", + "dependencies": { + "layout-base": "^1.0.0" + } + }, + "node_modules/cosmiconfig": { + "version": "7.1.0", + "resolved": "https://registry.npmjs.org/cosmiconfig/-/cosmiconfig-7.1.0.tgz", + "integrity": "sha512-AdmX6xUzdNASswsFtmwSt7Vj8po9IuqXm0UXz7QKPuEUmPB4XyjGfaAr2PSuELMwkRMVH1EpIkX5bTZGRB3eCA==", + "license": "MIT", + "dependencies": { + "@types/parse-json": "^4.0.0", + "import-fresh": "^3.2.1", + "parse-json": "^5.0.0", + "path-type": "^4.0.0", + "yaml": "^1.10.0" + }, + "engines": { + "node": ">=10" + } + }, + "node_modules/cross-spawn": { + "version": "7.0.3", + "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz", + "integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==", + "license": "MIT", + "dependencies": { + "path-key": "^3.1.0", + "shebang-command": "^2.0.0", + "which": "^2.0.1" + }, + "engines": { + "node": ">= 8" + } + }, + "node_modules/css-box-model": { + "version": "1.2.1", + "resolved": "https://registry.npmjs.org/css-box-model/-/css-box-model-1.2.1.tgz", + "integrity": "sha512-a7Vr4Q/kd/aw96bnJG332W9V9LkJO69JRcaCYDUqjp6/z0w6VcZjgAcTbgFxEPfBgdnAwlh3iwu+hLopa+flJw==", + "license": "MIT", + "dependencies": { + "tiny-invariant": "^1.0.6" + } + }, + "node_modules/cssesc": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/cssesc/-/cssesc-3.0.0.tgz", + "integrity": "sha512-/Tb/JcjK111nNScGob5MNtsntNM1aCNUDipB/TkwZFhyDrrE47SOx/18wF2bbjgc3ZzCSKW1T5nt5EbFoAz/Vg==", + "license": "MIT", + "bin": { + "cssesc": "bin/cssesc" + }, + "engines": { + "node": ">=4" + } + }, + "node_modules/csstype": { + "version": "3.1.3", + "resolved": "https://registry.npmjs.org/csstype/-/csstype-3.1.3.tgz", + "integrity": "sha512-M1uQkMl8rQK/szD0LNhtqxIPLpimGm8sOBwU7lLnCpSbTyY3yeU1Vc7l4KT5zT4s/yOxHH5O7tIuuLOCnLADRw==", + "license": "MIT" + }, + "node_modules/cytoscape": { + "version": "3.30.2", + "resolved": "https://registry.npmjs.org/cytoscape/-/cytoscape-3.30.2.tgz", + "integrity": "sha512-oICxQsjW8uSaRmn4UK/jkczKOqTrVqt5/1WL0POiJUT2EKNc9STM4hYFHv917yu55aTBMFNRzymlJhVAiWPCxw==", + "license": "MIT", + "engines": { + "node": ">=0.10" + } + }, + "node_modules/cytoscape-cose-bilkent": { + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/cytoscape-cose-bilkent/-/cytoscape-cose-bilkent-4.1.0.tgz", + "integrity": "sha512-wgQlVIUJF13Quxiv5e1gstZ08rnZj2XaLHGoFMYXz7SkNfCDOOteKBE6SYRfA9WxxI/iBc3ajfDoc6hb/MRAHQ==", + "license": "MIT", + "dependencies": { + "cose-base": "^1.0.0" + }, + "peerDependencies": { + "cytoscape": "^3.2.0" + } + }, + "node_modules/d3": { + "version": "7.9.0", + "resolved": "https://registry.npmjs.org/d3/-/d3-7.9.0.tgz", + "integrity": "sha512-e1U46jVP+w7Iut8Jt8ri1YsPOvFpg46k+K8TpCb0P+zjCkjkPnV7WzfDJzMHy1LnA+wj5pLT1wjO901gLXeEhA==", + "license": "ISC", + "dependencies": { + "d3-array": "3", + "d3-axis": "3", + "d3-brush": "3", + "d3-chord": "3", + "d3-color": "3", + "d3-contour": "4", + "d3-delaunay": "6", + "d3-dispatch": "3", + "d3-drag": "3", + "d3-dsv": "3", + "d3-ease": "3", + "d3-fetch": "3", + "d3-force": "3", + "d3-format": "3", + "d3-geo": "3", + "d3-hierarchy": "3", + "d3-interpolate": "3", + "d3-path": "3", + "d3-polygon": "3", + "d3-quadtree": "3", + "d3-random": "3", + "d3-scale": "4", + "d3-scale-chromatic": "3", + "d3-selection": "3", + "d3-shape": "3", + "d3-time": "3", + "d3-time-format": "4", + "d3-timer": "3", + "d3-transition": "3", + "d3-zoom": "3" + }, + "engines": { + "node": ">=12" + } + }, + "node_modules/d3-array": { + "version": "3.2.4", + "resolved": "https://registry.npmjs.org/d3-array/-/d3-array-3.2.4.tgz", + "integrity": "sha512-tdQAmyA18i4J7wprpYq8ClcxZy3SC31QMeByyCFyRt7BVHdREQZ5lpzoe5mFEYZUWe+oq8HBvk9JjpibyEV4Jg==", + "license": "ISC", + "dependencies": { + "internmap": "1 - 2" + }, + "engines": { + "node": ">=12" + } + }, + "node_modules/d3-axis": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/d3-axis/-/d3-axis-3.0.0.tgz", + "integrity": "sha512-IH5tgjV4jE/GhHkRV0HiVYPDtvfjHQlQfJHs0usq7M30XcSBvOotpmH1IgkcXsO/5gEQZD43B//fc7SRT5S+xw==", + "license": "ISC", + "engines": { + "node": ">=12" + } + }, + "node_modules/d3-brush": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/d3-brush/-/d3-brush-3.0.0.tgz", + "integrity": "sha512-ALnjWlVYkXsVIGlOsuWH1+3udkYFI48Ljihfnh8FZPF2QS9o+PzGLBslO0PjzVoHLZ2KCVgAM8NVkXPJB2aNnQ==", + "license": "ISC", + "dependencies": { + "d3-dispatch": "1 - 3", + "d3-drag": "2 - 3", + "d3-interpolate": "1 - 3", + "d3-selection": "3", + "d3-transition": "3" + }, + "engines": { + "node": ">=12" + } + }, + "node_modules/d3-chord": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/d3-chord/-/d3-chord-3.0.1.tgz", + "integrity": "sha512-VE5S6TNa+j8msksl7HwjxMHDM2yNK3XCkusIlpX5kwauBfXuyLAtNg9jCp/iHH61tgI4sb6R/EIMWCqEIdjT/g==", + "license": "ISC", + "dependencies": { + "d3-path": "1 - 3" + }, + "engines": { + "node": ">=12" + } + }, + "node_modules/d3-color": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/d3-color/-/d3-color-3.1.0.tgz", + "integrity": "sha512-zg/chbXyeBtMQ1LbD/WSoW2DpC3I0mpmPdW+ynRTj/x2DAWYrIY7qeZIHidozwV24m4iavr15lNwIwLxRmOxhA==", + "license": "ISC", + "engines": { + "node": ">=12" + } + }, + "node_modules/d3-contour": { + "version": "4.0.2", + "resolved": "https://registry.npmjs.org/d3-contour/-/d3-contour-4.0.2.tgz", + "integrity": "sha512-4EzFTRIikzs47RGmdxbeUvLWtGedDUNkTcmzoeyg4sP/dvCexO47AaQL7VKy/gul85TOxw+IBgA8US2xwbToNA==", + "license": "ISC", + "dependencies": { + "d3-array": "^3.2.0" + }, + "engines": { + "node": ">=12" + } + }, + "node_modules/d3-delaunay": { + "version": "6.0.4", + "resolved": "https://registry.npmjs.org/d3-delaunay/-/d3-delaunay-6.0.4.tgz", + "integrity": "sha512-mdjtIZ1XLAM8bm/hx3WwjfHt6Sggek7qH043O8KEjDXN40xi3vx/6pYSVTwLjEgiXQTbvaouWKynLBiUZ6SK6A==", + "license": "ISC", + "dependencies": { + "delaunator": "5" + }, + "engines": { + "node": ">=12" + } + }, + "node_modules/d3-dispatch": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/d3-dispatch/-/d3-dispatch-3.0.1.tgz", + "integrity": "sha512-rzUyPU/S7rwUflMyLc1ETDeBj0NRuHKKAcvukozwhshr6g6c5d8zh4c2gQjY2bZ0dXeGLWc1PF174P2tVvKhfg==", + "license": "ISC", + "engines": { + "node": ">=12" + } + }, + "node_modules/d3-drag": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/d3-drag/-/d3-drag-3.0.0.tgz", + "integrity": "sha512-pWbUJLdETVA8lQNJecMxoXfH6x+mO2UQo8rSmZ+QqxcbyA3hfeprFgIT//HW2nlHChWeIIMwS2Fq+gEARkhTkg==", + "license": "ISC", + "dependencies": { + "d3-dispatch": "1 - 3", + "d3-selection": "3" + }, + "engines": { + "node": ">=12" + } + }, + "node_modules/d3-dsv": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/d3-dsv/-/d3-dsv-3.0.1.tgz", + "integrity": "sha512-UG6OvdI5afDIFP9w4G0mNq50dSOsXHJaRE8arAS5o9ApWnIElp8GZw1Dun8vP8OyHOZ/QJUKUJwxiiCCnUwm+Q==", + "license": "ISC", + "dependencies": { + "commander": "7", + "iconv-lite": "0.6", + "rw": "1" + }, + "bin": { + "csv2json": "bin/dsv2json.js", + "csv2tsv": "bin/dsv2dsv.js", + "dsv2dsv": "bin/dsv2dsv.js", + "dsv2json": "bin/dsv2json.js", + "json2csv": "bin/json2dsv.js", + "json2dsv": "bin/json2dsv.js", + "json2tsv": "bin/json2dsv.js", + "tsv2csv": "bin/dsv2dsv.js", + "tsv2json": "bin/dsv2json.js" + }, + "engines": { + "node": ">=12" + } + }, + "node_modules/d3-dsv/node_modules/commander": { + "version": "7.2.0", + "resolved": "https://registry.npmjs.org/commander/-/commander-7.2.0.tgz", + "integrity": "sha512-QrWXB+ZQSVPmIWIhtEO9H+gwHaMGYiF5ChvoJ+K9ZGHG/sVsa6yiesAD1GC/x46sET00Xlwo1u49RVVVzvcSkw==", + "license": "MIT", + "engines": { + "node": ">= 10" + } + }, + "node_modules/d3-ease": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/d3-ease/-/d3-ease-3.0.1.tgz", + "integrity": "sha512-wR/XK3D3XcLIZwpbvQwQ5fK+8Ykds1ip7A2Txe0yxncXSdq1L9skcG7blcedkOX+ZcgxGAmLX1FrRGbADwzi0w==", + "license": "BSD-3-Clause", + "engines": { + "node": ">=12" + } + }, + "node_modules/d3-fetch": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/d3-fetch/-/d3-fetch-3.0.1.tgz", + "integrity": "sha512-kpkQIM20n3oLVBKGg6oHrUchHM3xODkTzjMoj7aWQFq5QEM+R6E4WkzT5+tojDY7yjez8KgCBRoj4aEr99Fdqw==", + "license": "ISC", + "dependencies": { + "d3-dsv": "1 - 3" + }, + "engines": { + "node": ">=12" + } + }, + "node_modules/d3-force": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/d3-force/-/d3-force-3.0.0.tgz", + "integrity": "sha512-zxV/SsA+U4yte8051P4ECydjD/S+qeYtnaIyAs9tgHCqfguma/aAQDjo85A9Z6EKhBirHRJHXIgJUlffT4wdLg==", + "license": "ISC", + "dependencies": { + "d3-dispatch": "1 - 3", + "d3-quadtree": "1 - 3", + "d3-timer": "1 - 3" + }, + "engines": { + "node": ">=12" + } + }, + "node_modules/d3-format": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/d3-format/-/d3-format-3.1.0.tgz", + "integrity": "sha512-YyUI6AEuY/Wpt8KWLgZHsIU86atmikuoOmCfommt0LYHiQSPjvX2AcFc38PX0CBpr2RCyZhjex+NS/LPOv6YqA==", + "license": "ISC", + "engines": { + "node": ">=12" + } + }, + "node_modules/d3-geo": { + "version": "3.1.1", + "resolved": "https://registry.npmjs.org/d3-geo/-/d3-geo-3.1.1.tgz", + "integrity": "sha512-637ln3gXKXOwhalDzinUgY83KzNWZRKbYubaG+fGVuc/dxO64RRljtCTnf5ecMyE1RIdtqpkVcq0IbtU2S8j2Q==", + "license": "ISC", + "dependencies": { + "d3-array": "2.5.0 - 3" + }, + "engines": { + "node": ">=12" + } + }, + "node_modules/d3-hierarchy": { + "version": "3.1.2", + "resolved": "https://registry.npmjs.org/d3-hierarchy/-/d3-hierarchy-3.1.2.tgz", + "integrity": "sha512-FX/9frcub54beBdugHjDCdikxThEqjnR93Qt7PvQTOHxyiNCAlvMrHhclk3cD5VeAaq9fxmfRp+CnWw9rEMBuA==", + "license": "ISC", + "engines": { + "node": ">=12" + } + }, + "node_modules/d3-interpolate": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/d3-interpolate/-/d3-interpolate-3.0.1.tgz", + "integrity": "sha512-3bYs1rOD33uo8aqJfKP3JWPAibgw8Zm2+L9vBKEHJ2Rg+viTR7o5Mmv5mZcieN+FRYaAOWX5SJATX6k1PWz72g==", + "license": "ISC", + "dependencies": { + "d3-color": "1 - 3" + }, + "engines": { + "node": ">=12" + } + }, + "node_modules/d3-path": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/d3-path/-/d3-path-3.1.0.tgz", + "integrity": "sha512-p3KP5HCf/bvjBSSKuXid6Zqijx7wIfNW+J/maPs+iwR35at5JCbLUT0LzF1cnjbCHWhqzQTIN2Jpe8pRebIEFQ==", + "license": "ISC", + "engines": { + "node": ">=12" + } + }, + "node_modules/d3-polygon": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/d3-polygon/-/d3-polygon-3.0.1.tgz", + "integrity": "sha512-3vbA7vXYwfe1SYhED++fPUQlWSYTTGmFmQiany/gdbiWgU/iEyQzyymwL9SkJjFFuCS4902BSzewVGsHHmHtXg==", + "license": "ISC", + "engines": { + "node": ">=12" + } + }, + "node_modules/d3-quadtree": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/d3-quadtree/-/d3-quadtree-3.0.1.tgz", + "integrity": "sha512-04xDrxQTDTCFwP5H6hRhsRcb9xxv2RzkcsygFzmkSIOJy3PeRJP7sNk3VRIbKXcog561P9oU0/rVH6vDROAgUw==", + "license": "ISC", + "engines": { + "node": ">=12" + } + }, + "node_modules/d3-random": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/d3-random/-/d3-random-3.0.1.tgz", + "integrity": "sha512-FXMe9GfxTxqd5D6jFsQ+DJ8BJS4E/fT5mqqdjovykEB2oFbTMDVdg1MGFxfQW+FBOGoB++k8swBrgwSHT1cUXQ==", + "license": "ISC", + "engines": { + "node": ">=12" + } + }, + "node_modules/d3-sankey": { + "version": "0.12.3", + "resolved": "https://registry.npmjs.org/d3-sankey/-/d3-sankey-0.12.3.tgz", + "integrity": "sha512-nQhsBRmM19Ax5xEIPLMY9ZmJ/cDvd1BG3UVvt5h3WRxKg5zGRbvnteTyWAbzeSvlh3tW7ZEmq4VwR5mB3tutmQ==", + "license": "BSD-3-Clause", + "dependencies": { + "d3-array": "1 - 2", + "d3-shape": "^1.2.0" + } + }, + "node_modules/d3-sankey/node_modules/d3-array": { + "version": "2.12.1", + "resolved": "https://registry.npmjs.org/d3-array/-/d3-array-2.12.1.tgz", + "integrity": "sha512-B0ErZK/66mHtEsR1TkPEEkwdy+WDesimkM5gpZr5Dsg54BiTA5RXtYW5qTLIAcekaS9xfZrzBLF/OAkB3Qn1YQ==", + "license": "BSD-3-Clause", + "dependencies": { + "internmap": "^1.0.0" + } + }, + "node_modules/d3-sankey/node_modules/d3-path": { + "version": "1.0.9", + "resolved": "https://registry.npmjs.org/d3-path/-/d3-path-1.0.9.tgz", + "integrity": "sha512-VLaYcn81dtHVTjEHd8B+pbe9yHWpXKZUC87PzoFmsFrJqgFwDe/qxfp5MlfsfM1V5E/iVt0MmEbWQ7FVIXh/bg==", + "license": "BSD-3-Clause" + }, + "node_modules/d3-sankey/node_modules/d3-shape": { + "version": "1.3.7", + "resolved": "https://registry.npmjs.org/d3-shape/-/d3-shape-1.3.7.tgz", + "integrity": "sha512-EUkvKjqPFUAZyOlhY5gzCxCeI0Aep04LwIRpsZ/mLFelJiUfnK56jo5JMDSE7yyP2kLSb6LtF+S5chMk7uqPqw==", + "license": "BSD-3-Clause", + "dependencies": { + "d3-path": "1" + } + }, + "node_modules/d3-sankey/node_modules/internmap": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/internmap/-/internmap-1.0.1.tgz", + "integrity": "sha512-lDB5YccMydFBtasVtxnZ3MRBHuaoE8GKsppq+EchKL2U4nK/DmEpPHNH8MZe5HkMtpSiTSOZwfN0tzYjO/lJEw==", + "license": "ISC" + }, + "node_modules/d3-scale": { + "version": "4.0.2", + "resolved": "https://registry.npmjs.org/d3-scale/-/d3-scale-4.0.2.tgz", + "integrity": "sha512-GZW464g1SH7ag3Y7hXjf8RoUuAFIqklOAq3MRl4OaWabTFJY9PN/E1YklhXLh+OQ3fM9yS2nOkCoS+WLZ6kvxQ==", + "license": "ISC", + "dependencies": { + "d3-array": "2.10.0 - 3", + "d3-format": "1 - 3", + "d3-interpolate": "1.2.0 - 3", + "d3-time": "2.1.1 - 3", + "d3-time-format": "2 - 4" + }, + "engines": { + "node": ">=12" + } + }, + "node_modules/d3-scale-chromatic": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/d3-scale-chromatic/-/d3-scale-chromatic-3.1.0.tgz", + "integrity": "sha512-A3s5PWiZ9YCXFye1o246KoscMWqf8BsD9eRiJ3He7C9OBaxKhAd5TFCdEx/7VbKtxxTsu//1mMJFrEt572cEyQ==", + "license": "ISC", + "dependencies": { + "d3-color": "1 - 3", + "d3-interpolate": "1 - 3" + }, + "engines": { + "node": ">=12" + } + }, + "node_modules/d3-selection": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/d3-selection/-/d3-selection-3.0.0.tgz", + "integrity": "sha512-fmTRWbNMmsmWq6xJV8D19U/gw/bwrHfNXxrIN+HfZgnzqTHp9jOmKMhsTUjXOJnZOdZY9Q28y4yebKzqDKlxlQ==", + "license": "ISC", + "engines": { + "node": ">=12" + } + }, + "node_modules/d3-shape": { + "version": "3.2.0", + "resolved": "https://registry.npmjs.org/d3-shape/-/d3-shape-3.2.0.tgz", + "integrity": "sha512-SaLBuwGm3MOViRq2ABk3eLoxwZELpH6zhl3FbAoJ7Vm1gofKx6El1Ib5z23NUEhF9AsGl7y+dzLe5Cw2AArGTA==", + "license": "ISC", + "dependencies": { + "d3-path": "^3.1.0" + }, + "engines": { + "node": ">=12" + } + }, + "node_modules/d3-time": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/d3-time/-/d3-time-3.1.0.tgz", + "integrity": "sha512-VqKjzBLejbSMT4IgbmVgDjpkYrNWUYJnbCGo874u7MMKIWsILRX+OpX/gTk8MqjpT1A/c6HY2dCA77ZN0lkQ2Q==", + "license": "ISC", + "dependencies": { + "d3-array": "2 - 3" + }, + "engines": { + "node": ">=12" + } + }, + "node_modules/d3-time-format": { + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/d3-time-format/-/d3-time-format-4.1.0.tgz", + "integrity": "sha512-dJxPBlzC7NugB2PDLwo9Q8JiTR3M3e4/XANkreKSUxF8vvXKqm1Yfq4Q5dl8budlunRVlUUaDUgFt7eA8D6NLg==", + "license": "ISC", + "dependencies": { + "d3-time": "1 - 3" + }, + "engines": { + "node": ">=12" + } + }, + "node_modules/d3-timer": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/d3-timer/-/d3-timer-3.0.1.tgz", + "integrity": "sha512-ndfJ/JxxMd3nw31uyKoY2naivF+r29V+Lc0svZxe1JvvIRmi8hUsrMvdOwgS1o6uBHmiz91geQ0ylPP0aj1VUA==", + "license": "ISC", + "engines": { + "node": ">=12" + } + }, + "node_modules/d3-transition": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/d3-transition/-/d3-transition-3.0.1.tgz", + "integrity": "sha512-ApKvfjsSR6tg06xrL434C0WydLr7JewBB3V+/39RMHsaXTOG0zmt/OAXeng5M5LBm0ojmxJrpomQVZ1aPvBL4w==", + "license": "ISC", + "dependencies": { + "d3-color": "1 - 3", + "d3-dispatch": "1 - 3", + "d3-ease": "1 - 3", + "d3-interpolate": "1 - 3", + "d3-timer": "1 - 3" + }, + "engines": { + "node": ">=12" + }, + "peerDependencies": { + "d3-selection": "2 - 3" + } + }, + "node_modules/d3-zoom": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/d3-zoom/-/d3-zoom-3.0.0.tgz", + "integrity": "sha512-b8AmV3kfQaqWAuacbPuNbL6vahnOJflOhexLzMMNLga62+/nh0JzvJ0aO/5a5MVgUFGS7Hu1P9P03o3fJkDCyw==", + "license": "ISC", + "dependencies": { + "d3-dispatch": "1 - 3", + "d3-drag": "2 - 3", + "d3-interpolate": "1 - 3", + "d3-selection": "2 - 3", + "d3-transition": "2 - 3" + }, + "engines": { + "node": ">=12" + } + }, + "node_modules/dagre-d3-es": { + "version": "7.0.10", + "resolved": "https://registry.npmjs.org/dagre-d3-es/-/dagre-d3-es-7.0.10.tgz", + "integrity": "sha512-qTCQmEhcynucuaZgY5/+ti3X/rnszKZhEQH/ZdWdtP1tA/y3VoHJzcVrO9pjjJCNpigfscAtoUB5ONcd2wNn0A==", + "license": "MIT", + "dependencies": { + "d3": "^7.8.2", + "lodash-es": "^4.17.21" + } + }, + "node_modules/dayjs": { + "version": "1.11.13", + "resolved": "https://registry.npmjs.org/dayjs/-/dayjs-1.11.13.tgz", + "integrity": "sha512-oaMBel6gjolK862uaPQOVTA7q3TZhuSvuMQAAglQDOWYO9A91IrAOUJEyKVlqJlHE0vq5p5UXxzdPfMH/x6xNg==", + "license": "MIT" + }, + "node_modules/debug": { + "version": "4.3.6", + "resolved": "https://registry.npmjs.org/debug/-/debug-4.3.6.tgz", + "integrity": "sha512-O/09Bd4Z1fBrU4VzkhFqVgpPzaGbw6Sm9FEkBT1A/YBXQFGuuSxa1dN2nxgxS34JmKXqYx8CZAwEVoJFImUXIg==", + "license": "MIT", + "dependencies": { + "ms": "2.1.2" + }, + "engines": { + "node": ">=6.0" + }, + "peerDependenciesMeta": { + "supports-color": { + "optional": true + } + } + }, + "node_modules/decode-named-character-reference": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/decode-named-character-reference/-/decode-named-character-reference-1.0.2.tgz", + "integrity": "sha512-O8x12RzrUF8xyVcY0KJowWsmaJxQbmy0/EtnNtHRpsOcT7dFk5W598coHqBVpmWo1oQQfsCqfCmkZN5DJrZVdg==", + "license": "MIT", + "dependencies": { + "character-entities": "^2.0.0" + }, + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/delaunator": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/delaunator/-/delaunator-5.0.1.tgz", + "integrity": "sha512-8nvh+XBe96aCESrGOqMp/84b13H9cdKbG5P2ejQCh4d4sK9RL4371qou9drQjMhvnPmhWl5hnmqbEE0fXr9Xnw==", + "license": "ISC", + "dependencies": { + "robust-predicates": "^3.0.2" + } + }, + "node_modules/delayed-stream": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz", + "integrity": "sha512-ZySD7Nf91aLB0RxL4KGrKHBXl7Eds1DAmEdcoVawXnLD7SDhpNgtuII2aAkg7a7QS41jxPSZ17p4VdGnMHk3MQ==", + "license": "MIT", + "engines": { + "node": ">=0.4.0" + } + }, + "node_modules/dequal": { + "version": "2.0.3", + "resolved": "https://registry.npmjs.org/dequal/-/dequal-2.0.3.tgz", + "integrity": "sha512-0je+qPKHEMohvfRTCEo3CrPG6cAzAYgmzKyxRiYSSDkS6eGJdyVJm7WaYA5ECaAD9wLB2T4EEeymA5aFVcYXCA==", + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/detect-libc": { + "version": "2.0.3", + "resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.0.3.tgz", + "integrity": "sha512-bwy0MGW55bG41VqxxypOsdSdGqLwXPI/focwgTYCFMbdUiBAxLg9CFzG08sz2aqzknwiX7Hkl0bQENjg8iLByw==", + "license": "Apache-2.0", + "engines": { + "node": ">=8" + } + }, + "node_modules/detect-node-es": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/detect-node-es/-/detect-node-es-1.1.0.tgz", + "integrity": "sha512-ypdmJU/TbBby2Dxibuv7ZLW3Bs1QEmM7nHjEANfohJLvE0XVujisn1qPJcZxg+qDucsr+bP6fLD1rPS3AhJ7EQ==", + "license": "MIT" + }, + "node_modules/devlop": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/devlop/-/devlop-1.1.0.tgz", + "integrity": "sha512-RWmIqhcFf1lRYBvNmr7qTNuyCt/7/ns2jbpp1+PalgE/rDQcBT0fioSMUpJ93irlUhC5hrg4cYqe6U+0ImW0rA==", + "license": "MIT", + "dependencies": { + "dequal": "^2.0.0" + }, + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/didyoumean": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/didyoumean/-/didyoumean-1.2.2.tgz", + "integrity": "sha512-gxtyfqMg7GKyhQmb056K7M3xszy/myH8w+B4RT+QXBQsvAOdc3XymqDDPHx1BgPgsdAA5SIifona89YtRATDzw==", + "license": "Apache-2.0" + }, + "node_modules/diff": { + "version": "5.2.0", + "resolved": "https://registry.npmjs.org/diff/-/diff-5.2.0.tgz", + "integrity": "sha512-uIFDxqpRZGZ6ThOk84hEfqWoHx2devRFvpTZcTHur85vImfaxUbTW9Ryh4CpCuDnToOP1CEtXKIgytHBPVff5A==", + "license": "BSD-3-Clause", + "engines": { + "node": ">=0.3.1" + } + }, + "node_modules/dlv": { + "version": "1.1.3", + "resolved": "https://registry.npmjs.org/dlv/-/dlv-1.1.3.tgz", + "integrity": "sha512-+HlytyjlPKnIG8XuRG8WvmBP8xs8P71y+SKKS6ZXWoEgLuePxtDoUEiH7WkdePWrQ5JBpE6aoVqfZfJUQkjXwA==", + "license": "MIT" + }, + "node_modules/dompurify": { + "version": "3.1.6", + "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.1.6.tgz", + "integrity": "sha512-cTOAhc36AalkjtBpfG6O8JimdTMWNXjiePT2xQH/ppBGi/4uIpmj8eKyIkMJErXWARyINV/sB38yf8JCLF5pbQ==", + "license": "(MPL-2.0 OR Apache-2.0)" + }, + "node_modules/eastasianwidth": { + "version": "0.2.0", + "resolved": "https://registry.npmjs.org/eastasianwidth/-/eastasianwidth-0.2.0.tgz", + "integrity": "sha512-I88TYZWc9XiYHRQ4/3c5rjjfgkjhLyW2luGIheGERbNQ6OY7yTybanSpDXZa8y7VUP9YmDcYa+eyq4ca7iLqWA==", + "license": "MIT" + }, + "node_modules/electron-to-chromium": { + "version": "1.5.13", + "resolved": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.5.13.tgz", + "integrity": "sha512-lbBcvtIJ4J6sS4tb5TLp1b4LyfCdMkwStzXPyAgVgTRAsep4bvrAGaBOP7ZJtQMNJpSQ9SqG4brWOroNaQtm7Q==", + "license": "ISC" + }, + "node_modules/elkjs": { + "version": "0.9.3", + "resolved": "https://registry.npmjs.org/elkjs/-/elkjs-0.9.3.tgz", + "integrity": "sha512-f/ZeWvW/BCXbhGEf1Ujp29EASo/lk1FDnETgNKwJrsVvGZhUWCZyg3xLJjAsxfOmt8KjswHmI5EwCQcPMpOYhQ==", + "license": "EPL-2.0" + }, + "node_modules/emoji-regex": { + "version": "9.2.2", + "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-9.2.2.tgz", + "integrity": "sha512-L18DaJsXSUk2+42pv8mLs5jJT2hqFkFE4j21wOmgbUqsZ2hL72NsUU785g9RXgo3s0ZNgVl42TiHp3ZtOv/Vyg==", + "license": "MIT" + }, + "node_modules/emoticon": { + "version": "3.2.0", + "resolved": "https://registry.npmjs.org/emoticon/-/emoticon-3.2.0.tgz", + "integrity": "sha512-SNujglcLTTg+lDAcApPNgEdudaqQFiAbJCqzjNxJkvN9vAwCGi0uu8IUVvx+f16h+V44KCY6Y2yboroc9pilHg==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/entities": { + "version": "4.5.0", + "resolved": "https://registry.npmjs.org/entities/-/entities-4.5.0.tgz", + "integrity": "sha512-V0hjH4dGPh9Ao5p0MoRY6BVqtwCjhz6vI5LT8AJ55H+4g9/4vbHx1I54fS0XuclLhDHArPQCiMjDxjaL8fPxhw==", + "license": "BSD-2-Clause", + "engines": { + "node": ">=0.12" + }, + "funding": { + "url": "https://github.com/fb55/entities?sponsor=1" + } + }, + "node_modules/error-ex": { + "version": "1.3.2", + "resolved": "https://registry.npmjs.org/error-ex/-/error-ex-1.3.2.tgz", + "integrity": "sha512-7dFHNmqeFSEt2ZBsCriorKnn3Z2pj+fd9kmI6QoWw4//DL+icEBfc0U7qJCisqrTsKTjw4fNFy2pW9OqStD84g==", + "license": "MIT", + "dependencies": { + "is-arrayish": "^0.2.1" + } + }, + "node_modules/escalade": { + "version": "3.1.2", + "resolved": "https://registry.npmjs.org/escalade/-/escalade-3.1.2.tgz", + "integrity": "sha512-ErCHMCae19vR8vQGe50xIsVomy19rg6gFu3+r3jkEO46suLMWBksvVyoGgQV+jOfl84ZSOSlmv6Gxa89PmTGmA==", + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/escape-string-regexp": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz", + "integrity": "sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==", + "license": "MIT", + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/esprima": { + "version": "4.0.1", + "resolved": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz", + "integrity": "sha512-eGuFFw7Upda+g4p+QHvnW0RyTX/SVeJBDM/gCtMARO0cLuT2HcEKnTPvhjV6aGeqrCB/sbNop0Kszm0jsaWU4A==", + "license": "BSD-2-Clause", + "bin": { + "esparse": "bin/esparse.js", + "esvalidate": "bin/esvalidate.js" + }, + "engines": { + "node": ">=4" + } + }, + "node_modules/estree-util-attach-comments": { + "version": "2.1.1", + "resolved": "https://registry.npmjs.org/estree-util-attach-comments/-/estree-util-attach-comments-2.1.1.tgz", + "integrity": "sha512-+5Ba/xGGS6mnwFbXIuQiDPTbuTxuMCooq3arVv7gPZtYpjp+VXH/NkHAP35OOefPhNG/UGqU3vt/LTABwcHX0w==", + "license": "MIT", + "dependencies": { + "@types/estree": "^1.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/estree-util-build-jsx": { + "version": "2.2.2", + "resolved": "https://registry.npmjs.org/estree-util-build-jsx/-/estree-util-build-jsx-2.2.2.tgz", + "integrity": "sha512-m56vOXcOBuaF+Igpb9OPAy7f9w9OIkb5yhjsZuaPm7HoGi4oTOQi0h2+yZ+AtKklYFZ+rPC4n0wYCJCEU1ONqg==", + "license": "MIT", + "dependencies": { + "@types/estree-jsx": "^1.0.0", + "estree-util-is-identifier-name": "^2.0.0", + "estree-walker": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/estree-util-is-identifier-name": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/estree-util-is-identifier-name/-/estree-util-is-identifier-name-2.1.0.tgz", + "integrity": "sha512-bEN9VHRyXAUOjkKVQVvArFym08BTWB0aJPppZZr0UNyAqWsLaVfAqP7hbaTJjzHifmB5ebnR8Wm7r7yGN/HonQ==", + "license": "MIT", + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/estree-util-to-js": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/estree-util-to-js/-/estree-util-to-js-1.2.0.tgz", + "integrity": "sha512-IzU74r1PK5IMMGZXUVZbmiu4A1uhiPgW5hm1GjcOfr4ZzHaMPpLNJjR7HjXiIOzi25nZDrgFTobHTkV5Q6ITjA==", + "license": "MIT", + "dependencies": { + "@types/estree-jsx": "^1.0.0", + "astring": "^1.8.0", + "source-map": "^0.7.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/estree-util-to-js/node_modules/source-map": { + "version": "0.7.4", + "resolved": "https://registry.npmjs.org/source-map/-/source-map-0.7.4.tgz", + "integrity": "sha512-l3BikUxvPOcn5E74dZiq5BGsTb5yEwhaTSzccU6t4sDOH8NWJCstKO5QT2CvtFoK6F0saL7p9xHAqHOlCPJygA==", + "license": "BSD-3-Clause", + "engines": { + "node": ">= 8" + } + }, + "node_modules/estree-util-value-to-estree": { + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/estree-util-value-to-estree/-/estree-util-value-to-estree-1.3.0.tgz", + "integrity": "sha512-Y+ughcF9jSUJvncXwqRageavjrNPAI+1M/L3BI3PyLp1nmgYTGUXU6t5z1Y7OWuThoDdhPME07bQU+d5LxdJqw==", + "license": "MIT", + "dependencies": { + "is-plain-obj": "^3.0.0" + }, + "engines": { + "node": ">=12.0.0" + } + }, + "node_modules/estree-util-visit": { + "version": "1.2.1", + "resolved": "https://registry.npmjs.org/estree-util-visit/-/estree-util-visit-1.2.1.tgz", + "integrity": "sha512-xbgqcrkIVbIG+lI/gzbvd9SGTJL4zqJKBFttUl5pP27KhAjtMKbX/mQXJ7qgyXpMgVy/zvpm0xoQQaGL8OloOw==", + "license": "MIT", + "dependencies": { + "@types/estree-jsx": "^1.0.0", + "@types/unist": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/estree-walker": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/estree-walker/-/estree-walker-3.0.3.tgz", + "integrity": "sha512-7RUKfXgSMMkzt6ZuXmqapOurLGPPfgj6l9uRZ7lRGolvk0y2yocc35LdcxKC5PQZdn2DMqioAQ2NoWcrTKmm6g==", + "license": "MIT", + "dependencies": { + "@types/estree": "^1.0.0" + } + }, + "node_modules/execa": { + "version": "0.8.0", + "resolved": "https://registry.npmjs.org/execa/-/execa-0.8.0.tgz", + "integrity": "sha512-zDWS+Rb1E8BlqqhALSt9kUhss8Qq4nN3iof3gsOdyINksElaPyNBtKUMTR62qhvgVWR0CqCX7sdnKe4MnUbFEA==", + "license": "MIT", + "dependencies": { + "cross-spawn": "^5.0.1", + "get-stream": "^3.0.0", + "is-stream": "^1.1.0", + "npm-run-path": "^2.0.0", + "p-finally": "^1.0.0", + "signal-exit": "^3.0.0", + "strip-eof": "^1.0.0" + }, + "engines": { + "node": ">=4" + } + }, + "node_modules/execa/node_modules/cross-spawn": { + "version": "5.1.0", + "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-5.1.0.tgz", + "integrity": "sha512-pTgQJ5KC0d2hcY8eyL1IzlBPYjTkyH72XRZPnLyKus2mBfNjQs3klqbJU2VILqZryAZUt9JOb3h/mWMy23/f5A==", + "license": "MIT", + "dependencies": { + "lru-cache": "^4.0.1", + "shebang-command": "^1.2.0", + "which": "^1.2.9" + } + }, + "node_modules/execa/node_modules/lru-cache": { + "version": "4.1.5", + "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-4.1.5.tgz", + "integrity": "sha512-sWZlbEP2OsHNkXrMl5GYk/jKk70MBng6UU4YI/qGDYbgf6YbP4EvmqISbXCoJiRKs+1bSpFHVgQxvJ17F2li5g==", + "license": "ISC", + "dependencies": { + "pseudomap": "^1.0.2", + "yallist": "^2.1.2" + } + }, + "node_modules/execa/node_modules/shebang-command": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/shebang-command/-/shebang-command-1.2.0.tgz", + "integrity": "sha512-EV3L1+UQWGor21OmnvojK36mhg+TyIKDh3iFBKBohr5xeXIhNBcx8oWdgkTEEQ+BEFFYdLRuqMfd5L84N1V5Vg==", + "license": "MIT", + "dependencies": { + "shebang-regex": "^1.0.0" + }, + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/execa/node_modules/shebang-regex": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-1.0.0.tgz", + "integrity": "sha512-wpoSFAxys6b2a2wHZ1XpDSgD7N9iVjg29Ph9uV/uaP9Ex/KXlkTZTeddxDPSYQpgvzKLGJke2UU0AzoGCjNIvQ==", + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/execa/node_modules/signal-exit": { + "version": "3.0.7", + "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz", + "integrity": "sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==", + "license": "ISC" + }, + "node_modules/execa/node_modules/which": { + "version": "1.3.1", + "resolved": "https://registry.npmjs.org/which/-/which-1.3.1.tgz", + "integrity": "sha512-HxJdYWq1MTIQbJ3nw0cqssHoTNU267KlrDuGZ1WYlxDStUtKUhOaJmh112/TZmHxxUfuJqPXSOm7tDyas0OSIQ==", + "license": "ISC", + "dependencies": { + "isexe": "^2.0.0" + }, + "bin": { + "which": "bin/which" + } + }, + "node_modules/extend": { + "version": "3.0.2", + "resolved": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz", + "integrity": "sha512-fjquC59cD7CyW6urNXK0FBufkZcoiGG80wTuPujX590cB5Ttln20E2UB4S/WARVqhXffZl2LNgS+gQdPIIim/g==", + "license": "MIT" + }, + "node_modules/extend-shallow": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-2.0.1.tgz", + "integrity": "sha512-zCnTtlxNoAiDc3gqY2aYAWFx7XWWiasuF2K8Me5WbN8otHKTUKBwjPtNpRs/rbUZm7KxWAaNj7P1a/p52GbVug==", + "license": "MIT", + "dependencies": { + "is-extendable": "^0.1.0" + }, + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/fast-glob": { + "version": "3.3.2", + "resolved": "https://registry.npmjs.org/fast-glob/-/fast-glob-3.3.2.tgz", + "integrity": "sha512-oX2ruAFQwf/Orj8m737Y5adxDQO0LAB7/S5MnxCdTNDd4p6BsyIVsv9JQsATbTSq8KHRpLwIHbVlUNatxd+1Ow==", + "license": "MIT", + "dependencies": { + "@nodelib/fs.stat": "^2.0.2", + "@nodelib/fs.walk": "^1.2.3", + "glob-parent": "^5.1.2", + "merge2": "^1.3.0", + "micromatch": "^4.0.4" + }, + "engines": { + "node": ">=8.6.0" + } + }, + "node_modules/fast-glob/node_modules/glob-parent": { + "version": "5.1.2", + "resolved": "https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.2.tgz", + "integrity": "sha512-AOIgSQCepiJYwP3ARnGx+5VnTu2HBYdzbGP45eLw1vr3zB3vZLeyed1sC9hnbcOc9/SrMyM5RPQrkGz4aS9Zow==", + "license": "ISC", + "dependencies": { + "is-glob": "^4.0.1" + }, + "engines": { + "node": ">= 6" + } + }, + "node_modules/fastq": { + "version": "1.17.1", + "resolved": "https://registry.npmjs.org/fastq/-/fastq-1.17.1.tgz", + "integrity": "sha512-sRVD3lWVIXWg6By68ZN7vho9a1pQcN/WBFaAAsDDFzlJjvoGx0P8z7V1t72grFJfJhu3YPZBuu25f7Kaw2jN1w==", + "license": "ISC", + "dependencies": { + "reusify": "^1.0.4" + } + }, + "node_modules/file-selector": { + "version": "0.4.0", + "resolved": "https://registry.npmjs.org/file-selector/-/file-selector-0.4.0.tgz", + "integrity": "sha512-iACCiXeMYOvZqlF1kTiYINzgepRBymz1wwjiuup9u9nayhb6g4fSwiyJ/6adli+EPwrWtpgQAh2PoS7HukEGEg==", + "license": "MIT", + "dependencies": { + "tslib": "^2.0.3" + }, + "engines": { + "node": ">= 10" + } + }, + "node_modules/file-selector/node_modules/tslib": { + "version": "2.7.0", + "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.7.0.tgz", + "integrity": "sha512-gLXCKdN1/j47AiHiOkJN69hJmcbGTHI0ImLmbYLHykhgeN0jVGola9yVjFgzCUklsZQMW55o+dW7IXv3RCXDzA==", + "license": "0BSD" + }, + "node_modules/fill-range": { + "version": "7.1.1", + "resolved": "https://registry.npmjs.org/fill-range/-/fill-range-7.1.1.tgz", + "integrity": "sha512-YsGpe3WHLK8ZYi4tWDg2Jy3ebRz2rXowDxnld4bkQB00cc/1Zw9AWnC0i9ztDJitivtQvaI9KaLyKrc+hBW0yg==", + "license": "MIT", + "dependencies": { + "to-regex-range": "^5.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/find-root": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/find-root/-/find-root-1.1.0.tgz", + "integrity": "sha512-NKfW6bec6GfKc0SGx1e07QZY9PE99u0Bft/0rzSD5k3sO/vwkVUpDUKVm5Gpp5Ue3YfShPFTX2070tDs5kB9Ng==", + "license": "MIT" + }, + "node_modules/flexsearch": { + "version": "0.7.43", + "resolved": "https://registry.npmjs.org/flexsearch/-/flexsearch-0.7.43.tgz", + "integrity": "sha512-c5o/+Um8aqCSOXGcZoqZOm+NqtVwNsvVpWv6lfmSclU954O3wvQKxxK8zj74fPaSJbXpSLTs4PRhh+wnoCXnKg==", + "license": "Apache-2.0" + }, + "node_modules/focus-lock": { + "version": "1.3.5", + "resolved": "https://registry.npmjs.org/focus-lock/-/focus-lock-1.3.5.tgz", + "integrity": "sha512-QFaHbhv9WPUeLYBDe/PAuLKJ4Dd9OPvKs9xZBr3yLXnUrDNaVXKu2baDBXe3naPY30hgHYSsf2JW4jzas2mDEQ==", + "license": "MIT", + "dependencies": { + "tslib": "^2.0.3" + }, + "engines": { + "node": ">=10" + } + }, + "node_modules/focus-lock/node_modules/tslib": { + "version": "2.7.0", + "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.7.0.tgz", + "integrity": "sha512-gLXCKdN1/j47AiHiOkJN69hJmcbGTHI0ImLmbYLHykhgeN0jVGola9yVjFgzCUklsZQMW55o+dW7IXv3RCXDzA==", + "license": "0BSD" + }, + "node_modules/focus-visible": { + "version": "5.2.1", + "resolved": "https://registry.npmjs.org/focus-visible/-/focus-visible-5.2.1.tgz", + "integrity": "sha512-8Bx950VD1bWTQJEH/AM6SpEk+SU55aVnp4Ujhuuxy3eMEBCRwBnTBnVXr9YAPvZL3/CNjCa8u4IWfNmEO53whA==", + "license": "W3C" + }, + "node_modules/follow-redirects": { + "version": "1.15.6", + "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.6.tgz", + "integrity": "sha512-wWN62YITEaOpSK584EZXJafH1AGpO8RVgElfkuXbTOrPX4fIfOyEpW/CsiNd8JdYrAoOvafRTOEnvsO++qCqFA==", + "funding": [ + { + "type": "individual", + "url": "https://github.com/sponsors/RubenVerborgh" + } + ], + "license": "MIT", + "engines": { + "node": ">=4.0" + }, + "peerDependenciesMeta": { + "debug": { + "optional": true + } + } + }, + "node_modules/foreground-child": { + "version": "3.3.0", + "resolved": "https://registry.npmjs.org/foreground-child/-/foreground-child-3.3.0.tgz", + "integrity": "sha512-Ld2g8rrAyMYFXBhEqMz8ZAHBi4J4uS1i/CxGMDnjyFWddMXLVcDp051DZfu+t7+ab7Wv6SMqpWmyFIj5UbfFvg==", + "license": "ISC", + "dependencies": { + "cross-spawn": "^7.0.0", + "signal-exit": "^4.0.1" + }, + "engines": { + "node": ">=14" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/form-data": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.0.tgz", + "integrity": "sha512-ETEklSGi5t0QMZuiXoA/Q6vcnxcLQP5vdugSpuAyi6SVGi2clPPp+xgEhuMaHC+zGgn31Kd235W35f7Hykkaww==", + "license": "MIT", + "dependencies": { + "asynckit": "^0.4.0", + "combined-stream": "^1.0.8", + "mime-types": "^2.1.12" + }, + "engines": { + "node": ">= 6" + } + }, + "node_modules/fraction.js": { + "version": "4.3.7", + "resolved": "https://registry.npmjs.org/fraction.js/-/fraction.js-4.3.7.tgz", + "integrity": "sha512-ZsDfxO51wGAXREY55a7la9LScWpwv9RxIrYABrlvOFBlH/ShPnrtsXeuUIfXKKOVicNxQ+o8JTbJvjS4M89yew==", + "license": "MIT", + "engines": { + "node": "*" + }, + "funding": { + "type": "patreon", + "url": "https://github.com/sponsors/rawify" + } + }, + "node_modules/fsevents": { + "version": "2.3.3", + "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz", + "integrity": "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==", + "hasInstallScript": true, + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ], + "engines": { + "node": "^8.16.0 || ^10.6.0 || >=11.0.0" + } + }, + "node_modules/function-bind": { + "version": "1.1.2", + "resolved": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz", + "integrity": "sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==", + "license": "MIT", + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/get-nonce": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/get-nonce/-/get-nonce-1.0.1.tgz", + "integrity": "sha512-FJhYRoDaiatfEkUK8HKlicmu/3SGFD51q3itKDGoSTysQJBnfOcxU5GxnhE1E6soB76MbT0MBtnKJuXyAx+96Q==", + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/get-stream": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/get-stream/-/get-stream-3.0.0.tgz", + "integrity": "sha512-GlhdIUuVakc8SJ6kK0zAFbiGzRFzNnY4jUuEbV9UROo4Y+0Ny4fjvcZFVTeDA4odpFyOQzaw6hXukJSq/f28sQ==", + "license": "MIT", + "engines": { + "node": ">=4" + } + }, + "node_modules/git-up": { + "version": "7.0.0", + "resolved": "https://registry.npmjs.org/git-up/-/git-up-7.0.0.tgz", + "integrity": "sha512-ONdIrbBCFusq1Oy0sC71F5azx8bVkvtZtMJAsv+a6lz5YAmbNnLD6HAB4gptHZVLPR8S2/kVN6Gab7lryq5+lQ==", + "license": "MIT", + "dependencies": { + "is-ssh": "^1.4.0", + "parse-url": "^8.1.0" + } + }, + "node_modules/git-url-parse": { + "version": "13.1.1", + "resolved": "https://registry.npmjs.org/git-url-parse/-/git-url-parse-13.1.1.tgz", + "integrity": "sha512-PCFJyeSSdtnbfhSNRw9Wk96dDCNx+sogTe4YNXeXSJxt7xz5hvXekuRn9JX7m+Mf4OscCu8h+mtAl3+h5Fo8lQ==", + "license": "MIT", + "dependencies": { + "git-up": "^7.0.0" + } + }, + "node_modules/github-slugger": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/github-slugger/-/github-slugger-2.0.0.tgz", + "integrity": "sha512-IaOQ9puYtjrkq7Y0Ygl9KDZnrf/aiUJYUpVf89y8kyaxbRG7Y1SrX/jaumrv81vc61+kiMempujsM3Yw7w5qcw==", + "license": "ISC" + }, + "node_modules/glob": { + "version": "10.4.5", + "resolved": "https://registry.npmjs.org/glob/-/glob-10.4.5.tgz", + "integrity": "sha512-7Bv8RF0k6xjo7d4A/PxYLbUCfb6c+Vpd2/mB2yRDlew7Jb5hEXiCD9ibfO7wpk8i4sevK6DFny9h7EYbM3/sHg==", + "license": "ISC", + "dependencies": { + "foreground-child": "^3.1.0", + "jackspeak": "^3.1.2", + "minimatch": "^9.0.4", + "minipass": "^7.1.2", + "package-json-from-dist": "^1.0.0", + "path-scurry": "^1.11.1" + }, + "bin": { + "glob": "dist/esm/bin.mjs" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/glob-parent": { + "version": "6.0.2", + "resolved": "https://registry.npmjs.org/glob-parent/-/glob-parent-6.0.2.tgz", + "integrity": "sha512-XxwI8EOhVQgWp6iDL+3b0r86f4d6AX6zSU55HfB4ydCEuXLXc5FcYeOu+nnGftS4TEju/11rt4KJPTMgbfmv4A==", + "license": "ISC", + "dependencies": { + "is-glob": "^4.0.3" + }, + "engines": { + "node": ">=10.13.0" + } + }, + "node_modules/globals": { + "version": "11.12.0", + "resolved": "https://registry.npmjs.org/globals/-/globals-11.12.0.tgz", + "integrity": "sha512-WOBp/EEGUiIsJSp7wcv/y6MO+lV9UoncWqxuFfm8eBwzWNgyfBd6Gz+IeKQ9jCmyhoH99g15M3T+QaVHFjizVA==", + "license": "MIT", + "engines": { + "node": ">=4" + } + }, + "node_modules/graceful-fs": { + "version": "4.2.11", + "resolved": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.11.tgz", + "integrity": "sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==", + "license": "ISC" + }, + "node_modules/gray-matter": { + "version": "4.0.3", + "resolved": "https://registry.npmjs.org/gray-matter/-/gray-matter-4.0.3.tgz", + "integrity": "sha512-5v6yZd4JK3eMI3FqqCouswVqwugaA9r4dNZB1wwcmrD02QkV5H0y7XBQW8QwQqEaZY1pM9aqORSORhJRdNK44Q==", + "license": "MIT", + "dependencies": { + "js-yaml": "^3.13.1", + "kind-of": "^6.0.2", + "section-matter": "^1.0.0", + "strip-bom-string": "^1.0.0" + }, + "engines": { + "node": ">=6.0" + } + }, + "node_modules/has-flag": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/has-flag/-/has-flag-3.0.0.tgz", + "integrity": "sha512-sKJf1+ceQBr4SMkvQnBDNDtf4TXpVhVGateu0t918bl30FnbE2m4vNLX+VWe/dpjlb+HugGYzW7uQXH98HPEYw==", + "license": "MIT", + "engines": { + "node": ">=4" + } + }, + "node_modules/hash-obj": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/hash-obj/-/hash-obj-4.0.0.tgz", + "integrity": "sha512-FwO1BUVWkyHasWDW4S8o0ssQXjvyghLV2rfVhnN36b2bbcj45eGiuzdn9XOvOpjV3TKQD7Gm2BWNXdE9V4KKYg==", + "license": "MIT", + "dependencies": { + "is-obj": "^3.0.0", + "sort-keys": "^5.0.0", + "type-fest": "^1.0.2" + }, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/hasown": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz", + "integrity": "sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ==", + "license": "MIT", + "dependencies": { + "function-bind": "^1.1.2" + }, + "engines": { + "node": ">= 0.4" + } + }, + "node_modules/hast-to-hyperscript": { + "version": "9.0.1", + "resolved": "https://registry.npmjs.org/hast-to-hyperscript/-/hast-to-hyperscript-9.0.1.tgz", + "integrity": "sha512-zQgLKqF+O2F72S1aa4y2ivxzSlko3MAvxkwG8ehGmNiqd98BIN3JM1rAJPmplEyLmGLO2QZYJtIneOSZ2YbJuA==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.3", + "comma-separated-tokens": "^1.0.0", + "property-information": "^5.3.0", + "space-separated-tokens": "^1.0.0", + "style-to-object": "^0.3.0", + "unist-util-is": "^4.0.0", + "web-namespaces": "^1.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/hast-to-hyperscript/node_modules/comma-separated-tokens": { + "version": "1.0.8", + "resolved": "https://registry.npmjs.org/comma-separated-tokens/-/comma-separated-tokens-1.0.8.tgz", + "integrity": "sha512-GHuDRO12Sypu2cV70d1dkA2EUmXHgntrzbpvOB+Qy+49ypNfGgFQIC2fhhXbnyrJRynDCAARsT7Ou0M6hirpfw==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/hast-to-hyperscript/node_modules/property-information": { + "version": "5.6.0", + "resolved": "https://registry.npmjs.org/property-information/-/property-information-5.6.0.tgz", + "integrity": "sha512-YUHSPk+A30YPv+0Qf8i9Mbfe/C0hdPXk1s1jPVToV8pk8BQtpw10ct89Eo7OWkutrwqvT0eicAxlOg3dOAu8JA==", + "license": "MIT", + "dependencies": { + "xtend": "^4.0.0" + }, + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/hast-to-hyperscript/node_modules/space-separated-tokens": { + "version": "1.1.5", + "resolved": "https://registry.npmjs.org/space-separated-tokens/-/space-separated-tokens-1.1.5.tgz", + "integrity": "sha512-q/JSVd1Lptzhf5bkYm4ob4iWPjx0KiRe3sRFBNrVqbJkFaBm5vbbowy1mymoPNLRa52+oadOhJ+K49wsSeSjTA==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/hast-to-hyperscript/node_modules/style-to-object": { + "version": "0.3.0", + "resolved": "https://registry.npmjs.org/style-to-object/-/style-to-object-0.3.0.tgz", + "integrity": "sha512-CzFnRRXhzWIdItT3OmF8SQfWyahHhjq3HwcMNCNLn+N7klOOqPjMeG/4JSu77D7ypZdGvSzvkrbyeTMizz2VrA==", + "license": "MIT", + "dependencies": { + "inline-style-parser": "0.1.1" + } + }, + "node_modules/hast-to-hyperscript/node_modules/unist-util-is": { + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/unist-util-is/-/unist-util-is-4.1.0.tgz", + "integrity": "sha512-ZOQSsnce92GrxSqlnEEseX0gi7GH9zTJZ0p9dtu87WRb/37mMPO2Ilx1s/t9vBHrFhbgweUwb+t7cIn5dxPhZg==", + "license": "MIT", + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/hast-to-hyperscript/node_modules/web-namespaces": { + "version": "1.1.4", + "resolved": "https://registry.npmjs.org/web-namespaces/-/web-namespaces-1.1.4.tgz", + "integrity": "sha512-wYxSGajtmoP4WxfejAPIr4l0fVh+jeMXZb08wNc0tMg6xsfZXj3cECqIK0G7ZAqUq0PP8WlMDtaOGVBTAWztNw==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/hast-util-from-dom": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/hast-util-from-dom/-/hast-util-from-dom-5.0.0.tgz", + "integrity": "sha512-d6235voAp/XR3Hh5uy7aGLbM3S4KamdW0WEgOaU1YoewnuYw4HXb5eRtv9g65m/RFGEfUY1Mw4UqCc5Y8L4Stg==", + "license": "ISC", + "dependencies": { + "@types/hast": "^3.0.0", + "hastscript": "^8.0.0", + "web-namespaces": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/hast-util-from-dom/node_modules/@types/hast": { + "version": "3.0.4", + "resolved": "https://registry.npmjs.org/@types/hast/-/hast-3.0.4.tgz", + "integrity": "sha512-WPs+bbQw5aCj+x6laNGWLH3wviHtoCv/P3+otBhbOhJgG8qtpdAMlTCxLtsTWA7LH1Oh/bFCHsBn0TPS5m30EQ==", + "license": "MIT", + "dependencies": { + "@types/unist": "*" + } + }, + "node_modules/hast-util-from-dom/node_modules/hast-util-parse-selector": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/hast-util-parse-selector/-/hast-util-parse-selector-4.0.0.tgz", + "integrity": "sha512-wkQCkSYoOGCRKERFWcxMVMOcYE2K1AaNLU8DXS9arxnLOUEWbOXKXiJUNzEpqZ3JOKpnha3jkFrumEjVliDe7A==", + "license": "MIT", + "dependencies": { + "@types/hast": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/hast-util-from-dom/node_modules/hastscript": { + "version": "8.0.0", + "resolved": "https://registry.npmjs.org/hastscript/-/hastscript-8.0.0.tgz", + "integrity": "sha512-dMOtzCEd3ABUeSIISmrETiKuyydk1w0pa+gE/uormcTpSYuaNJPbX1NU3JLyscSLjwAQM8bWMhhIlnCqnRvDTw==", + "license": "MIT", + "dependencies": { + "@types/hast": "^3.0.0", + "comma-separated-tokens": "^2.0.0", + "hast-util-parse-selector": "^4.0.0", + "property-information": "^6.0.0", + "space-separated-tokens": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/hast-util-from-html": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/hast-util-from-html/-/hast-util-from-html-2.0.2.tgz", + "integrity": "sha512-HwOHwxdt2zC5KQ/CNoybBntRook2zJvfZE/u5/Ap7aLPe22bDqen7KwGkOqOyzL5zIqKwiYX/OTtE0FWgr6XXA==", + "license": "MIT", + "dependencies": { + "@types/hast": "^3.0.0", + "devlop": "^1.1.0", + "hast-util-from-parse5": "^8.0.0", + "parse5": "^7.0.0", + "vfile": "^6.0.0", + "vfile-message": "^4.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/hast-util-from-html-isomorphic": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/hast-util-from-html-isomorphic/-/hast-util-from-html-isomorphic-2.0.0.tgz", + "integrity": "sha512-zJfpXq44yff2hmE0XmwEOzdWin5xwH+QIhMLOScpX91e/NSGPsAzNCvLQDIEPyO2TXi+lBmU6hjLIhV8MwP2kw==", + "license": "MIT", + "dependencies": { + "@types/hast": "^3.0.0", + "hast-util-from-dom": "^5.0.0", + "hast-util-from-html": "^2.0.0", + "unist-util-remove-position": "^5.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/hast-util-from-html-isomorphic/node_modules/@types/hast": { + "version": "3.0.4", + "resolved": "https://registry.npmjs.org/@types/hast/-/hast-3.0.4.tgz", + "integrity": "sha512-WPs+bbQw5aCj+x6laNGWLH3wviHtoCv/P3+otBhbOhJgG8qtpdAMlTCxLtsTWA7LH1Oh/bFCHsBn0TPS5m30EQ==", + "license": "MIT", + "dependencies": { + "@types/unist": "*" + } + }, + "node_modules/hast-util-from-html/node_modules/@types/hast": { + "version": "3.0.4", + "resolved": "https://registry.npmjs.org/@types/hast/-/hast-3.0.4.tgz", + "integrity": "sha512-WPs+bbQw5aCj+x6laNGWLH3wviHtoCv/P3+otBhbOhJgG8qtpdAMlTCxLtsTWA7LH1Oh/bFCHsBn0TPS5m30EQ==", + "license": "MIT", + "dependencies": { + "@types/unist": "*" + } + }, + "node_modules/hast-util-from-html/node_modules/@types/unist": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/@types/unist/-/unist-3.0.3.tgz", + "integrity": "sha512-ko/gIFJRv177XgZsZcBwnqJN5x/Gien8qNOn0D5bQU/zAzVf9Zt3BlcUiLqhV9y4ARk0GbT3tnUiPNgnTXzc/Q==", + "license": "MIT" + }, + "node_modules/hast-util-from-html/node_modules/vfile": { + "version": "6.0.3", + "resolved": "https://registry.npmjs.org/vfile/-/vfile-6.0.3.tgz", + "integrity": "sha512-KzIbH/9tXat2u30jf+smMwFCsno4wHVdNmzFyL+T/L3UGqqk6JKfVqOFOZEpZSHADH1k40ab6NUIXZq422ov3Q==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0", + "vfile-message": "^4.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/hast-util-from-parse5": { + "version": "8.0.1", + "resolved": "https://registry.npmjs.org/hast-util-from-parse5/-/hast-util-from-parse5-8.0.1.tgz", + "integrity": "sha512-Er/Iixbc7IEa7r/XLtuG52zoqn/b3Xng/w6aZQ0xGVxzhw5xUFxcRqdPzP6yFi/4HBYRaifaI5fQ1RH8n0ZeOQ==", + "license": "MIT", + "dependencies": { + "@types/hast": "^3.0.0", + "@types/unist": "^3.0.0", + "devlop": "^1.0.0", + "hastscript": "^8.0.0", + "property-information": "^6.0.0", + "vfile": "^6.0.0", + "vfile-location": "^5.0.0", + "web-namespaces": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/hast-util-from-parse5/node_modules/@types/hast": { + "version": "3.0.4", + "resolved": "https://registry.npmjs.org/@types/hast/-/hast-3.0.4.tgz", + "integrity": "sha512-WPs+bbQw5aCj+x6laNGWLH3wviHtoCv/P3+otBhbOhJgG8qtpdAMlTCxLtsTWA7LH1Oh/bFCHsBn0TPS5m30EQ==", + "license": "MIT", + "dependencies": { + "@types/unist": "*" + } + }, + "node_modules/hast-util-from-parse5/node_modules/@types/unist": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/@types/unist/-/unist-3.0.3.tgz", + "integrity": "sha512-ko/gIFJRv177XgZsZcBwnqJN5x/Gien8qNOn0D5bQU/zAzVf9Zt3BlcUiLqhV9y4ARk0GbT3tnUiPNgnTXzc/Q==", + "license": "MIT" + }, + "node_modules/hast-util-from-parse5/node_modules/hast-util-parse-selector": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/hast-util-parse-selector/-/hast-util-parse-selector-4.0.0.tgz", + "integrity": "sha512-wkQCkSYoOGCRKERFWcxMVMOcYE2K1AaNLU8DXS9arxnLOUEWbOXKXiJUNzEpqZ3JOKpnha3jkFrumEjVliDe7A==", + "license": "MIT", + "dependencies": { + "@types/hast": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/hast-util-from-parse5/node_modules/hastscript": { + "version": "8.0.0", + "resolved": "https://registry.npmjs.org/hastscript/-/hastscript-8.0.0.tgz", + "integrity": "sha512-dMOtzCEd3ABUeSIISmrETiKuyydk1w0pa+gE/uormcTpSYuaNJPbX1NU3JLyscSLjwAQM8bWMhhIlnCqnRvDTw==", + "license": "MIT", + "dependencies": { + "@types/hast": "^3.0.0", + "comma-separated-tokens": "^2.0.0", + "hast-util-parse-selector": "^4.0.0", + "property-information": "^6.0.0", + "space-separated-tokens": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/hast-util-from-parse5/node_modules/vfile": { + "version": "6.0.3", + "resolved": "https://registry.npmjs.org/vfile/-/vfile-6.0.3.tgz", + "integrity": "sha512-KzIbH/9tXat2u30jf+smMwFCsno4wHVdNmzFyL+T/L3UGqqk6JKfVqOFOZEpZSHADH1k40ab6NUIXZq422ov3Q==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0", + "vfile-message": "^4.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/hast-util-is-element": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/hast-util-is-element/-/hast-util-is-element-3.0.0.tgz", + "integrity": "sha512-Val9mnv2IWpLbNPqc/pUem+a7Ipj2aHacCwgNfTiK0vJKl0LF+4Ba4+v1oPHFpf3bLYmreq0/l3Gud9S5OH42g==", + "license": "MIT", + "dependencies": { + "@types/hast": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/hast-util-is-element/node_modules/@types/hast": { + "version": "3.0.4", + "resolved": "https://registry.npmjs.org/@types/hast/-/hast-3.0.4.tgz", + "integrity": "sha512-WPs+bbQw5aCj+x6laNGWLH3wviHtoCv/P3+otBhbOhJgG8qtpdAMlTCxLtsTWA7LH1Oh/bFCHsBn0TPS5m30EQ==", + "license": "MIT", + "dependencies": { + "@types/unist": "*" + } + }, + "node_modules/hast-util-parse-selector": { + "version": "2.2.5", + "resolved": "https://registry.npmjs.org/hast-util-parse-selector/-/hast-util-parse-selector-2.2.5.tgz", + "integrity": "sha512-7j6mrk/qqkSehsM92wQjdIgWM2/BW61u/53G6xmC8i1OmEdKLHbk419QKQUjz6LglWsfqoiHmyMRkP1BGjecNQ==", + "license": "MIT", + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/hast-util-raw": { + "version": "6.1.0", + "resolved": "https://registry.npmjs.org/hast-util-raw/-/hast-util-raw-6.1.0.tgz", + "integrity": "sha512-5FoZLDHBpka20OlZZ4I/+RBw5piVQ8iI1doEvffQhx5CbCyTtP8UCq8Tw6NmTAMtXgsQxmhW7Ly8OdFre5/YMQ==", + "license": "MIT", + "dependencies": { + "@types/hast": "^2.0.0", + "hast-util-from-parse5": "^6.0.0", + "hast-util-to-parse5": "^6.0.0", + "html-void-elements": "^1.0.0", + "parse5": "^6.0.0", + "unist-util-position": "^3.0.0", + "unist-util-visit": "^2.0.0", + "vfile": "^4.0.0", + "web-namespaces": "^1.0.0", + "xtend": "^4.0.0", + "zwitch": "^1.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/hast-util-raw/node_modules/hast-util-from-parse5": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/hast-util-from-parse5/-/hast-util-from-parse5-6.0.1.tgz", + "integrity": "sha512-jeJUWiN5pSxW12Rh01smtVkZgZr33wBokLzKLwinYOUfSzm1Nl/c3GUGebDyOKjdsRgMvoVbV0VpAcpjF4NrJA==", + "license": "MIT", + "dependencies": { + "@types/parse5": "^5.0.0", + "hastscript": "^6.0.0", + "property-information": "^5.0.0", + "vfile": "^4.0.0", + "vfile-location": "^3.2.0", + "web-namespaces": "^1.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/hast-util-raw/node_modules/parse5": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/parse5/-/parse5-6.0.1.tgz", + "integrity": "sha512-Ofn/CTFzRGTTxwpNEs9PP93gXShHcTq255nzRYSKe8AkVpZY7e1fpmTfOyoIvjP5HG7Z2ZM7VS9PPhQGW2pOpw==", + "license": "MIT" + }, + "node_modules/hast-util-raw/node_modules/property-information": { + "version": "5.6.0", + "resolved": "https://registry.npmjs.org/property-information/-/property-information-5.6.0.tgz", + "integrity": "sha512-YUHSPk+A30YPv+0Qf8i9Mbfe/C0hdPXk1s1jPVToV8pk8BQtpw10ct89Eo7OWkutrwqvT0eicAxlOg3dOAu8JA==", + "license": "MIT", + "dependencies": { + "xtend": "^4.0.0" + }, + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/hast-util-raw/node_modules/vfile-location": { + "version": "3.2.0", + "resolved": "https://registry.npmjs.org/vfile-location/-/vfile-location-3.2.0.tgz", + "integrity": "sha512-aLEIZKv/oxuCDZ8lkJGhuhztf/BW4M+iHdCwglA/eWc+vtuRFJj8EtgceYFX4LRjOhCAAiNHsKGssC6onJ+jbA==", + "license": "MIT", + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/hast-util-raw/node_modules/web-namespaces": { + "version": "1.1.4", + "resolved": "https://registry.npmjs.org/web-namespaces/-/web-namespaces-1.1.4.tgz", + "integrity": "sha512-wYxSGajtmoP4WxfejAPIr4l0fVh+jeMXZb08wNc0tMg6xsfZXj3cECqIK0G7ZAqUq0PP8WlMDtaOGVBTAWztNw==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/hast-util-raw/node_modules/zwitch": { + "version": "1.0.5", + "resolved": "https://registry.npmjs.org/zwitch/-/zwitch-1.0.5.tgz", + "integrity": "sha512-V50KMwwzqJV0NpZIZFwfOD5/lyny3WlSzRiXgA0G7VUnRlqttta1L6UQIHzd6EuBY/cHGfwTIck7w1yH6Q5zUw==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/hast-util-to-estree": { + "version": "2.3.3", + "resolved": "https://registry.npmjs.org/hast-util-to-estree/-/hast-util-to-estree-2.3.3.tgz", + "integrity": "sha512-ihhPIUPxN0v0w6M5+IiAZZrn0LH2uZomeWwhn7uP7avZC6TE7lIiEh2yBMPr5+zi1aUCXq6VoYRgs2Bw9xmycQ==", + "license": "MIT", + "dependencies": { + "@types/estree": "^1.0.0", + "@types/estree-jsx": "^1.0.0", + "@types/hast": "^2.0.0", + "@types/unist": "^2.0.0", + "comma-separated-tokens": "^2.0.0", + "estree-util-attach-comments": "^2.0.0", + "estree-util-is-identifier-name": "^2.0.0", + "hast-util-whitespace": "^2.0.0", + "mdast-util-mdx-expression": "^1.0.0", + "mdast-util-mdxjs-esm": "^1.0.0", + "property-information": "^6.0.0", + "space-separated-tokens": "^2.0.0", + "style-to-object": "^0.4.1", + "unist-util-position": "^4.0.0", + "zwitch": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/hast-util-to-estree/node_modules/unist-util-position": { + "version": "4.0.4", + "resolved": "https://registry.npmjs.org/unist-util-position/-/unist-util-position-4.0.4.tgz", + "integrity": "sha512-kUBE91efOWfIVBo8xzh/uZQ7p9ffYRtUbMRZBNFYwf0RK8koUMx6dGUfwylLOKmaT2cs4wSW96QoYUSXAyEtpg==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/hast-util-to-html": { + "version": "7.1.3", + "resolved": "https://registry.npmjs.org/hast-util-to-html/-/hast-util-to-html-7.1.3.tgz", + "integrity": "sha512-yk2+1p3EJTEE9ZEUkgHsUSVhIpCsL/bvT8E5GzmWc+N1Po5gBw+0F8bo7dpxXR0nu0bQVxVZGX2lBGF21CmeDw==", + "license": "MIT", + "dependencies": { + "ccount": "^1.0.0", + "comma-separated-tokens": "^1.0.0", + "hast-util-is-element": "^1.0.0", + "hast-util-whitespace": "^1.0.0", + "html-void-elements": "^1.0.0", + "property-information": "^5.0.0", + "space-separated-tokens": "^1.0.0", + "stringify-entities": "^3.0.1", + "unist-util-is": "^4.0.0", + "xtend": "^4.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/hast-util-to-html/node_modules/comma-separated-tokens": { + "version": "1.0.8", + "resolved": "https://registry.npmjs.org/comma-separated-tokens/-/comma-separated-tokens-1.0.8.tgz", + "integrity": "sha512-GHuDRO12Sypu2cV70d1dkA2EUmXHgntrzbpvOB+Qy+49ypNfGgFQIC2fhhXbnyrJRynDCAARsT7Ou0M6hirpfw==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/hast-util-to-html/node_modules/hast-util-is-element": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/hast-util-is-element/-/hast-util-is-element-1.1.0.tgz", + "integrity": "sha512-oUmNua0bFbdrD/ELDSSEadRVtWZOf3iF6Lbv81naqsIV99RnSCieTbWuWCY8BAeEfKJTKl0gRdokv+dELutHGQ==", + "license": "MIT", + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/hast-util-to-html/node_modules/hast-util-whitespace": { + "version": "1.0.4", + "resolved": "https://registry.npmjs.org/hast-util-whitespace/-/hast-util-whitespace-1.0.4.tgz", + "integrity": "sha512-I5GTdSfhYfAPNztx2xJRQpG8cuDSNt599/7YUn7Gx/WxNMsG+a835k97TDkFgk123cwjfwINaZknkKkphx/f2A==", + "license": "MIT", + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/hast-util-to-html/node_modules/property-information": { + "version": "5.6.0", + "resolved": "https://registry.npmjs.org/property-information/-/property-information-5.6.0.tgz", + "integrity": "sha512-YUHSPk+A30YPv+0Qf8i9Mbfe/C0hdPXk1s1jPVToV8pk8BQtpw10ct89Eo7OWkutrwqvT0eicAxlOg3dOAu8JA==", + "license": "MIT", + "dependencies": { + "xtend": "^4.0.0" + }, + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/hast-util-to-html/node_modules/space-separated-tokens": { + "version": "1.1.5", + "resolved": "https://registry.npmjs.org/space-separated-tokens/-/space-separated-tokens-1.1.5.tgz", + "integrity": "sha512-q/JSVd1Lptzhf5bkYm4ob4iWPjx0KiRe3sRFBNrVqbJkFaBm5vbbowy1mymoPNLRa52+oadOhJ+K49wsSeSjTA==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/hast-util-to-html/node_modules/unist-util-is": { + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/unist-util-is/-/unist-util-is-4.1.0.tgz", + "integrity": "sha512-ZOQSsnce92GrxSqlnEEseX0gi7GH9zTJZ0p9dtu87WRb/37mMPO2Ilx1s/t9vBHrFhbgweUwb+t7cIn5dxPhZg==", + "license": "MIT", + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/hast-util-to-parse5": { + "version": "6.0.0", + "resolved": "https://registry.npmjs.org/hast-util-to-parse5/-/hast-util-to-parse5-6.0.0.tgz", + "integrity": "sha512-Lu5m6Lgm/fWuz8eWnrKezHtVY83JeRGaNQ2kn9aJgqaxvVkFCZQBEhgodZUDUvoodgyROHDb3r5IxAEdl6suJQ==", + "license": "MIT", + "dependencies": { + "hast-to-hyperscript": "^9.0.0", + "property-information": "^5.0.0", + "web-namespaces": "^1.0.0", + "xtend": "^4.0.0", + "zwitch": "^1.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/hast-util-to-parse5/node_modules/property-information": { + "version": "5.6.0", + "resolved": "https://registry.npmjs.org/property-information/-/property-information-5.6.0.tgz", + "integrity": "sha512-YUHSPk+A30YPv+0Qf8i9Mbfe/C0hdPXk1s1jPVToV8pk8BQtpw10ct89Eo7OWkutrwqvT0eicAxlOg3dOAu8JA==", + "license": "MIT", + "dependencies": { + "xtend": "^4.0.0" + }, + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/hast-util-to-parse5/node_modules/web-namespaces": { + "version": "1.1.4", + "resolved": "https://registry.npmjs.org/web-namespaces/-/web-namespaces-1.1.4.tgz", + "integrity": "sha512-wYxSGajtmoP4WxfejAPIr4l0fVh+jeMXZb08wNc0tMg6xsfZXj3cECqIK0G7ZAqUq0PP8WlMDtaOGVBTAWztNw==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/hast-util-to-parse5/node_modules/zwitch": { + "version": "1.0.5", + "resolved": "https://registry.npmjs.org/zwitch/-/zwitch-1.0.5.tgz", + "integrity": "sha512-V50KMwwzqJV0NpZIZFwfOD5/lyny3WlSzRiXgA0G7VUnRlqttta1L6UQIHzd6EuBY/cHGfwTIck7w1yH6Q5zUw==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/hast-util-to-text": { + "version": "4.0.2", + "resolved": "https://registry.npmjs.org/hast-util-to-text/-/hast-util-to-text-4.0.2.tgz", + "integrity": "sha512-KK6y/BN8lbaq654j7JgBydev7wuNMcID54lkRav1P0CaE1e47P72AWWPiGKXTJU271ooYzcvTAn/Zt0REnvc7A==", + "license": "MIT", + "dependencies": { + "@types/hast": "^3.0.0", + "@types/unist": "^3.0.0", + "hast-util-is-element": "^3.0.0", + "unist-util-find-after": "^5.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/hast-util-to-text/node_modules/@types/hast": { + "version": "3.0.4", + "resolved": "https://registry.npmjs.org/@types/hast/-/hast-3.0.4.tgz", + "integrity": "sha512-WPs+bbQw5aCj+x6laNGWLH3wviHtoCv/P3+otBhbOhJgG8qtpdAMlTCxLtsTWA7LH1Oh/bFCHsBn0TPS5m30EQ==", + "license": "MIT", + "dependencies": { + "@types/unist": "*" + } + }, + "node_modules/hast-util-to-text/node_modules/@types/unist": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/@types/unist/-/unist-3.0.3.tgz", + "integrity": "sha512-ko/gIFJRv177XgZsZcBwnqJN5x/Gien8qNOn0D5bQU/zAzVf9Zt3BlcUiLqhV9y4ARk0GbT3tnUiPNgnTXzc/Q==", + "license": "MIT" + }, + "node_modules/hast-util-whitespace": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/hast-util-whitespace/-/hast-util-whitespace-2.0.1.tgz", + "integrity": "sha512-nAxA0v8+vXSBDt3AnRUNjyRIQ0rD+ntpbAp4LnPkumc5M9yUbSMa4XDU9Q6etY4f1Wp4bNgvc1yjiZtsTTrSng==", + "license": "MIT", + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/hastscript": { + "version": "6.0.0", + "resolved": "https://registry.npmjs.org/hastscript/-/hastscript-6.0.0.tgz", + "integrity": "sha512-nDM6bvd7lIqDUiYEiu5Sl/+6ReP0BMk/2f4U/Rooccxkj0P5nm+acM5PrGJ/t5I8qPGiqZSE6hVAwZEdZIvP4w==", + "license": "MIT", + "dependencies": { + "@types/hast": "^2.0.0", + "comma-separated-tokens": "^1.0.0", + "hast-util-parse-selector": "^2.0.0", + "property-information": "^5.0.0", + "space-separated-tokens": "^1.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/hastscript/node_modules/comma-separated-tokens": { + "version": "1.0.8", + "resolved": "https://registry.npmjs.org/comma-separated-tokens/-/comma-separated-tokens-1.0.8.tgz", + "integrity": "sha512-GHuDRO12Sypu2cV70d1dkA2EUmXHgntrzbpvOB+Qy+49ypNfGgFQIC2fhhXbnyrJRynDCAARsT7Ou0M6hirpfw==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/hastscript/node_modules/property-information": { + "version": "5.6.0", + "resolved": "https://registry.npmjs.org/property-information/-/property-information-5.6.0.tgz", + "integrity": "sha512-YUHSPk+A30YPv+0Qf8i9Mbfe/C0hdPXk1s1jPVToV8pk8BQtpw10ct89Eo7OWkutrwqvT0eicAxlOg3dOAu8JA==", + "license": "MIT", + "dependencies": { + "xtend": "^4.0.0" + }, + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/hastscript/node_modules/space-separated-tokens": { + "version": "1.1.5", + "resolved": "https://registry.npmjs.org/space-separated-tokens/-/space-separated-tokens-1.1.5.tgz", + "integrity": "sha512-q/JSVd1Lptzhf5bkYm4ob4iWPjx0KiRe3sRFBNrVqbJkFaBm5vbbowy1mymoPNLRa52+oadOhJ+K49wsSeSjTA==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/hoist-non-react-statics": { + "version": "3.3.2", + "resolved": "https://registry.npmjs.org/hoist-non-react-statics/-/hoist-non-react-statics-3.3.2.tgz", + "integrity": "sha512-/gGivxi8JPKWNm/W0jSmzcMPpfpPLc3dY/6GxhX2hQ9iGj3aDfklV4ET7NjKpSinLpJ5vafa9iiGIEZg10SfBw==", + "license": "BSD-3-Clause", + "dependencies": { + "react-is": "^16.7.0" + } + }, + "node_modules/hoist-non-react-statics/node_modules/react-is": { + "version": "16.13.1", + "resolved": "https://registry.npmjs.org/react-is/-/react-is-16.13.1.tgz", + "integrity": "sha512-24e6ynE2H+OKt4kqsOvNd8kBpV65zoxbA4BVsEOB3ARVWQki/DHzaUoC5KuON/BiccDaCCTZBuOcfZs70kR8bQ==", + "license": "MIT" + }, + "node_modules/html-void-elements": { + "version": "1.0.5", + "resolved": "https://registry.npmjs.org/html-void-elements/-/html-void-elements-1.0.5.tgz", + "integrity": "sha512-uE/TxKuyNIcx44cIWnjr/rfIATDH7ZaOMmstu0CwhFG1Dunhlp4OC6/NMbhiwoq5BpW0ubi303qnEk/PZj614w==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/iconv-lite": { + "version": "0.6.3", + "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.6.3.tgz", + "integrity": "sha512-4fCk79wshMdzMp2rH06qWrJE4iolqLhCUH+OiuIgU++RB0+94NlDL81atO7GX55uUKueo0txHNtvEyI6D7WdMw==", + "license": "MIT", + "dependencies": { + "safer-buffer": ">= 2.1.2 < 3.0.0" + }, + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/import-fresh": { + "version": "3.3.0", + "resolved": "https://registry.npmjs.org/import-fresh/-/import-fresh-3.3.0.tgz", + "integrity": "sha512-veYYhQa+D1QBKznvhUHxb8faxlrwUnxseDAbAp457E0wLNio2bOSKnjYDhMj+YiAq61xrMGhQk9iXVk5FzgQMw==", + "license": "MIT", + "dependencies": { + "parent-module": "^1.0.0", + "resolve-from": "^4.0.0" + }, + "engines": { + "node": ">=6" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/inherits": { + "version": "2.0.4", + "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz", + "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==", + "license": "ISC" + }, + "node_modules/inline-style-parser": { + "version": "0.1.1", + "resolved": "https://registry.npmjs.org/inline-style-parser/-/inline-style-parser-0.1.1.tgz", + "integrity": "sha512-7NXolsK4CAS5+xvdj5OMMbI962hU/wvwoxk+LWR9Ek9bVtyuuYScDN6eS0rUm6TxApFpw7CX1o4uJzcd4AyD3Q==", + "license": "MIT" + }, + "node_modules/internmap": { + "version": "2.0.3", + "resolved": "https://registry.npmjs.org/internmap/-/internmap-2.0.3.tgz", + "integrity": "sha512-5Hh7Y1wQbvY5ooGgPbDaL5iYLAPzMTUrjMulskHLH6wnv/A+1q5rgEaiuqEjB+oxGXIVZs1FF+R/KPN3ZSQYYg==", + "license": "ISC", + "engines": { + "node": ">=12" + } + }, + "node_modules/intersection-observer": { + "version": "0.12.2", + "resolved": "https://registry.npmjs.org/intersection-observer/-/intersection-observer-0.12.2.tgz", + "integrity": "sha512-7m1vEcPCxXYI8HqnL8CKI6siDyD+eIWSwgB3DZA+ZTogxk9I4CDnj4wilt9x/+/QbHI4YG5YZNmC6458/e9Ktg==", + "license": "Apache-2.0" + }, + "node_modules/invariant": { + "version": "2.2.4", + "resolved": "https://registry.npmjs.org/invariant/-/invariant-2.2.4.tgz", + "integrity": "sha512-phJfQVBuaJM5raOpJjSfkiD6BpbCE4Ns//LaXl6wGYtUBY83nWS6Rf9tXm2e8VaK60JEjYldbPif/A2B1C2gNA==", + "license": "MIT", + "dependencies": { + "loose-envify": "^1.0.0" + } + }, + "node_modules/is-alphabetical": { + "version": "1.0.4", + "resolved": "https://registry.npmjs.org/is-alphabetical/-/is-alphabetical-1.0.4.tgz", + "integrity": "sha512-DwzsA04LQ10FHTZuL0/grVDk4rFoVH1pjAToYwBrHSxcrBIGQuXrQMtD5U1b0U2XVgKZCTLLP8u2Qxqhy3l2Vg==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/is-alphanumerical": { + "version": "1.0.4", + "resolved": "https://registry.npmjs.org/is-alphanumerical/-/is-alphanumerical-1.0.4.tgz", + "integrity": "sha512-UzoZUr+XfVz3t3v4KyGEniVL9BDRoQtY7tOyrRybkVNjDFWyo1yhXNGrrBTQxp3ib9BLAWs7k2YKBQsFRkZG9A==", + "license": "MIT", + "dependencies": { + "is-alphabetical": "^1.0.0", + "is-decimal": "^1.0.0" + }, + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/is-arrayish": { + "version": "0.2.1", + "resolved": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.2.1.tgz", + "integrity": "sha512-zz06S8t0ozoDXMG+ube26zeCTNXcKIPJZJi8hBrF4idCLms4CG9QtK7qBl1boi5ODzFpjswb5JPmHCbMpjaYzg==", + "license": "MIT" + }, + "node_modules/is-binary-path": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/is-binary-path/-/is-binary-path-2.1.0.tgz", + "integrity": "sha512-ZMERYes6pDydyuGidse7OsHxtbI7WVeUEozgR/g7rd0xUimYNlvZRE/K2MgZTjWy725IfelLeVcEM97mmtRGXw==", + "license": "MIT", + "dependencies": { + "binary-extensions": "^2.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/is-buffer": { + "version": "2.0.5", + "resolved": "https://registry.npmjs.org/is-buffer/-/is-buffer-2.0.5.tgz", + "integrity": "sha512-i2R6zNFDwgEHJyQUtJEk0XFi1i0dPFn/oqjK3/vPCcDeJvW5NQ83V8QbicfF1SupOaB0h8ntgBC2YiE7dfyctQ==", + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/feross" + }, + { + "type": "patreon", + "url": "https://www.patreon.com/feross" + }, + { + "type": "consulting", + "url": "https://feross.org/support" + } + ], + "license": "MIT", + "engines": { + "node": ">=4" + } + }, + "node_modules/is-core-module": { + "version": "2.15.1", + "resolved": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.15.1.tgz", + "integrity": "sha512-z0vtXSwucUJtANQWldhbtbt7BnL0vxiFjIdDLAatwhDYty2bad6s+rijD6Ri4YuYJubLzIJLUidCh09e1djEVQ==", + "license": "MIT", + "dependencies": { + "hasown": "^2.0.2" + }, + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/is-decimal": { + "version": "1.0.4", + "resolved": "https://registry.npmjs.org/is-decimal/-/is-decimal-1.0.4.tgz", + "integrity": "sha512-RGdriMmQQvZ2aqaQq3awNA6dCGtKpiDFcOzrTWrDAT2MiWrKQVPmxLGHl7Y2nNu6led0kEyoX0enY0qXYsv9zw==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/is-extendable": { + "version": "0.1.1", + "resolved": "https://registry.npmjs.org/is-extendable/-/is-extendable-0.1.1.tgz", + "integrity": "sha512-5BMULNob1vgFX6EjQw5izWDxrecWK9AM72rugNr0TFldMOi0fj6Jk+zeKIt0xGj4cEfQIJth4w3OKWOJ4f+AFw==", + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/is-extglob": { + "version": "2.1.1", + "resolved": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz", + "integrity": "sha512-SbKbANkN603Vi4jEZv49LeVJMn4yGwsbzZworEoyEiutsN3nJYdbO36zfhGJ6QEDpOZIFkDtnq5JRxmvl3jsoQ==", + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/is-fullwidth-code-point": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz", + "integrity": "sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==", + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/is-glob": { + "version": "4.0.3", + "resolved": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.3.tgz", + "integrity": "sha512-xelSayHH36ZgE7ZWhli7pW34hNbNl8Ojv5KVmkJD4hBdD3th8Tfk9vYasLM+mXWOZhFkgZfxhLSnrwRr4elSSg==", + "license": "MIT", + "dependencies": { + "is-extglob": "^2.1.1" + }, + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/is-hexadecimal": { + "version": "1.0.4", + "resolved": "https://registry.npmjs.org/is-hexadecimal/-/is-hexadecimal-1.0.4.tgz", + "integrity": "sha512-gyPJuv83bHMpocVYoqof5VDiZveEoGoFL8m3BXNb2VW8Xs+rz9kqO8LOQ5DH6EsuvilT1ApazU0pyl+ytbPtlw==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/is-number": { + "version": "7.0.0", + "resolved": "https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz", + "integrity": "sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==", + "license": "MIT", + "engines": { + "node": ">=0.12.0" + } + }, + "node_modules/is-obj": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/is-obj/-/is-obj-3.0.0.tgz", + "integrity": "sha512-IlsXEHOjtKhpN8r/tRFj2nDyTmHvcfNeu/nrRIcXE17ROeatXchkojffa1SpdqW4cr/Fj6QkEf/Gn4zf6KKvEQ==", + "license": "MIT", + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/is-plain-obj": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-3.0.0.tgz", + "integrity": "sha512-gwsOE28k+23GP1B6vFl1oVh/WOzmawBrKwo5Ev6wMKzPkaXaCDIQKzLnvsA42DRlbVTWorkgTKIviAKCWkfUwA==", + "license": "MIT", + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/is-plain-object": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/is-plain-object/-/is-plain-object-5.0.0.tgz", + "integrity": "sha512-VRSzKkbMm5jMDoKLbltAkFQ5Qr7VDiTFGXxYFXXowVj387GeGNOCsOH6Msy00SGZ3Fp84b1Naa1psqgcCIEP5Q==", + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/is-reference": { + "version": "3.0.2", + "resolved": "https://registry.npmjs.org/is-reference/-/is-reference-3.0.2.tgz", + "integrity": "sha512-v3rht/LgVcsdZa3O2Nqs+NMowLOxeOm7Ay9+/ARQ2F+qEoANRcqrjAZKGN0v8ymUetZGgkp26LTnGT7H0Qo9Pg==", + "license": "MIT", + "dependencies": { + "@types/estree": "*" + } + }, + "node_modules/is-ssh": { + "version": "1.4.0", + "resolved": "https://registry.npmjs.org/is-ssh/-/is-ssh-1.4.0.tgz", + "integrity": "sha512-x7+VxdxOdlV3CYpjvRLBv5Lo9OJerlYanjwFrPR9fuGPjCiNiCzFgAWpiLAohSbsnH4ZAys3SBh+hq5rJosxUQ==", + "license": "MIT", + "dependencies": { + "protocols": "^2.0.1" + } + }, + "node_modules/is-stream": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/is-stream/-/is-stream-1.1.0.tgz", + "integrity": "sha512-uQPm8kcs47jx38atAcWTVxyltQYoPT68y9aWYdV6yWXSyW8mzSat0TL6CiWdZeCdF3KrAvpVtnHbTv4RN+rqdQ==", + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/is-whitespace-character": { + "version": "1.0.4", + "resolved": "https://registry.npmjs.org/is-whitespace-character/-/is-whitespace-character-1.0.4.tgz", + "integrity": "sha512-SDweEzfIZM0SJV0EUga669UTKlmL0Pq8Lno0QDQsPnvECB3IM2aP0gdx5TrU0A01MAPfViaZiI2V1QMZLaKK5w==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/is-word-character": { + "version": "1.0.4", + "resolved": "https://registry.npmjs.org/is-word-character/-/is-word-character-1.0.4.tgz", + "integrity": "sha512-5SMO8RVennx3nZrqtKwCGyyetPE9VDba5ugvKLaD4KopPG5kR4mQ7tNt/r7feL5yt5h3lpuBbIUmCOG2eSzXHA==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/isexe": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz", + "integrity": "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==", + "license": "ISC" + }, + "node_modules/jackspeak": { + "version": "3.4.3", + "resolved": "https://registry.npmjs.org/jackspeak/-/jackspeak-3.4.3.tgz", + "integrity": "sha512-OGlZQpz2yfahA/Rd1Y8Cd9SIEsqvXkLVoSw/cgwhnhFMDbsQFeZYoJJ7bIZBS9BcamUW96asq/npPWugM+RQBw==", + "license": "BlueOak-1.0.0", + "dependencies": { + "@isaacs/cliui": "^8.0.2" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + }, + "optionalDependencies": { + "@pkgjs/parseargs": "^0.11.0" + } + }, + "node_modules/jiti": { + "version": "1.21.6", + "resolved": "https://registry.npmjs.org/jiti/-/jiti-1.21.6.tgz", + "integrity": "sha512-2yTgeWTWzMWkHu6Jp9NKgePDaYHbntiwvYuuJLbbN9vl7DC9DvXKOB2BC3ZZ92D3cvV/aflH0osDfwpHepQ53w==", + "license": "MIT", + "bin": { + "jiti": "bin/jiti.js" + } + }, + "node_modules/js-tokens": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz", + "integrity": "sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==", + "license": "MIT" + }, + "node_modules/js-yaml": { + "version": "3.14.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz", + "integrity": "sha512-okMH7OXXJ7YrN9Ok3/SXrnu4iX9yOk+25nqX4imS2npuvTYDmo/QEZoqwZkYaIDk3jVvBOTOIEgEhaLOynBS9g==", + "license": "MIT", + "dependencies": { + "argparse": "^1.0.7", + "esprima": "^4.0.0" + }, + "bin": { + "js-yaml": "bin/js-yaml.js" + } + }, + "node_modules/jsesc": { + "version": "2.5.2", + "resolved": "https://registry.npmjs.org/jsesc/-/jsesc-2.5.2.tgz", + "integrity": "sha512-OYu7XEzjkCQ3C5Ps3QIZsQfNpqoJyZZA99wd9aWd05NCtC5pWOkShK2mkL6HXQR6/Cy2lbNdPlZBpuQHXE63gA==", + "license": "MIT", + "bin": { + "jsesc": "bin/jsesc" + }, + "engines": { + "node": ">=4" + } + }, + "node_modules/json-parse-even-better-errors": { + "version": "2.3.1", + "resolved": "https://registry.npmjs.org/json-parse-even-better-errors/-/json-parse-even-better-errors-2.3.1.tgz", + "integrity": "sha512-xyFwyhro/JEof6Ghe2iz2NcXoj2sloNsWr/XsERDK/oiPCfaNhl5ONfp+jQdAZRQQ0IJWNzH9zIZF7li91kh2w==", + "license": "MIT" + }, + "node_modules/jsonc-parser": { + "version": "3.3.1", + "resolved": "https://registry.npmjs.org/jsonc-parser/-/jsonc-parser-3.3.1.tgz", + "integrity": "sha512-HUgH65KyejrUFPvHFPbqOY0rsFip3Bo5wb4ngvdi1EpCYWUQDC5V+Y7mZws+DLkr4M//zQJoanu1SP+87Dv1oQ==", + "license": "MIT" + }, + "node_modules/katex": { + "version": "0.16.11", + "resolved": "https://registry.npmjs.org/katex/-/katex-0.16.11.tgz", + "integrity": "sha512-RQrI8rlHY92OLf3rho/Ts8i/XvjgguEjOkO1BEXcU3N8BqPpSzBNwV/G0Ukr+P/l3ivvJUE/Fa/CwbS6HesGNQ==", + "funding": [ + "https://opencollective.com/katex", + "https://github.com/sponsors/katex" + ], + "license": "MIT", + "dependencies": { + "commander": "^8.3.0" + }, + "bin": { + "katex": "cli.js" + } + }, + "node_modules/khroma": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/khroma/-/khroma-2.1.0.tgz", + "integrity": "sha512-Ls993zuzfayK269Svk9hzpeGUKob/sIgZzyHYdjQoAdQetRKpOLj+k/QQQ/6Qi0Yz65mlROrfd+Ev+1+7dz9Kw==" + }, + "node_modules/kind-of": { + "version": "6.0.3", + "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-6.0.3.tgz", + "integrity": "sha512-dcS1ul+9tmeD95T+x28/ehLgd9mENa3LsvDTtzm3vyBEO7RPptvAD+t44WVXaUjTBRcrpFeFlC8WCruUR456hw==", + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/kleur": { + "version": "4.1.5", + "resolved": "https://registry.npmjs.org/kleur/-/kleur-4.1.5.tgz", + "integrity": "sha512-o+NO+8WrRiQEE4/7nwRJhN1HWpVmJm511pBHUxPLtp0BUISzlBplORYSmTclCnJvQq2tKu/sgl3xVpkc7ZWuQQ==", + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/layout-base": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/layout-base/-/layout-base-1.0.2.tgz", + "integrity": "sha512-8h2oVEZNktL4BH2JCOI90iD1yXwL6iNW7KcCKT2QZgQJR2vbqDsldCTPRU9NifTCqHZci57XvQQ15YTu+sTYPg==", + "license": "MIT" + }, + "node_modules/lilconfig": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/lilconfig/-/lilconfig-2.1.0.tgz", + "integrity": "sha512-utWOt/GHzuUxnLKxB6dk81RoOeoNeHgbrXiuGk4yyF5qlRz+iIVWu56E2fqGHFrXz0QNUhLB/8nKqvRH66JKGQ==", + "license": "MIT", + "engines": { + "node": ">=10" + } + }, + "node_modules/lines-and-columns": { + "version": "1.2.4", + "resolved": "https://registry.npmjs.org/lines-and-columns/-/lines-and-columns-1.2.4.tgz", + "integrity": "sha512-7ylylesZQ/PV29jhEDl3Ufjo6ZX7gCqJr5F7PKrqc93v7fzSymt1BpwEU8nAUXs8qzzvqhbjhK5QZg6Mt/HkBg==", + "license": "MIT" + }, + "node_modules/lodash": { + "version": "4.17.21", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz", + "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==", + "license": "MIT" + }, + "node_modules/lodash-es": { + "version": "4.17.21", + "resolved": "https://registry.npmjs.org/lodash-es/-/lodash-es-4.17.21.tgz", + "integrity": "sha512-mKnC+QJ9pWVzv+C4/U3rRsHapFfHvQFoFB92e52xeyGMcX6/OlIl78je1u8vePzYZSkkogMPJ2yjxxsb89cxyw==", + "license": "MIT" + }, + "node_modules/lodash.get": { + "version": "4.4.2", + "resolved": "https://registry.npmjs.org/lodash.get/-/lodash.get-4.4.2.tgz", + "integrity": "sha512-z+Uw/vLuy6gQe8cfaFWD7p0wVv8fJl3mbzXh33RS+0oW2wvUqiRXiQ69gLWSLpgB5/6sU+r6BlQR0MBILadqTQ==", + "license": "MIT" + }, + "node_modules/longest-streak": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/longest-streak/-/longest-streak-3.1.0.tgz", + "integrity": "sha512-9Ri+o0JYgehTaVBBDoMqIl8GXtbWg711O3srftcHhZ0dqnETqLaoIK0x17fUw9rFSlK/0NlsKe0Ahhyl5pXE2g==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/loose-envify": { + "version": "1.4.0", + "resolved": "https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz", + "integrity": "sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==", + "license": "MIT", + "dependencies": { + "js-tokens": "^3.0.0 || ^4.0.0" + }, + "bin": { + "loose-envify": "cli.js" + } + }, + "node_modules/lru-cache": { + "version": "10.4.3", + "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-10.4.3.tgz", + "integrity": "sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ==", + "license": "ISC" + }, + "node_modules/markdown-escapes": { + "version": "1.0.4", + "resolved": "https://registry.npmjs.org/markdown-escapes/-/markdown-escapes-1.0.4.tgz", + "integrity": "sha512-8z4efJYk43E0upd0NbVXwgSTQs6cT3T06etieCMEg7dRbzCbxUCK/GHlX8mhHRDcp+OLlHkPKsvqQTCvsRl2cg==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/markdown-extensions": { + "version": "1.1.1", + "resolved": "https://registry.npmjs.org/markdown-extensions/-/markdown-extensions-1.1.1.tgz", + "integrity": "sha512-WWC0ZuMzCyDHYCasEGs4IPvLyTGftYwh6wIEOULOF0HXcqZlhwRzrK0w2VUlxWA98xnvb/jszw4ZSkJ6ADpM6Q==", + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/markdown-table": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/markdown-table/-/markdown-table-3.0.3.tgz", + "integrity": "sha512-Z1NL3Tb1M9wH4XESsCDEksWoKTdlUafKc4pt0GRwjUyXaCFZ+dc3g2erqB6zm3szA2IUSi7VnPI+o/9jnxh9hw==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/match-sorter": { + "version": "6.3.4", + "resolved": "https://registry.npmjs.org/match-sorter/-/match-sorter-6.3.4.tgz", + "integrity": "sha512-jfZW7cWS5y/1xswZo8VBOdudUiSd9nifYRWphc9M5D/ee4w4AoXLgBEdRbgVaxbMuagBPeUC5y2Hi8DO6o9aDg==", + "license": "MIT", + "dependencies": { + "@babel/runtime": "^7.23.8", + "remove-accents": "0.5.0" + } + }, + "node_modules/mdast-util-definitions": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/mdast-util-definitions/-/mdast-util-definitions-4.0.0.tgz", + "integrity": "sha512-k8AJ6aNnUkB7IE+5azR9h81O5EQ/cTDXtWdMq9Kk5KcEW/8ritU5CeLg/9HhOC++nALHBlaogJ5jz0Ybk3kPMQ==", + "license": "MIT", + "dependencies": { + "unist-util-visit": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-find-and-replace": { + "version": "2.2.2", + "resolved": "https://registry.npmjs.org/mdast-util-find-and-replace/-/mdast-util-find-and-replace-2.2.2.tgz", + "integrity": "sha512-MTtdFRz/eMDHXzeK6W3dO7mXUlF82Gom4y0oOgvHhh/HXZAGvIQDUvQ0SuUx+j2tv44b8xTHOm8K/9OoRFnXKw==", + "license": "MIT", + "dependencies": { + "@types/mdast": "^3.0.0", + "escape-string-regexp": "^5.0.0", + "unist-util-is": "^5.0.0", + "unist-util-visit-parents": "^5.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-find-and-replace/node_modules/escape-string-regexp": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-5.0.0.tgz", + "integrity": "sha512-/veY75JbMK4j1yjvuUxuVsiS/hr/4iHs9FTT6cgTexxdE0Ly/glccBAkloH/DofkjRbZU3bnoj38mOmhkZ0lHw==", + "license": "MIT", + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/mdast-util-find-and-replace/node_modules/unist-util-visit-parents": { + "version": "5.1.3", + "resolved": "https://registry.npmjs.org/unist-util-visit-parents/-/unist-util-visit-parents-5.1.3.tgz", + "integrity": "sha512-x6+y8g7wWMyQhL1iZfhIPhDAs7Xwbn9nRosDXl7qoPTSCy0yNxnKc+hWokFifWQIDGi154rdUqKvbCa4+1kLhg==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "unist-util-is": "^5.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-from-markdown": { + "version": "1.3.1", + "resolved": "https://registry.npmjs.org/mdast-util-from-markdown/-/mdast-util-from-markdown-1.3.1.tgz", + "integrity": "sha512-4xTO/M8c82qBcnQc1tgpNtubGUW/Y1tBQ1B0i5CtSoelOLKFYlElIr3bvgREYYO5iRqbMY1YuqZng0GVOI8Qww==", + "license": "MIT", + "dependencies": { + "@types/mdast": "^3.0.0", + "@types/unist": "^2.0.0", + "decode-named-character-reference": "^1.0.0", + "mdast-util-to-string": "^3.1.0", + "micromark": "^3.0.0", + "micromark-util-decode-numeric-character-reference": "^1.0.0", + "micromark-util-decode-string": "^1.0.0", + "micromark-util-normalize-identifier": "^1.0.0", + "micromark-util-symbol": "^1.0.0", + "micromark-util-types": "^1.0.0", + "unist-util-stringify-position": "^3.0.0", + "uvu": "^0.5.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-gfm": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/mdast-util-gfm/-/mdast-util-gfm-2.0.2.tgz", + "integrity": "sha512-qvZ608nBppZ4icQlhQQIAdc6S3Ffj9RGmzwUKUWuEICFnd1LVkN3EktF7ZHAgfcEdvZB5owU9tQgt99e2TlLjg==", + "license": "MIT", + "dependencies": { + "mdast-util-from-markdown": "^1.0.0", + "mdast-util-gfm-autolink-literal": "^1.0.0", + "mdast-util-gfm-footnote": "^1.0.0", + "mdast-util-gfm-strikethrough": "^1.0.0", + "mdast-util-gfm-table": "^1.0.0", + "mdast-util-gfm-task-list-item": "^1.0.0", + "mdast-util-to-markdown": "^1.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-gfm-autolink-literal": { + "version": "1.0.3", + "resolved": "https://registry.npmjs.org/mdast-util-gfm-autolink-literal/-/mdast-util-gfm-autolink-literal-1.0.3.tgz", + "integrity": "sha512-My8KJ57FYEy2W2LyNom4n3E7hKTuQk/0SES0u16tjA9Z3oFkF4RrC/hPAPgjlSpezsOvI8ObcXcElo92wn5IGA==", + "license": "MIT", + "dependencies": { + "@types/mdast": "^3.0.0", + "ccount": "^2.0.0", + "mdast-util-find-and-replace": "^2.0.0", + "micromark-util-character": "^1.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-gfm-autolink-literal/node_modules/ccount": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/ccount/-/ccount-2.0.1.tgz", + "integrity": "sha512-eyrF0jiFpY+3drT6383f1qhkbGsLSifNAjA61IUjZjmLCWjItY6LB9ft9YhoDgwfmclB2zhu51Lc7+95b8NRAg==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/mdast-util-gfm-footnote": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/mdast-util-gfm-footnote/-/mdast-util-gfm-footnote-1.0.2.tgz", + "integrity": "sha512-56D19KOGbE00uKVj3sgIykpwKL179QsVFwx/DCW0u/0+URsryacI4MAdNJl0dh+u2PSsD9FtxPFbHCzJ78qJFQ==", + "license": "MIT", + "dependencies": { + "@types/mdast": "^3.0.0", + "mdast-util-to-markdown": "^1.3.0", + "micromark-util-normalize-identifier": "^1.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-gfm-strikethrough": { + "version": "1.0.3", + "resolved": "https://registry.npmjs.org/mdast-util-gfm-strikethrough/-/mdast-util-gfm-strikethrough-1.0.3.tgz", + "integrity": "sha512-DAPhYzTYrRcXdMjUtUjKvW9z/FNAMTdU0ORyMcbmkwYNbKocDpdk+PX1L1dQgOID/+vVs1uBQ7ElrBQfZ0cuiQ==", + "license": "MIT", + "dependencies": { + "@types/mdast": "^3.0.0", + "mdast-util-to-markdown": "^1.3.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-gfm-table": { + "version": "1.0.7", + "resolved": "https://registry.npmjs.org/mdast-util-gfm-table/-/mdast-util-gfm-table-1.0.7.tgz", + "integrity": "sha512-jjcpmNnQvrmN5Vx7y7lEc2iIOEytYv7rTvu+MeyAsSHTASGCCRA79Igg2uKssgOs1i1po8s3plW0sTu1wkkLGg==", + "license": "MIT", + "dependencies": { + "@types/mdast": "^3.0.0", + "markdown-table": "^3.0.0", + "mdast-util-from-markdown": "^1.0.0", + "mdast-util-to-markdown": "^1.3.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-gfm-task-list-item": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/mdast-util-gfm-task-list-item/-/mdast-util-gfm-task-list-item-1.0.2.tgz", + "integrity": "sha512-PFTA1gzfp1B1UaiJVyhJZA1rm0+Tzn690frc/L8vNX1Jop4STZgOE6bxUhnzdVSB+vm2GU1tIsuQcA9bxTQpMQ==", + "license": "MIT", + "dependencies": { + "@types/mdast": "^3.0.0", + "mdast-util-to-markdown": "^1.3.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-math": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/mdast-util-math/-/mdast-util-math-2.0.2.tgz", + "integrity": "sha512-8gmkKVp9v6+Tgjtq6SYx9kGPpTf6FVYRa53/DLh479aldR9AyP48qeVOgNZ5X7QUK7nOy4yw7vg6mbiGcs9jWQ==", + "license": "MIT", + "dependencies": { + "@types/mdast": "^3.0.0", + "longest-streak": "^3.0.0", + "mdast-util-to-markdown": "^1.3.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-mdx": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/mdast-util-mdx/-/mdast-util-mdx-2.0.1.tgz", + "integrity": "sha512-38w5y+r8nyKlGvNjSEqWrhG0w5PmnRA+wnBvm+ulYCct7nsGYhFVb0lljS9bQav4psDAS1eGkP2LMVcZBi/aqw==", + "license": "MIT", + "dependencies": { + "mdast-util-from-markdown": "^1.0.0", + "mdast-util-mdx-expression": "^1.0.0", + "mdast-util-mdx-jsx": "^2.0.0", + "mdast-util-mdxjs-esm": "^1.0.0", + "mdast-util-to-markdown": "^1.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-mdx-expression": { + "version": "1.3.2", + "resolved": "https://registry.npmjs.org/mdast-util-mdx-expression/-/mdast-util-mdx-expression-1.3.2.tgz", + "integrity": "sha512-xIPmR5ReJDu/DHH1OoIT1HkuybIfRGYRywC+gJtI7qHjCJp/M9jrmBEJW22O8lskDWm562BX2W8TiAwRTb0rKA==", + "license": "MIT", + "dependencies": { + "@types/estree-jsx": "^1.0.0", + "@types/hast": "^2.0.0", + "@types/mdast": "^3.0.0", + "mdast-util-from-markdown": "^1.0.0", + "mdast-util-to-markdown": "^1.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-mdx-jsx": { + "version": "2.1.4", + "resolved": "https://registry.npmjs.org/mdast-util-mdx-jsx/-/mdast-util-mdx-jsx-2.1.4.tgz", + "integrity": "sha512-DtMn9CmVhVzZx3f+optVDF8yFgQVt7FghCRNdlIaS3X5Bnym3hZwPbg/XW86vdpKjlc1PVj26SpnLGeJBXD3JA==", + "license": "MIT", + "dependencies": { + "@types/estree-jsx": "^1.0.0", + "@types/hast": "^2.0.0", + "@types/mdast": "^3.0.0", + "@types/unist": "^2.0.0", + "ccount": "^2.0.0", + "mdast-util-from-markdown": "^1.1.0", + "mdast-util-to-markdown": "^1.3.0", + "parse-entities": "^4.0.0", + "stringify-entities": "^4.0.0", + "unist-util-remove-position": "^4.0.0", + "unist-util-stringify-position": "^3.0.0", + "vfile-message": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-mdx-jsx/node_modules/ccount": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/ccount/-/ccount-2.0.1.tgz", + "integrity": "sha512-eyrF0jiFpY+3drT6383f1qhkbGsLSifNAjA61IUjZjmLCWjItY6LB9ft9YhoDgwfmclB2zhu51Lc7+95b8NRAg==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/mdast-util-mdx-jsx/node_modules/character-entities-html4": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/character-entities-html4/-/character-entities-html4-2.1.0.tgz", + "integrity": "sha512-1v7fgQRj6hnSwFpq1Eu0ynr/CDEw0rXo2B61qXrLNdHZmPKgb7fqS1a2JwF0rISo9q77jDI8VMEHoApn8qDoZA==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/mdast-util-mdx-jsx/node_modules/character-entities-legacy": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/character-entities-legacy/-/character-entities-legacy-3.0.0.tgz", + "integrity": "sha512-RpPp0asT/6ufRm//AJVwpViZbGM/MkjQFxJccQRHmISF/22NBtsHqAWmL+/pmkPWoIUJdWyeVleTl1wydHATVQ==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/mdast-util-mdx-jsx/node_modules/character-reference-invalid": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/character-reference-invalid/-/character-reference-invalid-2.0.1.tgz", + "integrity": "sha512-iBZ4F4wRbyORVsu0jPV7gXkOsGYjGHPmAyv+HiHG8gi5PtC9KI2j1+v8/tlibRvjoWX027ypmG/n0HtO5t7unw==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/mdast-util-mdx-jsx/node_modules/is-alphabetical": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/is-alphabetical/-/is-alphabetical-2.0.1.tgz", + "integrity": "sha512-FWyyY60MeTNyeSRpkM2Iry0G9hpr7/9kD40mD/cGQEuilcZYS4okz8SN2Q6rLCJ8gbCt6fN+rC+6tMGS99LaxQ==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/mdast-util-mdx-jsx/node_modules/is-alphanumerical": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/is-alphanumerical/-/is-alphanumerical-2.0.1.tgz", + "integrity": "sha512-hmbYhX/9MUMF5uh7tOXyK/n0ZvWpad5caBA17GsC6vyuCqaWliRG5K1qS9inmUhEMaOBIW7/whAnSwveW/LtZw==", + "license": "MIT", + "dependencies": { + "is-alphabetical": "^2.0.0", + "is-decimal": "^2.0.0" + }, + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/mdast-util-mdx-jsx/node_modules/is-decimal": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/is-decimal/-/is-decimal-2.0.1.tgz", + "integrity": "sha512-AAB9hiomQs5DXWcRB1rqsxGUstbRroFOPPVAomNk/3XHR5JyEZChOyTWe2oayKnsSsr/kcGqF+z6yuH6HHpN0A==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/mdast-util-mdx-jsx/node_modules/is-hexadecimal": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/is-hexadecimal/-/is-hexadecimal-2.0.1.tgz", + "integrity": "sha512-DgZQp241c8oO6cA1SbTEWiXeoxV42vlcJxgH+B3hi1AiqqKruZR3ZGF8In3fj4+/y/7rHvlOZLZtgJ/4ttYGZg==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/mdast-util-mdx-jsx/node_modules/parse-entities": { + "version": "4.0.1", + "resolved": "https://registry.npmjs.org/parse-entities/-/parse-entities-4.0.1.tgz", + "integrity": "sha512-SWzvYcSJh4d/SGLIOQfZ/CoNv6BTlI6YEQ7Nj82oDVnRpwe/Z/F1EMx42x3JAOwGBlCjeCH0BRJQbQ/opHL17w==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "character-entities": "^2.0.0", + "character-entities-legacy": "^3.0.0", + "character-reference-invalid": "^2.0.0", + "decode-named-character-reference": "^1.0.0", + "is-alphanumerical": "^2.0.0", + "is-decimal": "^2.0.0", + "is-hexadecimal": "^2.0.0" + }, + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/mdast-util-mdx-jsx/node_modules/stringify-entities": { + "version": "4.0.4", + "resolved": "https://registry.npmjs.org/stringify-entities/-/stringify-entities-4.0.4.tgz", + "integrity": "sha512-IwfBptatlO+QCJUo19AqvrPNqlVMpW9YEL2LIVY+Rpv2qsjCGxaDLNRgeGsQWJhfItebuJhsGSLjaBbNSQ+ieg==", + "license": "MIT", + "dependencies": { + "character-entities-html4": "^2.0.0", + "character-entities-legacy": "^3.0.0" + }, + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/mdast-util-mdx-jsx/node_modules/unist-util-remove-position": { + "version": "4.0.2", + "resolved": "https://registry.npmjs.org/unist-util-remove-position/-/unist-util-remove-position-4.0.2.tgz", + "integrity": "sha512-TkBb0HABNmxzAcfLf4qsIbFbaPDvMO6wa3b3j4VcEzFVaw1LBKwnW4/sRJ/atSLSzoIg41JWEdnE7N6DIhGDGQ==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "unist-util-visit": "^4.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-mdx-jsx/node_modules/unist-util-visit": { + "version": "4.1.2", + "resolved": "https://registry.npmjs.org/unist-util-visit/-/unist-util-visit-4.1.2.tgz", + "integrity": "sha512-MSd8OUGISqHdVvfY9TPhyK2VdUrPgxkUtWSuMHF6XAAFuL4LokseigBnZtPnJMu+FbynTkFNnFlyjxpVKujMRg==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "unist-util-is": "^5.0.0", + "unist-util-visit-parents": "^5.1.1" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-mdx-jsx/node_modules/unist-util-visit-parents": { + "version": "5.1.3", + "resolved": "https://registry.npmjs.org/unist-util-visit-parents/-/unist-util-visit-parents-5.1.3.tgz", + "integrity": "sha512-x6+y8g7wWMyQhL1iZfhIPhDAs7Xwbn9nRosDXl7qoPTSCy0yNxnKc+hWokFifWQIDGi154rdUqKvbCa4+1kLhg==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "unist-util-is": "^5.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-mdx-jsx/node_modules/vfile-message": { + "version": "3.1.4", + "resolved": "https://registry.npmjs.org/vfile-message/-/vfile-message-3.1.4.tgz", + "integrity": "sha512-fa0Z6P8HUrQN4BZaX05SIVXic+7kE3b05PWAtPuYP9QLHsLKYR7/AlLW3NtOrpXRLeawpDLMsVkmk5DG0NXgWw==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "unist-util-stringify-position": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-mdxjs-esm": { + "version": "1.3.1", + "resolved": "https://registry.npmjs.org/mdast-util-mdxjs-esm/-/mdast-util-mdxjs-esm-1.3.1.tgz", + "integrity": "sha512-SXqglS0HrEvSdUEfoXFtcg7DRl7S2cwOXc7jkuusG472Mmjag34DUDeOJUZtl+BVnyeO1frIgVpHlNRWc2gk/w==", + "license": "MIT", + "dependencies": { + "@types/estree-jsx": "^1.0.0", + "@types/hast": "^2.0.0", + "@types/mdast": "^3.0.0", + "mdast-util-from-markdown": "^1.0.0", + "mdast-util-to-markdown": "^1.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-phrasing": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/mdast-util-phrasing/-/mdast-util-phrasing-3.0.1.tgz", + "integrity": "sha512-WmI1gTXUBJo4/ZmSk79Wcb2HcjPJBzM1nlI/OUWA8yk2X9ik3ffNbBGsU+09BFmXaL1IBb9fiuvq6/KMiNycSg==", + "license": "MIT", + "dependencies": { + "@types/mdast": "^3.0.0", + "unist-util-is": "^5.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-to-hast": { + "version": "10.2.0", + "resolved": "https://registry.npmjs.org/mdast-util-to-hast/-/mdast-util-to-hast-10.2.0.tgz", + "integrity": "sha512-JoPBfJ3gBnHZ18icCwHR50orC9kNH81tiR1gs01D8Q5YpV6adHNO9nKNuFBCJQ941/32PT1a63UF/DitmS3amQ==", + "license": "MIT", + "dependencies": { + "@types/mdast": "^3.0.0", + "@types/unist": "^2.0.0", + "mdast-util-definitions": "^4.0.0", + "mdurl": "^1.0.0", + "unist-builder": "^2.0.0", + "unist-util-generated": "^1.0.0", + "unist-util-position": "^3.0.0", + "unist-util-visit": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-to-markdown": { + "version": "1.5.0", + "resolved": "https://registry.npmjs.org/mdast-util-to-markdown/-/mdast-util-to-markdown-1.5.0.tgz", + "integrity": "sha512-bbv7TPv/WC49thZPg3jXuqzuvI45IL2EVAr/KxF0BSdHsU0ceFHOmwQn6evxAh1GaoK/6GQ1wp4R4oW2+LFL/A==", + "license": "MIT", + "dependencies": { + "@types/mdast": "^3.0.0", + "@types/unist": "^2.0.0", + "longest-streak": "^3.0.0", + "mdast-util-phrasing": "^3.0.0", + "mdast-util-to-string": "^3.0.0", + "micromark-util-decode-string": "^1.0.0", + "unist-util-visit": "^4.0.0", + "zwitch": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-to-markdown/node_modules/unist-util-visit": { + "version": "4.1.2", + "resolved": "https://registry.npmjs.org/unist-util-visit/-/unist-util-visit-4.1.2.tgz", + "integrity": "sha512-MSd8OUGISqHdVvfY9TPhyK2VdUrPgxkUtWSuMHF6XAAFuL4LokseigBnZtPnJMu+FbynTkFNnFlyjxpVKujMRg==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "unist-util-is": "^5.0.0", + "unist-util-visit-parents": "^5.1.1" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-to-markdown/node_modules/unist-util-visit-parents": { + "version": "5.1.3", + "resolved": "https://registry.npmjs.org/unist-util-visit-parents/-/unist-util-visit-parents-5.1.3.tgz", + "integrity": "sha512-x6+y8g7wWMyQhL1iZfhIPhDAs7Xwbn9nRosDXl7qoPTSCy0yNxnKc+hWokFifWQIDGi154rdUqKvbCa4+1kLhg==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "unist-util-is": "^5.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-to-string": { + "version": "3.2.0", + "resolved": "https://registry.npmjs.org/mdast-util-to-string/-/mdast-util-to-string-3.2.0.tgz", + "integrity": "sha512-V4Zn/ncyN1QNSqSBxTrMOLpjr+IKdHl2v3KVLoWmDPscP4r9GcCi71gjgvUV1SFSKh92AjAG4peFuBl2/YgCJg==", + "license": "MIT", + "dependencies": { + "@types/mdast": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdurl": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/mdurl/-/mdurl-1.0.1.tgz", + "integrity": "sha512-/sKlQJCBYVY9Ers9hqzKou4H6V5UWc/M59TH2dvkt+84itfnq7uFOMLpOiOS4ujvHP4etln18fmIxA5R5fll0g==", + "license": "MIT" + }, + "node_modules/memoize-one": { + "version": "6.0.0", + "resolved": "https://registry.npmjs.org/memoize-one/-/memoize-one-6.0.0.tgz", + "integrity": "sha512-rkpe71W0N0c0Xz6QD0eJETuWAJGnJ9afsl1srmwPrI+yBCkge5EycXXbYRyvL29zZVUWQCY7InPRCv3GDXuZNw==", + "license": "MIT" + }, + "node_modules/merge2": { + "version": "1.4.1", + "resolved": "https://registry.npmjs.org/merge2/-/merge2-1.4.1.tgz", + "integrity": "sha512-8q7VEgMJW4J8tcfVPy8g09NcQwZdbwFEqhe/WZkoIzjn/3TGDwtOCYtXGxA3O8tPzpczCCDgv+P2P5y00ZJOOg==", + "license": "MIT", + "engines": { + "node": ">= 8" + } + }, + "node_modules/mermaid": { + "version": "10.9.1", + "resolved": "https://registry.npmjs.org/mermaid/-/mermaid-10.9.1.tgz", + "integrity": "sha512-Mx45Obds5W1UkW1nv/7dHRsbfMM1aOKA2+Pxs/IGHNonygDHwmng8xTHyS9z4KWVi0rbko8gjiBmuwwXQ7tiNA==", + "license": "MIT", + "dependencies": { + "@braintree/sanitize-url": "^6.0.1", + "@types/d3-scale": "^4.0.3", + "@types/d3-scale-chromatic": "^3.0.0", + "cytoscape": "^3.28.1", + "cytoscape-cose-bilkent": "^4.1.0", + "d3": "^7.4.0", + "d3-sankey": "^0.12.3", + "dagre-d3-es": "7.0.10", + "dayjs": "^1.11.7", + "dompurify": "^3.0.5", + "elkjs": "^0.9.0", + "katex": "^0.16.9", + "khroma": "^2.0.0", + "lodash-es": "^4.17.21", + "mdast-util-from-markdown": "^1.3.0", + "non-layered-tidy-tree-layout": "^2.0.2", + "stylis": "^4.1.3", + "ts-dedent": "^2.2.0", + "uuid": "^9.0.0", + "web-worker": "^1.2.0" + } + }, + "node_modules/mermaid/node_modules/uuid": { + "version": "9.0.1", + "resolved": "https://registry.npmjs.org/uuid/-/uuid-9.0.1.tgz", + "integrity": "sha512-b+1eJOlsR9K8HJpow9Ok3fiWOWSIcIzXodvv0rQjVoOVNpWMpxf1wZNpt4y9h10odCNrqnYp1OBzRktckBe3sA==", + "funding": [ + "https://github.com/sponsors/broofa", + "https://github.com/sponsors/ctavan" + ], + "license": "MIT", + "bin": { + "uuid": "dist/bin/uuid" + } + }, + "node_modules/micromark": { + "version": "3.2.0", + "resolved": "https://registry.npmjs.org/micromark/-/micromark-3.2.0.tgz", + "integrity": "sha512-uD66tJj54JLYq0De10AhWycZWGQNUvDI55xPgk2sQM5kn1JYlhbCMTtEeT27+vAhW2FBQxLlOmS3pmA7/2z4aA==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "@types/debug": "^4.0.0", + "debug": "^4.0.0", + "decode-named-character-reference": "^1.0.0", + "micromark-core-commonmark": "^1.0.1", + "micromark-factory-space": "^1.0.0", + "micromark-util-character": "^1.0.0", + "micromark-util-chunked": "^1.0.0", + "micromark-util-combine-extensions": "^1.0.0", + "micromark-util-decode-numeric-character-reference": "^1.0.0", + "micromark-util-encode": "^1.0.0", + "micromark-util-normalize-identifier": "^1.0.0", + "micromark-util-resolve-all": "^1.0.0", + "micromark-util-sanitize-uri": "^1.0.0", + "micromark-util-subtokenize": "^1.0.0", + "micromark-util-symbol": "^1.0.0", + "micromark-util-types": "^1.0.1", + "uvu": "^0.5.0" + } + }, + "node_modules/micromark-core-commonmark": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/micromark-core-commonmark/-/micromark-core-commonmark-1.1.0.tgz", + "integrity": "sha512-BgHO1aRbolh2hcrzL2d1La37V0Aoz73ymF8rAcKnohLy93titmv62E0gP8Hrx9PKcKrqCZ1BbLGbP3bEhoXYlw==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "decode-named-character-reference": "^1.0.0", + "micromark-factory-destination": "^1.0.0", + "micromark-factory-label": "^1.0.0", + "micromark-factory-space": "^1.0.0", + "micromark-factory-title": "^1.0.0", + "micromark-factory-whitespace": "^1.0.0", + "micromark-util-character": "^1.0.0", + "micromark-util-chunked": "^1.0.0", + "micromark-util-classify-character": "^1.0.0", + "micromark-util-html-tag-name": "^1.0.0", + "micromark-util-normalize-identifier": "^1.0.0", + "micromark-util-resolve-all": "^1.0.0", + "micromark-util-subtokenize": "^1.0.0", + "micromark-util-symbol": "^1.0.0", + "micromark-util-types": "^1.0.1", + "uvu": "^0.5.0" + } + }, + "node_modules/micromark-extension-gfm": { + "version": "2.0.3", + "resolved": "https://registry.npmjs.org/micromark-extension-gfm/-/micromark-extension-gfm-2.0.3.tgz", + "integrity": "sha512-vb9OoHqrhCmbRidQv/2+Bc6pkP0FrtlhurxZofvOEy5o8RtuuvTq+RQ1Vw5ZDNrVraQZu3HixESqbG+0iKk/MQ==", + "license": "MIT", + "dependencies": { + "micromark-extension-gfm-autolink-literal": "^1.0.0", + "micromark-extension-gfm-footnote": "^1.0.0", + "micromark-extension-gfm-strikethrough": "^1.0.0", + "micromark-extension-gfm-table": "^1.0.0", + "micromark-extension-gfm-tagfilter": "^1.0.0", + "micromark-extension-gfm-task-list-item": "^1.0.0", + "micromark-util-combine-extensions": "^1.0.0", + "micromark-util-types": "^1.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/micromark-extension-gfm-autolink-literal": { + "version": "1.0.5", + "resolved": "https://registry.npmjs.org/micromark-extension-gfm-autolink-literal/-/micromark-extension-gfm-autolink-literal-1.0.5.tgz", + "integrity": "sha512-z3wJSLrDf8kRDOh2qBtoTRD53vJ+CWIyo7uyZuxf/JAbNJjiHsOpG1y5wxk8drtv3ETAHutCu6N3thkOOgueWg==", + "license": "MIT", + "dependencies": { + "micromark-util-character": "^1.0.0", + "micromark-util-sanitize-uri": "^1.0.0", + "micromark-util-symbol": "^1.0.0", + "micromark-util-types": "^1.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/micromark-extension-gfm-footnote": { + "version": "1.1.2", + "resolved": "https://registry.npmjs.org/micromark-extension-gfm-footnote/-/micromark-extension-gfm-footnote-1.1.2.tgz", + "integrity": "sha512-Yxn7z7SxgyGWRNa4wzf8AhYYWNrwl5q1Z8ii+CSTTIqVkmGZF1CElX2JI8g5yGoM3GAman9/PVCUFUSJ0kB/8Q==", + "license": "MIT", + "dependencies": { + "micromark-core-commonmark": "^1.0.0", + "micromark-factory-space": "^1.0.0", + "micromark-util-character": "^1.0.0", + "micromark-util-normalize-identifier": "^1.0.0", + "micromark-util-sanitize-uri": "^1.0.0", + "micromark-util-symbol": "^1.0.0", + "micromark-util-types": "^1.0.0", + "uvu": "^0.5.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/micromark-extension-gfm-strikethrough": { + "version": "1.0.7", + "resolved": "https://registry.npmjs.org/micromark-extension-gfm-strikethrough/-/micromark-extension-gfm-strikethrough-1.0.7.tgz", + "integrity": "sha512-sX0FawVE1o3abGk3vRjOH50L5TTLr3b5XMqnP9YDRb34M0v5OoZhG+OHFz1OffZ9dlwgpTBKaT4XW/AsUVnSDw==", + "license": "MIT", + "dependencies": { + "micromark-util-chunked": "^1.0.0", + "micromark-util-classify-character": "^1.0.0", + "micromark-util-resolve-all": "^1.0.0", + "micromark-util-symbol": "^1.0.0", + "micromark-util-types": "^1.0.0", + "uvu": "^0.5.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/micromark-extension-gfm-table": { + "version": "1.0.7", + "resolved": "https://registry.npmjs.org/micromark-extension-gfm-table/-/micromark-extension-gfm-table-1.0.7.tgz", + "integrity": "sha512-3ZORTHtcSnMQEKtAOsBQ9/oHp9096pI/UvdPtN7ehKvrmZZ2+bbWhi0ln+I9drmwXMt5boocn6OlwQzNXeVeqw==", + "license": "MIT", + "dependencies": { + "micromark-factory-space": "^1.0.0", + "micromark-util-character": "^1.0.0", + "micromark-util-symbol": "^1.0.0", + "micromark-util-types": "^1.0.0", + "uvu": "^0.5.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/micromark-extension-gfm-tagfilter": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/micromark-extension-gfm-tagfilter/-/micromark-extension-gfm-tagfilter-1.0.2.tgz", + "integrity": "sha512-5XWB9GbAUSHTn8VPU8/1DBXMuKYT5uOgEjJb8gN3mW0PNW5OPHpSdojoqf+iq1xo7vWzw/P8bAHY0n6ijpXF7g==", + "license": "MIT", + "dependencies": { + "micromark-util-types": "^1.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/micromark-extension-gfm-task-list-item": { + "version": "1.0.5", + "resolved": "https://registry.npmjs.org/micromark-extension-gfm-task-list-item/-/micromark-extension-gfm-task-list-item-1.0.5.tgz", + "integrity": "sha512-RMFXl2uQ0pNQy6Lun2YBYT9g9INXtWJULgbt01D/x8/6yJ2qpKyzdZD3pi6UIkzF++Da49xAelVKUeUMqd5eIQ==", + "license": "MIT", + "dependencies": { + "micromark-factory-space": "^1.0.0", + "micromark-util-character": "^1.0.0", + "micromark-util-symbol": "^1.0.0", + "micromark-util-types": "^1.0.0", + "uvu": "^0.5.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/micromark-extension-math": { + "version": "2.1.2", + "resolved": "https://registry.npmjs.org/micromark-extension-math/-/micromark-extension-math-2.1.2.tgz", + "integrity": "sha512-es0CcOV89VNS9wFmyn+wyFTKweXGW4CEvdaAca6SWRWPyYCbBisnjaHLjWO4Nszuiud84jCpkHsqAJoa768Pvg==", + "license": "MIT", + "dependencies": { + "@types/katex": "^0.16.0", + "katex": "^0.16.0", + "micromark-factory-space": "^1.0.0", + "micromark-util-character": "^1.0.0", + "micromark-util-symbol": "^1.0.0", + "micromark-util-types": "^1.0.0", + "uvu": "^0.5.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/micromark-extension-mdx-expression": { + "version": "1.0.8", + "resolved": "https://registry.npmjs.org/micromark-extension-mdx-expression/-/micromark-extension-mdx-expression-1.0.8.tgz", + "integrity": "sha512-zZpeQtc5wfWKdzDsHRBY003H2Smg+PUi2REhqgIhdzAa5xonhP03FcXxqFSerFiNUr5AWmHpaNPQTBVOS4lrXw==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "@types/estree": "^1.0.0", + "micromark-factory-mdx-expression": "^1.0.0", + "micromark-factory-space": "^1.0.0", + "micromark-util-character": "^1.0.0", + "micromark-util-events-to-acorn": "^1.0.0", + "micromark-util-symbol": "^1.0.0", + "micromark-util-types": "^1.0.0", + "uvu": "^0.5.0" + } + }, + "node_modules/micromark-extension-mdx-jsx": { + "version": "1.0.5", + "resolved": "https://registry.npmjs.org/micromark-extension-mdx-jsx/-/micromark-extension-mdx-jsx-1.0.5.tgz", + "integrity": "sha512-gPH+9ZdmDflbu19Xkb8+gheqEDqkSpdCEubQyxuz/Hn8DOXiXvrXeikOoBA71+e8Pfi0/UYmU3wW3H58kr7akA==", + "license": "MIT", + "dependencies": { + "@types/acorn": "^4.0.0", + "@types/estree": "^1.0.0", + "estree-util-is-identifier-name": "^2.0.0", + "micromark-factory-mdx-expression": "^1.0.0", + "micromark-factory-space": "^1.0.0", + "micromark-util-character": "^1.0.0", + "micromark-util-symbol": "^1.0.0", + "micromark-util-types": "^1.0.0", + "uvu": "^0.5.0", + "vfile-message": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/micromark-extension-mdx-jsx/node_modules/vfile-message": { + "version": "3.1.4", + "resolved": "https://registry.npmjs.org/vfile-message/-/vfile-message-3.1.4.tgz", + "integrity": "sha512-fa0Z6P8HUrQN4BZaX05SIVXic+7kE3b05PWAtPuYP9QLHsLKYR7/AlLW3NtOrpXRLeawpDLMsVkmk5DG0NXgWw==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "unist-util-stringify-position": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/micromark-extension-mdx-md": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/micromark-extension-mdx-md/-/micromark-extension-mdx-md-1.0.1.tgz", + "integrity": "sha512-7MSuj2S7xjOQXAjjkbjBsHkMtb+mDGVW6uI2dBL9snOBCbZmoNgDAeZ0nSn9j3T42UE/g2xVNMn18PJxZvkBEA==", + "license": "MIT", + "dependencies": { + "micromark-util-types": "^1.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/micromark-extension-mdxjs": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/micromark-extension-mdxjs/-/micromark-extension-mdxjs-1.0.1.tgz", + "integrity": "sha512-7YA7hF6i5eKOfFUzZ+0z6avRG52GpWR8DL+kN47y3f2KhxbBZMhmxe7auOeaTBrW2DenbbZTf1ea9tA2hDpC2Q==", + "license": "MIT", + "dependencies": { + "acorn": "^8.0.0", + "acorn-jsx": "^5.0.0", + "micromark-extension-mdx-expression": "^1.0.0", + "micromark-extension-mdx-jsx": "^1.0.0", + "micromark-extension-mdx-md": "^1.0.0", + "micromark-extension-mdxjs-esm": "^1.0.0", + "micromark-util-combine-extensions": "^1.0.0", + "micromark-util-types": "^1.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/micromark-extension-mdxjs-esm": { + "version": "1.0.5", + "resolved": "https://registry.npmjs.org/micromark-extension-mdxjs-esm/-/micromark-extension-mdxjs-esm-1.0.5.tgz", + "integrity": "sha512-xNRBw4aoURcyz/S69B19WnZAkWJMxHMT5hE36GtDAyhoyn/8TuAeqjFJQlwk+MKQsUD7b3l7kFX+vlfVWgcX1w==", + "license": "MIT", + "dependencies": { + "@types/estree": "^1.0.0", + "micromark-core-commonmark": "^1.0.0", + "micromark-util-character": "^1.0.0", + "micromark-util-events-to-acorn": "^1.0.0", + "micromark-util-symbol": "^1.0.0", + "micromark-util-types": "^1.0.0", + "unist-util-position-from-estree": "^1.1.0", + "uvu": "^0.5.0", + "vfile-message": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/micromark-extension-mdxjs-esm/node_modules/vfile-message": { + "version": "3.1.4", + "resolved": "https://registry.npmjs.org/vfile-message/-/vfile-message-3.1.4.tgz", + "integrity": "sha512-fa0Z6P8HUrQN4BZaX05SIVXic+7kE3b05PWAtPuYP9QLHsLKYR7/AlLW3NtOrpXRLeawpDLMsVkmk5DG0NXgWw==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "unist-util-stringify-position": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/micromark-factory-destination": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/micromark-factory-destination/-/micromark-factory-destination-1.1.0.tgz", + "integrity": "sha512-XaNDROBgx9SgSChd69pjiGKbV+nfHGDPVYFs5dOoDd7ZnMAE+Cuu91BCpsY8RT2NP9vo/B8pds2VQNCLiu0zhg==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "micromark-util-character": "^1.0.0", + "micromark-util-symbol": "^1.0.0", + "micromark-util-types": "^1.0.0" + } + }, + "node_modules/micromark-factory-label": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/micromark-factory-label/-/micromark-factory-label-1.1.0.tgz", + "integrity": "sha512-OLtyez4vZo/1NjxGhcpDSbHQ+m0IIGnT8BoPamh+7jVlzLJBH98zzuCoUeMxvM6WsNeh8wx8cKvqLiPHEACn0w==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "micromark-util-character": "^1.0.0", + "micromark-util-symbol": "^1.0.0", + "micromark-util-types": "^1.0.0", + "uvu": "^0.5.0" + } + }, + "node_modules/micromark-factory-mdx-expression": { + "version": "1.0.9", + "resolved": "https://registry.npmjs.org/micromark-factory-mdx-expression/-/micromark-factory-mdx-expression-1.0.9.tgz", + "integrity": "sha512-jGIWzSmNfdnkJq05c7b0+Wv0Kfz3NJ3N4cBjnbO4zjXIlxJr+f8lk+5ZmwFvqdAbUy2q6B5rCY//g0QAAaXDWA==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "@types/estree": "^1.0.0", + "micromark-util-character": "^1.0.0", + "micromark-util-events-to-acorn": "^1.0.0", + "micromark-util-symbol": "^1.0.0", + "micromark-util-types": "^1.0.0", + "unist-util-position-from-estree": "^1.0.0", + "uvu": "^0.5.0", + "vfile-message": "^3.0.0" + } + }, + "node_modules/micromark-factory-mdx-expression/node_modules/vfile-message": { + "version": "3.1.4", + "resolved": "https://registry.npmjs.org/vfile-message/-/vfile-message-3.1.4.tgz", + "integrity": "sha512-fa0Z6P8HUrQN4BZaX05SIVXic+7kE3b05PWAtPuYP9QLHsLKYR7/AlLW3NtOrpXRLeawpDLMsVkmk5DG0NXgWw==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "unist-util-stringify-position": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/micromark-factory-space": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/micromark-factory-space/-/micromark-factory-space-1.1.0.tgz", + "integrity": "sha512-cRzEj7c0OL4Mw2v6nwzttyOZe8XY/Z8G0rzmWQZTBi/jjwyw/U4uqKtUORXQrR5bAZZnbTI/feRV/R7hc4jQYQ==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "micromark-util-character": "^1.0.0", + "micromark-util-types": "^1.0.0" + } + }, + "node_modules/micromark-factory-title": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/micromark-factory-title/-/micromark-factory-title-1.1.0.tgz", + "integrity": "sha512-J7n9R3vMmgjDOCY8NPw55jiyaQnH5kBdV2/UXCtZIpnHH3P6nHUKaH7XXEYuWwx/xUJcawa8plLBEjMPU24HzQ==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "micromark-factory-space": "^1.0.0", + "micromark-util-character": "^1.0.0", + "micromark-util-symbol": "^1.0.0", + "micromark-util-types": "^1.0.0" + } + }, + "node_modules/micromark-factory-whitespace": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/micromark-factory-whitespace/-/micromark-factory-whitespace-1.1.0.tgz", + "integrity": "sha512-v2WlmiymVSp5oMg+1Q0N1Lxmt6pMhIHD457whWM7/GUlEks1hI9xj5w3zbc4uuMKXGisksZk8DzP2UyGbGqNsQ==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "micromark-factory-space": "^1.0.0", + "micromark-util-character": "^1.0.0", + "micromark-util-symbol": "^1.0.0", + "micromark-util-types": "^1.0.0" + } + }, + "node_modules/micromark-util-character": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/micromark-util-character/-/micromark-util-character-1.2.0.tgz", + "integrity": "sha512-lXraTwcX3yH/vMDaFWCQJP1uIszLVebzUa3ZHdrgxr7KEU/9mL4mVgCpGbyhvNLNlauROiNUq7WN5u7ndbY6xg==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "micromark-util-symbol": "^1.0.0", + "micromark-util-types": "^1.0.0" + } + }, + "node_modules/micromark-util-chunked": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/micromark-util-chunked/-/micromark-util-chunked-1.1.0.tgz", + "integrity": "sha512-Ye01HXpkZPNcV6FiyoW2fGZDUw4Yc7vT0E9Sad83+bEDiCJ1uXu0S3mr8WLpsz3HaG3x2q0HM6CTuPdcZcluFQ==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "micromark-util-symbol": "^1.0.0" + } + }, + "node_modules/micromark-util-classify-character": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/micromark-util-classify-character/-/micromark-util-classify-character-1.1.0.tgz", + "integrity": "sha512-SL0wLxtKSnklKSUplok1WQFoGhUdWYKggKUiqhX+Swala+BtptGCu5iPRc+xvzJ4PXE/hwM3FNXsfEVgoZsWbw==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "micromark-util-character": "^1.0.0", + "micromark-util-symbol": "^1.0.0", + "micromark-util-types": "^1.0.0" + } + }, + "node_modules/micromark-util-combine-extensions": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/micromark-util-combine-extensions/-/micromark-util-combine-extensions-1.1.0.tgz", + "integrity": "sha512-Q20sp4mfNf9yEqDL50WwuWZHUrCO4fEyeDCnMGmG5Pr0Cz15Uo7KBs6jq+dq0EgX4DPwwrh9m0X+zPV1ypFvUA==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "micromark-util-chunked": "^1.0.0", + "micromark-util-types": "^1.0.0" + } + }, + "node_modules/micromark-util-decode-numeric-character-reference": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/micromark-util-decode-numeric-character-reference/-/micromark-util-decode-numeric-character-reference-1.1.0.tgz", + "integrity": "sha512-m9V0ExGv0jB1OT21mrWcuf4QhP46pH1KkfWy9ZEezqHKAxkj4mPCy3nIH1rkbdMlChLHX531eOrymlwyZIf2iw==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "micromark-util-symbol": "^1.0.0" + } + }, + "node_modules/micromark-util-decode-string": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/micromark-util-decode-string/-/micromark-util-decode-string-1.1.0.tgz", + "integrity": "sha512-YphLGCK8gM1tG1bd54azwyrQRjCFcmgj2S2GoJDNnh4vYtnL38JS8M4gpxzOPNyHdNEpheyWXCTnnTDY3N+NVQ==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "decode-named-character-reference": "^1.0.0", + "micromark-util-character": "^1.0.0", + "micromark-util-decode-numeric-character-reference": "^1.0.0", + "micromark-util-symbol": "^1.0.0" + } + }, + "node_modules/micromark-util-encode": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/micromark-util-encode/-/micromark-util-encode-1.1.0.tgz", + "integrity": "sha512-EuEzTWSTAj9PA5GOAs992GzNh2dGQO52UvAbtSOMvXTxv3Criqb6IOzJUBCmEqrrXSblJIJBbFFv6zPxpreiJw==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT" + }, + "node_modules/micromark-util-events-to-acorn": { + "version": "1.2.3", + "resolved": "https://registry.npmjs.org/micromark-util-events-to-acorn/-/micromark-util-events-to-acorn-1.2.3.tgz", + "integrity": "sha512-ij4X7Wuc4fED6UoLWkmo0xJQhsktfNh1J0m8g4PbIMPlx+ek/4YdW5mvbye8z/aZvAPUoxgXHrwVlXAPKMRp1w==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "@types/acorn": "^4.0.0", + "@types/estree": "^1.0.0", + "@types/unist": "^2.0.0", + "estree-util-visit": "^1.0.0", + "micromark-util-symbol": "^1.0.0", + "micromark-util-types": "^1.0.0", + "uvu": "^0.5.0", + "vfile-message": "^3.0.0" + } + }, + "node_modules/micromark-util-events-to-acorn/node_modules/vfile-message": { + "version": "3.1.4", + "resolved": "https://registry.npmjs.org/vfile-message/-/vfile-message-3.1.4.tgz", + "integrity": "sha512-fa0Z6P8HUrQN4BZaX05SIVXic+7kE3b05PWAtPuYP9QLHsLKYR7/AlLW3NtOrpXRLeawpDLMsVkmk5DG0NXgWw==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "unist-util-stringify-position": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/micromark-util-html-tag-name": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/micromark-util-html-tag-name/-/micromark-util-html-tag-name-1.2.0.tgz", + "integrity": "sha512-VTQzcuQgFUD7yYztuQFKXT49KghjtETQ+Wv/zUjGSGBioZnkA4P1XXZPT1FHeJA6RwRXSF47yvJ1tsJdoxwO+Q==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT" + }, + "node_modules/micromark-util-normalize-identifier": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/micromark-util-normalize-identifier/-/micromark-util-normalize-identifier-1.1.0.tgz", + "integrity": "sha512-N+w5vhqrBihhjdpM8+5Xsxy71QWqGn7HYNUvch71iV2PM7+E3uWGox1Qp90loa1ephtCxG2ftRV/Conitc6P2Q==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "micromark-util-symbol": "^1.0.0" + } + }, + "node_modules/micromark-util-resolve-all": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/micromark-util-resolve-all/-/micromark-util-resolve-all-1.1.0.tgz", + "integrity": "sha512-b/G6BTMSg+bX+xVCshPTPyAu2tmA0E4X98NSR7eIbeC6ycCqCeE7wjfDIgzEbkzdEVJXRtOG4FbEm/uGbCRouA==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "micromark-util-types": "^1.0.0" + } + }, + "node_modules/micromark-util-sanitize-uri": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/micromark-util-sanitize-uri/-/micromark-util-sanitize-uri-1.2.0.tgz", + "integrity": "sha512-QO4GXv0XZfWey4pYFndLUKEAktKkG5kZTdUNaTAkzbuJxn2tNBOr+QtxR2XpWaMhbImT2dPzyLrPXLlPhph34A==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "micromark-util-character": "^1.0.0", + "micromark-util-encode": "^1.0.0", + "micromark-util-symbol": "^1.0.0" + } + }, + "node_modules/micromark-util-subtokenize": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/micromark-util-subtokenize/-/micromark-util-subtokenize-1.1.0.tgz", + "integrity": "sha512-kUQHyzRoxvZO2PuLzMt2P/dwVsTiivCK8icYTeR+3WgbuPqfHgPPy7nFKbeqRivBvn/3N3GBiNC+JRTMSxEC7A==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "micromark-util-chunked": "^1.0.0", + "micromark-util-symbol": "^1.0.0", + "micromark-util-types": "^1.0.0", + "uvu": "^0.5.0" + } + }, + "node_modules/micromark-util-symbol": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/micromark-util-symbol/-/micromark-util-symbol-1.1.0.tgz", + "integrity": "sha512-uEjpEYY6KMs1g7QfJ2eX1SQEV+ZT4rUD3UcF6l57acZvLNK7PBZL+ty82Z1qhK1/yXIY4bdx04FKMgR0g4IAag==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT" + }, + "node_modules/micromark-util-types": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/micromark-util-types/-/micromark-util-types-1.1.0.tgz", + "integrity": "sha512-ukRBgie8TIAcacscVHSiddHjO4k/q3pnedmzMQ4iwDcK0FtFCohKOlFbaOL/mPgfnPsL3C1ZyxJa4sbWrBl3jg==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT" + }, + "node_modules/micromatch": { + "version": "4.0.8", + "resolved": "https://registry.npmjs.org/micromatch/-/micromatch-4.0.8.tgz", + "integrity": "sha512-PXwfBhYu0hBCPw8Dn0E+WDYb7af3dSLVWKi3HGv84IdF4TyFoC0ysxFd0Goxw7nSv4T/PzEJQxsYsEiFCKo2BA==", + "license": "MIT", + "dependencies": { + "braces": "^3.0.3", + "picomatch": "^2.3.1" + }, + "engines": { + "node": ">=8.6" + } + }, + "node_modules/mime-db": { + "version": "1.52.0", + "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz", + "integrity": "sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/mime-types": { + "version": "2.1.35", + "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz", + "integrity": "sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==", + "license": "MIT", + "dependencies": { + "mime-db": "1.52.0" + }, + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/minimatch": { + "version": "9.0.5", + "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.5.tgz", + "integrity": "sha512-G6T0ZX48xgozx7587koeX9Ys2NYy6Gmv//P89sEte9V9whIapMNF4idKxnW2QtCcLiTWlb/wfCabAtAFWhhBow==", + "license": "ISC", + "dependencies": { + "brace-expansion": "^2.0.1" + }, + "engines": { + "node": ">=16 || 14 >=14.17" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/minipass": { + "version": "7.1.2", + "resolved": "https://registry.npmjs.org/minipass/-/minipass-7.1.2.tgz", + "integrity": "sha512-qOOzS1cBTWYF4BH8fVePDBOO9iptMnGUEZwNc/cMWnTV2nVLZ7VoNWEPHkYczZA0pdoA7dl6e7FL659nX9S2aw==", + "license": "ISC", + "engines": { + "node": ">=16 || 14 >=14.17" + } + }, + "node_modules/moment": { + "version": "2.30.1", + "resolved": "https://registry.npmjs.org/moment/-/moment-2.30.1.tgz", + "integrity": "sha512-uEmtNhbDOrWPFS+hdjFCBfy9f2YoyzRpwcl+DqpC6taX21FzsTLQVbMV/W7PzNSX6x/bhC1zA3c2UQ5NzH6how==", + "license": "MIT", + "engines": { + "node": "*" + } + }, + "node_modules/mri": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/mri/-/mri-1.2.0.tgz", + "integrity": "sha512-tzzskb3bG8LvYGFF/mDTpq3jpI6Q9wc3LEmBaghu+DdCssd1FakN7Bc0hVNmEyGq1bq3RgfkCb3cmQLpNPOroA==", + "license": "MIT", + "engines": { + "node": ">=4" + } + }, + "node_modules/ms": { + "version": "2.1.2", + "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz", + "integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==", + "license": "MIT" + }, + "node_modules/mz": { + "version": "2.7.0", + "resolved": "https://registry.npmjs.org/mz/-/mz-2.7.0.tgz", + "integrity": "sha512-z81GNO7nnYMEhrGh9LeymoE4+Yr0Wn5McHIZMK5cfQCl+NDX08sCZgUc9/6MHni9IWuFLm1Z3HTCXu2z9fN62Q==", + "license": "MIT", + "dependencies": { + "any-promise": "^1.0.0", + "object-assign": "^4.0.1", + "thenify-all": "^1.0.0" + } + }, + "node_modules/nanoid": { + "version": "3.3.7", + "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.7.tgz", + "integrity": "sha512-eSRppjcPIatRIMC1U6UngP8XFcz8MQWGQdt1MTBQ7NaAmvXDfvNxbvWV3x2y6CdEUciCSsDHDQZbhYaB8QEo2g==", + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/ai" + } + ], + "license": "MIT", + "bin": { + "nanoid": "bin/nanoid.cjs" + }, + "engines": { + "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1" + } + }, + "node_modules/next": { + "version": "14.2.7", + "resolved": "https://registry.npmjs.org/next/-/next-14.2.7.tgz", + "integrity": "sha512-4Qy2aK0LwH4eQiSvQWyKuC7JXE13bIopEQesWE0c/P3uuNRnZCQanI0vsrMLmUQJLAto+A+/8+sve2hd+BQuOQ==", + "license": "MIT", + "dependencies": { + "@next/env": "14.2.7", + "@swc/helpers": "0.5.5", + "busboy": "1.6.0", + "caniuse-lite": "^1.0.30001579", + "graceful-fs": "^4.2.11", + "postcss": "8.4.31", + "styled-jsx": "5.1.1" + }, + "bin": { + "next": "dist/bin/next" + }, + "engines": { + "node": ">=18.17.0" + }, + "optionalDependencies": { + "@next/swc-darwin-arm64": "14.2.7", + "@next/swc-darwin-x64": "14.2.7", + "@next/swc-linux-arm64-gnu": "14.2.7", + "@next/swc-linux-arm64-musl": "14.2.7", + "@next/swc-linux-x64-gnu": "14.2.7", + "@next/swc-linux-x64-musl": "14.2.7", + "@next/swc-win32-arm64-msvc": "14.2.7", + "@next/swc-win32-ia32-msvc": "14.2.7", + "@next/swc-win32-x64-msvc": "14.2.7" + }, + "peerDependencies": { + "@opentelemetry/api": "^1.1.0", + "@playwright/test": "^1.41.2", + "react": "^18.2.0", + "react-dom": "^18.2.0", + "sass": "^1.3.0" + }, + "peerDependenciesMeta": { + "@opentelemetry/api": { + "optional": true + }, + "@playwright/test": { + "optional": true + }, + "sass": { + "optional": true + } + } + }, + "node_modules/next-mdx-remote": { + "version": "4.4.1", + "resolved": "https://registry.npmjs.org/next-mdx-remote/-/next-mdx-remote-4.4.1.tgz", + "integrity": "sha512-1BvyXaIou6xy3XoNF4yaMZUCb6vD2GTAa5ciOa6WoO+gAUTYsb1K4rI/HSC2ogAWLrb/7VSV52skz07vOzmqIQ==", + "license": "MPL-2.0", + "dependencies": { + "@mdx-js/mdx": "^2.2.1", + "@mdx-js/react": "^2.2.1", + "vfile": "^5.3.0", + "vfile-matter": "^3.0.1" + }, + "engines": { + "node": ">=14", + "npm": ">=7" + }, + "peerDependencies": { + "react": ">=16.x <=18.x", + "react-dom": ">=16.x <=18.x" + } + }, + "node_modules/next-mdx-remote/node_modules/vfile": { + "version": "5.3.7", + "resolved": "https://registry.npmjs.org/vfile/-/vfile-5.3.7.tgz", + "integrity": "sha512-r7qlzkgErKjobAmyNIkkSpizsFPYiUPuJb5pNW1RB4JcYVZhs4lIbVqk8XPk033CV/1z8ss5pkax8SuhGpcG8g==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "is-buffer": "^2.0.0", + "unist-util-stringify-position": "^3.0.0", + "vfile-message": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/next-mdx-remote/node_modules/vfile-message": { + "version": "3.1.4", + "resolved": "https://registry.npmjs.org/vfile-message/-/vfile-message-3.1.4.tgz", + "integrity": "sha512-fa0Z6P8HUrQN4BZaX05SIVXic+7kE3b05PWAtPuYP9QLHsLKYR7/AlLW3NtOrpXRLeawpDLMsVkmk5DG0NXgWw==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "unist-util-stringify-position": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/next-seo": { + "version": "6.5.0", + "resolved": "https://registry.npmjs.org/next-seo/-/next-seo-6.5.0.tgz", + "integrity": "sha512-MfzUeWTN/x/rsKp/1n0213eojO97lIl0unxqbeCY+6pAucViHDA8GSLRRcXpgjsSmBxfCFdfpu7LXbt4ANQoNQ==", + "license": "MIT", + "peerDependencies": { + "next": "^8.1.1-canary.54 || >=9.0.0", + "react": ">=16.0.0", + "react-dom": ">=16.0.0" + } + }, + "node_modules/next-themes": { + "version": "0.2.1", + "resolved": "https://registry.npmjs.org/next-themes/-/next-themes-0.2.1.tgz", + "integrity": "sha512-B+AKNfYNIzh0vqQQKqQItTS8evEouKD7H5Hj3kmuPERwddR2TxvDSFZuTj6T7Jfn1oyeUyJMydPl1Bkxkh0W7A==", + "license": "MIT", + "peerDependencies": { + "next": "*", + "react": "*", + "react-dom": "*" + } + }, + "node_modules/next/node_modules/postcss": { + "version": "8.4.31", + "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.4.31.tgz", + "integrity": "sha512-PS08Iboia9mts/2ygV3eLpY5ghnUcfLV/EXTOW1E2qYxJKGGBUtNjN76FYHnMs36RmARn41bC0AZmn+rR0OVpQ==", + "funding": [ + { + "type": "opencollective", + "url": "https://opencollective.com/postcss/" + }, + { + "type": "tidelift", + "url": "https://tidelift.com/funding/github/npm/postcss" + }, + { + "type": "github", + "url": "https://github.com/sponsors/ai" + } + ], + "license": "MIT", + "dependencies": { + "nanoid": "^3.3.6", + "picocolors": "^1.0.0", + "source-map-js": "^1.0.2" + }, + "engines": { + "node": "^10 || ^12 || >=14" + } + }, + "node_modules/nextra": { + "version": "2.13.4", + "resolved": "https://registry.npmjs.org/nextra/-/nextra-2.13.4.tgz", + "integrity": "sha512-7of2rSBxuUa3+lbMmZwG9cqgftcoNOVQLTT6Rxf3EhBR9t1EI7b43dted8YoqSNaigdE3j1CoyNkX8N/ZzlEpw==", + "license": "MIT", + "dependencies": { + "@headlessui/react": "^1.7.17", + "@mdx-js/mdx": "^2.3.0", + "@mdx-js/react": "^2.3.0", + "@napi-rs/simple-git": "^0.1.9", + "@theguild/remark-mermaid": "^0.0.5", + "@theguild/remark-npm2yarn": "^0.2.0", + "clsx": "^2.0.0", + "github-slugger": "^2.0.0", + "graceful-fs": "^4.2.11", + "gray-matter": "^4.0.3", + "katex": "^0.16.9", + "lodash.get": "^4.4.2", + "next-mdx-remote": "^4.2.1", + "p-limit": "^3.1.0", + "rehype-katex": "^7.0.0", + "rehype-pretty-code": "0.9.11", + "rehype-raw": "^7.0.0", + "remark-gfm": "^3.0.1", + "remark-math": "^5.1.1", + "remark-reading-time": "^2.0.1", + "shiki": "^0.14.3", + "slash": "^3.0.0", + "title": "^3.5.3", + "unist-util-remove": "^4.0.0", + "unist-util-visit": "^5.0.0", + "zod": "^3.22.3" + }, + "engines": { + "node": ">=16" + }, + "peerDependencies": { + "next": ">=9.5.3", + "react": ">=16.13.1", + "react-dom": ">=16.13.1" + } + }, + "node_modules/nextra-theme-docs": { + "version": "2.13.4", + "resolved": "https://registry.npmjs.org/nextra-theme-docs/-/nextra-theme-docs-2.13.4.tgz", + "integrity": "sha512-2XOoMfwBCTYBt8ds4ZHftt9Wyf2XsykiNo02eir/XEYB+sGeUoE77kzqfidjEOKCSzOHYbK9BDMcg2+B/2vYRw==", + "license": "MIT", + "dependencies": { + "@headlessui/react": "^1.7.17", + "@popperjs/core": "^2.11.8", + "clsx": "^2.0.0", + "escape-string-regexp": "^5.0.0", + "flexsearch": "^0.7.31", + "focus-visible": "^5.2.0", + "git-url-parse": "^13.1.0", + "intersection-observer": "^0.12.2", + "match-sorter": "^6.3.1", + "next-seo": "^6.0.0", + "next-themes": "^0.2.1", + "scroll-into-view-if-needed": "^3.1.0", + "zod": "^3.22.3" + }, + "peerDependencies": { + "next": ">=9.5.3", + "nextra": "2.13.4", + "react": ">=16.13.1", + "react-dom": ">=16.13.1" + } + }, + "node_modules/nextra-theme-docs/node_modules/escape-string-regexp": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-5.0.0.tgz", + "integrity": "sha512-/veY75JbMK4j1yjvuUxuVsiS/hr/4iHs9FTT6cgTexxdE0Ly/glccBAkloH/DofkjRbZU3bnoj38mOmhkZ0lHw==", + "license": "MIT", + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/nextra/node_modules/@types/hast": { + "version": "3.0.4", + "resolved": "https://registry.npmjs.org/@types/hast/-/hast-3.0.4.tgz", + "integrity": "sha512-WPs+bbQw5aCj+x6laNGWLH3wviHtoCv/P3+otBhbOhJgG8qtpdAMlTCxLtsTWA7LH1Oh/bFCHsBn0TPS5m30EQ==", + "license": "MIT", + "dependencies": { + "@types/unist": "*" + } + }, + "node_modules/nextra/node_modules/@types/mdast": { + "version": "4.0.4", + "resolved": "https://registry.npmjs.org/@types/mdast/-/mdast-4.0.4.tgz", + "integrity": "sha512-kGaNbPh1k7AFzgpud/gMdvIm5xuECykRR+JnWKQno9TAXVa6WIVCGTPvYGekIDL4uwCZQSYbUxNBSb1aUo79oA==", + "license": "MIT", + "dependencies": { + "@types/unist": "*" + } + }, + "node_modules/nextra/node_modules/@types/unist": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/@types/unist/-/unist-3.0.3.tgz", + "integrity": "sha512-ko/gIFJRv177XgZsZcBwnqJN5x/Gien8qNOn0D5bQU/zAzVf9Zt3BlcUiLqhV9y4ARk0GbT3tnUiPNgnTXzc/Q==", + "license": "MIT" + }, + "node_modules/nextra/node_modules/hast-util-raw": { + "version": "9.0.4", + "resolved": "https://registry.npmjs.org/hast-util-raw/-/hast-util-raw-9.0.4.tgz", + "integrity": "sha512-LHE65TD2YiNsHD3YuXcKPHXPLuYh/gjp12mOfU8jxSrm1f/yJpsb0F/KKljS6U9LJoP0Ux+tCe8iJ2AsPzTdgA==", + "license": "MIT", + "dependencies": { + "@types/hast": "^3.0.0", + "@types/unist": "^3.0.0", + "@ungap/structured-clone": "^1.0.0", + "hast-util-from-parse5": "^8.0.0", + "hast-util-to-parse5": "^8.0.0", + "html-void-elements": "^3.0.0", + "mdast-util-to-hast": "^13.0.0", + "parse5": "^7.0.0", + "unist-util-position": "^5.0.0", + "unist-util-visit": "^5.0.0", + "vfile": "^6.0.0", + "web-namespaces": "^2.0.0", + "zwitch": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/nextra/node_modules/hast-util-to-parse5": { + "version": "8.0.0", + "resolved": "https://registry.npmjs.org/hast-util-to-parse5/-/hast-util-to-parse5-8.0.0.tgz", + "integrity": "sha512-3KKrV5ZVI8if87DVSi1vDeByYrkGzg4mEfeu4alwgmmIeARiBLKCZS2uw5Gb6nU9x9Yufyj3iudm6i7nl52PFw==", + "license": "MIT", + "dependencies": { + "@types/hast": "^3.0.0", + "comma-separated-tokens": "^2.0.0", + "devlop": "^1.0.0", + "property-information": "^6.0.0", + "space-separated-tokens": "^2.0.0", + "web-namespaces": "^2.0.0", + "zwitch": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/nextra/node_modules/html-void-elements": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/html-void-elements/-/html-void-elements-3.0.0.tgz", + "integrity": "sha512-bEqo66MRXsUGxWHV5IP0PUiAWwoEjba4VCzg0LjFJBpchPaTfyfCKTG6bc5F8ucKec3q5y6qOdGyYTSBEvhCrg==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/nextra/node_modules/mdast-util-to-hast": { + "version": "13.2.0", + "resolved": "https://registry.npmjs.org/mdast-util-to-hast/-/mdast-util-to-hast-13.2.0.tgz", + "integrity": "sha512-QGYKEuUsYT9ykKBCMOEDLsU5JRObWQusAolFMeko/tYPufNkRffBAQjIE+99jbA87xv6FgmjLtwjh9wBWajwAA==", + "license": "MIT", + "dependencies": { + "@types/hast": "^3.0.0", + "@types/mdast": "^4.0.0", + "@ungap/structured-clone": "^1.0.0", + "devlop": "^1.0.0", + "micromark-util-sanitize-uri": "^2.0.0", + "trim-lines": "^3.0.0", + "unist-util-position": "^5.0.0", + "unist-util-visit": "^5.0.0", + "vfile": "^6.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/nextra/node_modules/micromark-util-character": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/micromark-util-character/-/micromark-util-character-2.1.0.tgz", + "integrity": "sha512-KvOVV+X1yLBfs9dCBSopq/+G1PcgT3lAK07mC4BzXi5E7ahzMAF8oIupDDJ6mievI6F+lAATkbQQlQixJfT3aQ==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "micromark-util-symbol": "^2.0.0", + "micromark-util-types": "^2.0.0" + } + }, + "node_modules/nextra/node_modules/micromark-util-encode": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/micromark-util-encode/-/micromark-util-encode-2.0.0.tgz", + "integrity": "sha512-pS+ROfCXAGLWCOc8egcBvT0kf27GoWMqtdarNfDcjb6YLuV5cM3ioG45Ys2qOVqeqSbjaKg72vU+Wby3eddPsA==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT" + }, + "node_modules/nextra/node_modules/micromark-util-sanitize-uri": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/micromark-util-sanitize-uri/-/micromark-util-sanitize-uri-2.0.0.tgz", + "integrity": "sha512-WhYv5UEcZrbAtlsnPuChHUAsu/iBPOVaEVsntLBIdpibO0ddy8OzavZz3iL2xVvBZOpolujSliP65Kq0/7KIYw==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "micromark-util-character": "^2.0.0", + "micromark-util-encode": "^2.0.0", + "micromark-util-symbol": "^2.0.0" + } + }, + "node_modules/nextra/node_modules/micromark-util-symbol": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/micromark-util-symbol/-/micromark-util-symbol-2.0.0.tgz", + "integrity": "sha512-8JZt9ElZ5kyTnO94muPxIGS8oyElRJaiJO8EzV6ZSyGQ1Is8xwl4Q45qU5UOg+bGH4AikWziz0iN4sFLWs8PGw==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT" + }, + "node_modules/nextra/node_modules/micromark-util-types": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/micromark-util-types/-/micromark-util-types-2.0.0.tgz", + "integrity": "sha512-oNh6S2WMHWRZrmutsRmDDfkzKtxF+bc2VxLC9dvtrDIRFln627VsFP6fLMgTryGDljgLPjkrzQSDcPrjPyDJ5w==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT" + }, + "node_modules/nextra/node_modules/rehype-raw": { + "version": "7.0.0", + "resolved": "https://registry.npmjs.org/rehype-raw/-/rehype-raw-7.0.0.tgz", + "integrity": "sha512-/aE8hCfKlQeA8LmyeyQvQF3eBiLRGNlfBJEvWH7ivp9sBqs7TNqBL5X3v157rM4IFETqDnIOO+z5M/biZbo9Ww==", + "license": "MIT", + "dependencies": { + "@types/hast": "^3.0.0", + "hast-util-raw": "^9.0.0", + "vfile": "^6.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/nextra/node_modules/unist-util-is": { + "version": "6.0.0", + "resolved": "https://registry.npmjs.org/unist-util-is/-/unist-util-is-6.0.0.tgz", + "integrity": "sha512-2qCTHimwdxLfz+YzdGfkqNlH0tLi9xjTnHddPmJwtIG9MGsdbutfTc4P+haPD7l7Cjxf/WZj+we5qfVPvvxfYw==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/nextra/node_modules/unist-util-position": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/unist-util-position/-/unist-util-position-5.0.0.tgz", + "integrity": "sha512-fucsC7HjXvkB5R3kTCO7kUjRdrS0BJt3M/FPxmHMBOm8JQi2BsHAHFsy27E0EolP8rp0NzXsJ+jNPyDWvOJZPA==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/nextra/node_modules/unist-util-visit": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/unist-util-visit/-/unist-util-visit-5.0.0.tgz", + "integrity": "sha512-MR04uvD+07cwl/yhVuVWAtw+3GOR/knlL55Nd/wAdblk27GCVt3lqpTivy/tkJcZoNPzTwS1Y+KMojlLDhoTzg==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0", + "unist-util-is": "^6.0.0", + "unist-util-visit-parents": "^6.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/nextra/node_modules/vfile": { + "version": "6.0.3", + "resolved": "https://registry.npmjs.org/vfile/-/vfile-6.0.3.tgz", + "integrity": "sha512-KzIbH/9tXat2u30jf+smMwFCsno4wHVdNmzFyL+T/L3UGqqk6JKfVqOFOZEpZSHADH1k40ab6NUIXZq422ov3Q==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0", + "vfile-message": "^4.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/node-emoji": { + "version": "1.11.0", + "resolved": "https://registry.npmjs.org/node-emoji/-/node-emoji-1.11.0.tgz", + "integrity": "sha512-wo2DpQkQp7Sjm2A0cq+sN7EHKO6Sl0ctXeBdFZrL9T9+UywORbufTcTZxom8YqpLQt/FqNMUkOpkZrJVYSKD3A==", + "license": "MIT", + "dependencies": { + "lodash": "^4.17.21" + } + }, + "node_modules/node-releases": { + "version": "2.0.18", + "resolved": "https://registry.npmjs.org/node-releases/-/node-releases-2.0.18.tgz", + "integrity": "sha512-d9VeXT4SJ7ZeOqGX6R5EM022wpL+eWPooLI+5UpWn2jCT1aosUQEhQP214x33Wkwx3JQMvIm+tIoVOdodFS40g==", + "license": "MIT" + }, + "node_modules/non-layered-tidy-tree-layout": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/non-layered-tidy-tree-layout/-/non-layered-tidy-tree-layout-2.0.2.tgz", + "integrity": "sha512-gkXMxRzUH+PB0ax9dUN0yYF0S25BqeAYqhgMaLUFmpXLEk7Fcu8f4emJuOAY0V8kjDICxROIKsTAKsV/v355xw==", + "license": "MIT" + }, + "node_modules/normalize-path": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/normalize-path/-/normalize-path-3.0.0.tgz", + "integrity": "sha512-6eZs5Ls3WtCisHWp9S2GUy8dqkpGi4BVSz3GaqiE6ezub0512ESztXUwUB6C6IKbQkY2Pnb/mD4WYojCRwcwLA==", + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/normalize-range": { + "version": "0.1.2", + "resolved": "https://registry.npmjs.org/normalize-range/-/normalize-range-0.1.2.tgz", + "integrity": "sha512-bdok/XvKII3nUpklnV6P2hxtMNrCboOjAcyBuQnWEhO665FwrSNRxU+AqpsyvO6LgGYPspN+lu5CLtw4jPRKNA==", + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/npm-run-path": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-2.0.2.tgz", + "integrity": "sha512-lJxZYlT4DW/bRUtFh1MQIWqmLwQfAxnqWG4HhEdjMlkrJYnJn0Jrr2u3mgxqaWsdiBc76TYkTG/mhrnYTuzfHw==", + "license": "MIT", + "dependencies": { + "path-key": "^2.0.0" + }, + "engines": { + "node": ">=4" + } + }, + "node_modules/npm-run-path/node_modules/path-key": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/path-key/-/path-key-2.0.1.tgz", + "integrity": "sha512-fEHGKCSmUSDPv4uoj8AlD+joPlq3peND+HRYyxFz4KPw4z926S/b8rIuFs2FYJg3BwsxJf6A9/3eIdLaYC+9Dw==", + "license": "MIT", + "engines": { + "node": ">=4" + } + }, + "node_modules/npm-to-yarn": { + "version": "2.2.1", + "resolved": "https://registry.npmjs.org/npm-to-yarn/-/npm-to-yarn-2.2.1.tgz", + "integrity": "sha512-O/j/ROyX0KGLG7O6Ieut/seQ0oiTpHF2tXAcFbpdTLQFiaNtkyTXXocM1fwpaa60dg1qpWj0nHlbNhx6qwuENQ==", + "license": "MIT", + "engines": { + "node": "^12.22.0 || ^14.17.0 || >=16.0.0" + }, + "funding": { + "url": "https://github.com/nebrelbug/npm-to-yarn?sponsor=1" + } + }, + "node_modules/numeral": { + "version": "2.0.6", + "resolved": "https://registry.npmjs.org/numeral/-/numeral-2.0.6.tgz", + "integrity": "sha512-qaKRmtYPZ5qdw4jWJD6bxEf1FJEqllJrwxCLIm0sQU/A7v2/czigzOb+C2uSiFsa9lBUzeH7M1oK+Q+OLxL3kA==", + "license": "MIT", + "engines": { + "node": "*" + } + }, + "node_modules/object-assign": { + "version": "4.1.1", + "resolved": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz", + "integrity": "sha512-rJgTQnkUnH1sFw8yT6VSU3zD3sWmu6sZhIseY8VX+GRu3P6F7Fu+JNDoXfklElbLJSnc3FUQHVe4cU5hj+BcUg==", + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/object-hash": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/object-hash/-/object-hash-3.0.0.tgz", + "integrity": "sha512-RSn9F68PjH9HqtltsSnqYC1XXoWe9Bju5+213R98cNGttag9q9yAOTzdbsqvIa7aNm5WffBZFpWYr2aWrklWAw==", + "license": "MIT", + "engines": { + "node": ">= 6" + } + }, + "node_modules/p-finally": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/p-finally/-/p-finally-1.0.0.tgz", + "integrity": "sha512-LICb2p9CB7FS+0eR1oqWnHhp0FljGLZCWBE9aix0Uye9W8LTQPwMTYVGWQWIw9RdQiDg4+epXQODwIYJtSJaow==", + "license": "MIT", + "engines": { + "node": ">=4" + } + }, + "node_modules/p-limit": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/p-limit/-/p-limit-3.1.0.tgz", + "integrity": "sha512-TYOanM3wGwNGsZN2cVTYPArw454xnXj5qmWF1bEoAc4+cU/ol7GVh7odevjp1FNHduHc3KZMcFduxU5Xc6uJRQ==", + "license": "MIT", + "dependencies": { + "yocto-queue": "^0.1.0" + }, + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/package-json-from-dist": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/package-json-from-dist/-/package-json-from-dist-1.0.0.tgz", + "integrity": "sha512-dATvCeZN/8wQsGywez1mzHtTlP22H8OEfPrVMLNr4/eGa+ijtLn/6M5f0dY8UKNrC2O9UCU6SSoG3qRKnt7STw==", + "license": "BlueOak-1.0.0" + }, + "node_modules/papaparse": { + "version": "5.4.1", + "resolved": "https://registry.npmjs.org/papaparse/-/papaparse-5.4.1.tgz", + "integrity": "sha512-HipMsgJkZu8br23pW15uvo6sib6wne/4woLZPlFf3rpDyMe9ywEXUsuD7+6K9PRkJlVT51j/sCOYDKGGS3ZJrw==", + "license": "MIT" + }, + "node_modules/parent-module": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/parent-module/-/parent-module-1.0.1.tgz", + "integrity": "sha512-GQ2EWRpQV8/o+Aw8YqtfZZPfNRWZYkbidE9k5rpl/hC3vtHHBfGm2Ifi6qWV+coDGkrUKZAxE3Lot5kcsRlh+g==", + "license": "MIT", + "dependencies": { + "callsites": "^3.0.0" + }, + "engines": { + "node": ">=6" + } + }, + "node_modules/parse-entities": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/parse-entities/-/parse-entities-2.0.0.tgz", + "integrity": "sha512-kkywGpCcRYhqQIchaWqZ875wzpS/bMKhz5HnN3p7wveJTkTtyAB/AlnS0f8DFSqYW1T82t6yEAkEcB+A1I3MbQ==", + "license": "MIT", + "dependencies": { + "character-entities": "^1.0.0", + "character-entities-legacy": "^1.0.0", + "character-reference-invalid": "^1.0.0", + "is-alphanumerical": "^1.0.0", + "is-decimal": "^1.0.0", + "is-hexadecimal": "^1.0.0" + }, + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/parse-entities/node_modules/character-entities": { + "version": "1.2.4", + "resolved": "https://registry.npmjs.org/character-entities/-/character-entities-1.2.4.tgz", + "integrity": "sha512-iBMyeEHxfVnIakwOuDXpVkc54HijNgCyQB2w0VfGQThle6NXn50zU6V/u+LDhxHcDUPojn6Kpga3PTAD8W1bQw==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/parse-json": { + "version": "5.2.0", + "resolved": "https://registry.npmjs.org/parse-json/-/parse-json-5.2.0.tgz", + "integrity": "sha512-ayCKvm/phCGxOkYRSCM82iDwct8/EonSEgCSxWxD7ve6jHggsFl4fZVQBPRNgQoKiuV/odhFrGzQXZwbifC8Rg==", + "license": "MIT", + "dependencies": { + "@babel/code-frame": "^7.0.0", + "error-ex": "^1.3.1", + "json-parse-even-better-errors": "^2.3.0", + "lines-and-columns": "^1.1.6" + }, + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/parse-numeric-range": { + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/parse-numeric-range/-/parse-numeric-range-1.3.0.tgz", + "integrity": "sha512-twN+njEipszzlMJd4ONUYgSfZPDxgHhT9Ahed5uTigpQn90FggW4SA/AIPq/6a149fTbE9qBEcSwE3FAEp6wQQ==", + "license": "ISC" + }, + "node_modules/parse-path": { + "version": "7.0.0", + "resolved": "https://registry.npmjs.org/parse-path/-/parse-path-7.0.0.tgz", + "integrity": "sha512-Euf9GG8WT9CdqwuWJGdf3RkUcTBArppHABkO7Lm8IzRQp0e2r/kkFnmhu4TSK30Wcu5rVAZLmfPKSBBi9tWFog==", + "license": "MIT", + "dependencies": { + "protocols": "^2.0.0" + } + }, + "node_modules/parse-url": { + "version": "8.1.0", + "resolved": "https://registry.npmjs.org/parse-url/-/parse-url-8.1.0.tgz", + "integrity": "sha512-xDvOoLU5XRrcOZvnI6b8zA6n9O9ejNk/GExuz1yBuWUGn9KA97GI6HTs6u02wKara1CeVmZhH+0TZFdWScR89w==", + "license": "MIT", + "dependencies": { + "parse-path": "^7.0.0" + } + }, + "node_modules/parse5": { + "version": "7.1.2", + "resolved": "https://registry.npmjs.org/parse5/-/parse5-7.1.2.tgz", + "integrity": "sha512-Czj1WaSVpaoj0wbhMzLmWD69anp2WH7FXMB9n1Sy8/ZFF9jolSQVMu1Ij5WIyGmcBmhk7EOndpO4mIpihVqAXw==", + "license": "MIT", + "dependencies": { + "entities": "^4.4.0" + }, + "funding": { + "url": "https://github.com/inikulin/parse5?sponsor=1" + } + }, + "node_modules/path-key": { + "version": "3.1.1", + "resolved": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz", + "integrity": "sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q==", + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/path-parse": { + "version": "1.0.7", + "resolved": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.7.tgz", + "integrity": "sha512-LDJzPVEEEPR+y48z93A0Ed0yXb8pAByGWo/k5YYdYgpY2/2EsOsksJrq7lOHxryrVOn1ejG6oAp8ahvOIQD8sw==", + "license": "MIT" + }, + "node_modules/path-scurry": { + "version": "1.11.1", + "resolved": "https://registry.npmjs.org/path-scurry/-/path-scurry-1.11.1.tgz", + "integrity": "sha512-Xa4Nw17FS9ApQFJ9umLiJS4orGjm7ZzwUrwamcGQuHSzDyth9boKDaycYdDcZDuqYATXw4HFXgaqWTctW/v1HA==", + "license": "BlueOak-1.0.0", + "dependencies": { + "lru-cache": "^10.2.0", + "minipass": "^5.0.0 || ^6.0.2 || ^7.0.0" + }, + "engines": { + "node": ">=16 || 14 >=14.18" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/path-type": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/path-type/-/path-type-4.0.0.tgz", + "integrity": "sha512-gDKb8aZMDeD/tZWs9P6+q0J9Mwkdl6xMV8TjnGP3qJVJ06bdMgkbBlLU8IdfOsIsFz2BW1rNVT3XuNEl8zPAvw==", + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/periscopic": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/periscopic/-/periscopic-3.1.0.tgz", + "integrity": "sha512-vKiQ8RRtkl9P+r/+oefh25C3fhybptkHKCZSPlcXiJux2tJF55GnEj3BVn4A5gKfq9NWWXXrxkHBwVPUfH0opw==", + "license": "MIT", + "dependencies": { + "@types/estree": "^1.0.0", + "estree-walker": "^3.0.0", + "is-reference": "^3.0.0" + } + }, + "node_modules/picocolors": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/picocolors/-/picocolors-1.0.1.tgz", + "integrity": "sha512-anP1Z8qwhkbmu7MFP5iTt+wQKXgwzf7zTyGlcdzabySa9vd0Xt392U0rVmz9poOaBj0uHJKyyo9/upk0HrEQew==", + "license": "ISC" + }, + "node_modules/picomatch": { + "version": "2.3.1", + "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.1.tgz", + "integrity": "sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==", + "license": "MIT", + "engines": { + "node": ">=8.6" + }, + "funding": { + "url": "https://github.com/sponsors/jonschlinkert" + } + }, + "node_modules/pify": { + "version": "2.3.0", + "resolved": "https://registry.npmjs.org/pify/-/pify-2.3.0.tgz", + "integrity": "sha512-udgsAY+fTnvv7kI7aaxbqwWNb0AHiB0qBO89PZKPkoTmGOgdbrHDKD+0B2X4uTfJ/FT1R09r9gTsjUjNJotuog==", + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/pirates": { + "version": "4.0.6", + "resolved": "https://registry.npmjs.org/pirates/-/pirates-4.0.6.tgz", + "integrity": "sha512-saLsH7WeYYPiD25LDuLRRY/i+6HaPYr6G1OUlN39otzkSTxKnubR9RTxS3/Kk50s1g2JTgFwWQDQyplC5/SHZg==", + "license": "MIT", + "engines": { + "node": ">= 6" + } + }, + "node_modules/postcss": { + "version": "8.4.41", + "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.4.41.tgz", + "integrity": "sha512-TesUflQ0WKZqAvg52PWL6kHgLKP6xB6heTOdoYM0Wt2UHyxNa4K25EZZMgKns3BH1RLVbZCREPpLY0rhnNoHVQ==", + "funding": [ + { + "type": "opencollective", + "url": "https://opencollective.com/postcss/" + }, + { + "type": "tidelift", + "url": "https://tidelift.com/funding/github/npm/postcss" + }, + { + "type": "github", + "url": "https://github.com/sponsors/ai" + } + ], + "license": "MIT", + "dependencies": { + "nanoid": "^3.3.7", + "picocolors": "^1.0.1", + "source-map-js": "^1.2.0" + }, + "engines": { + "node": "^10 || ^12 || >=14" + } + }, + "node_modules/postcss-import": { + "version": "15.1.0", + "resolved": "https://registry.npmjs.org/postcss-import/-/postcss-import-15.1.0.tgz", + "integrity": "sha512-hpr+J05B2FVYUAXHeK1YyI267J/dDDhMU6B6civm8hSY1jYJnBXxzKDKDswzJmtLHryrjhnDjqqp/49t8FALew==", + "license": "MIT", + "dependencies": { + "postcss-value-parser": "^4.0.0", + "read-cache": "^1.0.0", + "resolve": "^1.1.7" + }, + "engines": { + "node": ">=14.0.0" + }, + "peerDependencies": { + "postcss": "^8.0.0" + } + }, + "node_modules/postcss-js": { + "version": "4.0.1", + "resolved": "https://registry.npmjs.org/postcss-js/-/postcss-js-4.0.1.tgz", + "integrity": "sha512-dDLF8pEO191hJMtlHFPRa8xsizHaM82MLfNkUHdUtVEV3tgTp5oj+8qbEqYM57SLfc74KSbw//4SeJma2LRVIw==", + "license": "MIT", + "dependencies": { + "camelcase-css": "^2.0.1" + }, + "engines": { + "node": "^12 || ^14 || >= 16" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/postcss/" + }, + "peerDependencies": { + "postcss": "^8.4.21" + } + }, + "node_modules/postcss-load-config": { + "version": "4.0.2", + "resolved": "https://registry.npmjs.org/postcss-load-config/-/postcss-load-config-4.0.2.tgz", + "integrity": "sha512-bSVhyJGL00wMVoPUzAVAnbEoWyqRxkjv64tUl427SKnPrENtq6hJwUojroMz2VB+Q1edmi4IfrAPpami5VVgMQ==", + "funding": [ + { + "type": "opencollective", + "url": "https://opencollective.com/postcss/" + }, + { + "type": "github", + "url": "https://github.com/sponsors/ai" + } + ], + "license": "MIT", + "dependencies": { + "lilconfig": "^3.0.0", + "yaml": "^2.3.4" + }, + "engines": { + "node": ">= 14" + }, + "peerDependencies": { + "postcss": ">=8.0.9", + "ts-node": ">=9.0.0" + }, + "peerDependenciesMeta": { + "postcss": { + "optional": true + }, + "ts-node": { + "optional": true + } + } + }, + "node_modules/postcss-load-config/node_modules/lilconfig": { + "version": "3.1.2", + "resolved": "https://registry.npmjs.org/lilconfig/-/lilconfig-3.1.2.tgz", + "integrity": "sha512-eop+wDAvpItUys0FWkHIKeC9ybYrTGbU41U5K7+bttZZeohvnY7M9dZ5kB21GNWiFT2q1OoPTvncPCgSOVO5ow==", + "license": "MIT", + "engines": { + "node": ">=14" + }, + "funding": { + "url": "https://github.com/sponsors/antonk52" + } + }, + "node_modules/postcss-load-config/node_modules/yaml": { + "version": "2.5.0", + "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.5.0.tgz", + "integrity": "sha512-2wWLbGbYDiSqqIKoPjar3MPgB94ErzCtrNE1FdqGuaO0pi2JGjmE8aW8TDZwzU7vuxcGRdL/4gPQwQ7hD5AMSw==", + "license": "ISC", + "bin": { + "yaml": "bin.mjs" + }, + "engines": { + "node": ">= 14" + } + }, + "node_modules/postcss-nested": { + "version": "6.2.0", + "resolved": "https://registry.npmjs.org/postcss-nested/-/postcss-nested-6.2.0.tgz", + "integrity": "sha512-HQbt28KulC5AJzG+cZtj9kvKB93CFCdLvog1WFLf1D+xmMvPGlBstkpTEZfK5+AN9hfJocyBFCNiqyS48bpgzQ==", + "funding": [ + { + "type": "opencollective", + "url": "https://opencollective.com/postcss/" + }, + { + "type": "github", + "url": "https://github.com/sponsors/ai" + } + ], + "license": "MIT", + "dependencies": { + "postcss-selector-parser": "^6.1.1" + }, + "engines": { + "node": ">=12.0" + }, + "peerDependencies": { + "postcss": "^8.2.14" + } + }, + "node_modules/postcss-selector-parser": { + "version": "6.1.2", + "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-6.1.2.tgz", + "integrity": "sha512-Q8qQfPiZ+THO/3ZrOrO0cJJKfpYCagtMUkXbnEfmgUjwXg6z/WBeOyS9APBBPCTSiDV+s4SwQGu8yFsiMRIudg==", + "license": "MIT", + "dependencies": { + "cssesc": "^3.0.0", + "util-deprecate": "^1.0.2" + }, + "engines": { + "node": ">=4" + } + }, + "node_modules/postcss-value-parser": { + "version": "4.2.0", + "resolved": "https://registry.npmjs.org/postcss-value-parser/-/postcss-value-parser-4.2.0.tgz", + "integrity": "sha512-1NNCs6uurfkVbeXG4S8JFT9t19m45ICnif8zWLd5oPSZ50QnwMfK+H3jv408d4jw/7Bttv5axS5IiHoLaVNHeQ==", + "license": "MIT" + }, + "node_modules/prismjs": { + "version": "1.27.0", + "resolved": "https://registry.npmjs.org/prismjs/-/prismjs-1.27.0.tgz", + "integrity": "sha512-t13BGPUlFDR7wRB5kQDG4jjl7XeuH6jbJGt11JHPL96qwsEHNX2+68tFXqc1/k+/jALsbSWJKUOT/hcYAZ5LkA==", + "license": "MIT", + "engines": { + "node": ">=6" + } + }, + "node_modules/prop-types": { + "version": "15.8.1", + "resolved": "https://registry.npmjs.org/prop-types/-/prop-types-15.8.1.tgz", + "integrity": "sha512-oj87CgZICdulUohogVAR7AjlC0327U4el4L6eAvOqCeudMDVU0NThNaV+b9Df4dXgSP1gXMTnPdhfe/2qDH5cg==", + "license": "MIT", + "dependencies": { + "loose-envify": "^1.4.0", + "object-assign": "^4.1.1", + "react-is": "^16.13.1" + } + }, + "node_modules/prop-types/node_modules/react-is": { + "version": "16.13.1", + "resolved": "https://registry.npmjs.org/react-is/-/react-is-16.13.1.tgz", + "integrity": "sha512-24e6ynE2H+OKt4kqsOvNd8kBpV65zoxbA4BVsEOB3ARVWQki/DHzaUoC5KuON/BiccDaCCTZBuOcfZs70kR8bQ==", + "license": "MIT" + }, + "node_modules/property-information": { + "version": "6.5.0", + "resolved": "https://registry.npmjs.org/property-information/-/property-information-6.5.0.tgz", + "integrity": "sha512-PgTgs/BlvHxOu8QuEN7wi5A0OmXaBcHpmCSTehcs6Uuu9IkDIEo13Hy7n898RHfrQ49vKCoGeWZSaAK01nwVig==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/protocols": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/protocols/-/protocols-2.0.1.tgz", + "integrity": "sha512-/XJ368cyBJ7fzLMwLKv1e4vLxOju2MNAIokcr7meSaNcVbWz/CPcW22cP04mwxOErdA5mwjA8Q6w/cdAQxVn7Q==", + "license": "MIT" + }, + "node_modules/proxy-from-env": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-1.1.0.tgz", + "integrity": "sha512-D+zkORCbA9f1tdWRK0RaCR3GPv50cMxcrz4X8k5LTSUD1Dkw47mKJEZQNunItRTkWwgtaUSo1RVFRIG9ZXiFYg==", + "license": "MIT" + }, + "node_modules/pseudomap": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/pseudomap/-/pseudomap-1.0.2.tgz", + "integrity": "sha512-b/YwNhb8lk1Zz2+bXXpS/LK9OisiZZ1SNsSLxN1x2OXVEhW2Ckr/7mWE5vrC1ZTiJlD9g19jWszTmJsB+oEpFQ==", + "license": "ISC" + }, + "node_modules/querystringify": { + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/querystringify/-/querystringify-2.2.0.tgz", + "integrity": "sha512-FIqgj2EUvTa7R50u0rGsyTftzjYmv/a3hO345bZNrqabNqjtgiDMgmo4mkUjd+nzU5oF3dClKqFIPUKybUyqoQ==", + "license": "MIT" + }, + "node_modules/queue-microtask": { + "version": "1.2.3", + "resolved": "https://registry.npmjs.org/queue-microtask/-/queue-microtask-1.2.3.tgz", + "integrity": "sha512-NuaNSa6flKT5JaSYQzJok04JzTL1CA6aGhv5rfLW3PgqA+M2ChpZQnAC8h8i4ZFkBS8X5RqkDBHA7r4hej3K9A==", + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/feross" + }, + { + "type": "patreon", + "url": "https://www.patreon.com/feross" + }, + { + "type": "consulting", + "url": "https://feross.org/support" + } + ], + "license": "MIT" + }, + "node_modules/raf-schd": { + "version": "4.0.3", + "resolved": "https://registry.npmjs.org/raf-schd/-/raf-schd-4.0.3.tgz", + "integrity": "sha512-tQkJl2GRWh83ui2DiPTJz9wEiMN20syf+5oKfB03yYP7ioZcJwsIK8FjrtLwH1m7C7e+Tt2yYBlrOpdT+dyeIQ==", + "license": "MIT" + }, + "node_modules/react": { + "version": "18.3.1", + "resolved": "https://registry.npmjs.org/react/-/react-18.3.1.tgz", + "integrity": "sha512-wS+hAgJShR0KhEvPJArfuPVN1+Hz1t0Y6n5jLrGQbkb4urgPE/0Rve+1kMB1v/oWgHgm4WIcV+i7F2pTVj+2iQ==", + "license": "MIT", + "dependencies": { + "loose-envify": "^1.1.0" + }, + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/react-clientside-effect": { + "version": "1.2.6", + "resolved": "https://registry.npmjs.org/react-clientside-effect/-/react-clientside-effect-1.2.6.tgz", + "integrity": "sha512-XGGGRQAKY+q25Lz9a/4EPqom7WRjz3z9R2k4jhVKA/puQFH/5Nt27vFZYql4m4NVNdUvX8PS3O7r/Zzm7cjUlg==", + "license": "MIT", + "dependencies": { + "@babel/runtime": "^7.12.13" + }, + "peerDependencies": { + "react": "^15.3.0 || ^16.0.0 || ^17.0.0 || ^18.0.0" + } + }, + "node_modules/react-dom": { + "version": "18.3.1", + "resolved": "https://registry.npmjs.org/react-dom/-/react-dom-18.3.1.tgz", + "integrity": "sha512-5m4nQKp+rZRb09LNH59GM4BxTh9251/ylbKIbpe7TpGxfJ+9kv6BLkLBXIjjspbgbnIBNqlI23tRnTWT0snUIw==", + "license": "MIT", + "dependencies": { + "loose-envify": "^1.1.0", + "scheduler": "^0.23.2" + }, + "peerDependencies": { + "react": "^18.3.1" + } + }, + "node_modules/react-dropzone": { + "version": "11.7.1", + "resolved": "https://registry.npmjs.org/react-dropzone/-/react-dropzone-11.7.1.tgz", + "integrity": "sha512-zxCMwhfPy1olUEbw3FLNPLhAm/HnaYH5aELIEglRbqabizKAdHs0h+WuyOpmA+v1JXn0++fpQDdNfUagWt5hJQ==", + "license": "MIT", + "dependencies": { + "attr-accept": "^2.2.2", + "file-selector": "^0.4.0", + "prop-types": "^15.8.1" + }, + "engines": { + "node": ">= 10.13" + }, + "peerDependencies": { + "react": ">= 16.8" + } + }, + "node_modules/react-element-to-jsx-string": { + "version": "15.0.0", + "resolved": "https://registry.npmjs.org/react-element-to-jsx-string/-/react-element-to-jsx-string-15.0.0.tgz", + "integrity": "sha512-UDg4lXB6BzlobN60P8fHWVPX3Kyw8ORrTeBtClmIlGdkOOE+GYQSFvmEU5iLLpwp/6v42DINwNcwOhOLfQ//FQ==", + "license": "MIT", + "dependencies": { + "@base2/pretty-print-object": "1.0.1", + "is-plain-object": "5.0.0", + "react-is": "18.1.0" + }, + "peerDependencies": { + "react": "^0.14.8 || ^15.0.1 || ^16.0.0 || ^17.0.1 || ^18.0.0", + "react-dom": "^0.14.8 || ^15.0.1 || ^16.0.0 || ^17.0.1 || ^18.0.0" + } + }, + "node_modules/react-element-to-jsx-string/node_modules/react-is": { + "version": "18.1.0", + "resolved": "https://registry.npmjs.org/react-is/-/react-is-18.1.0.tgz", + "integrity": "sha512-Fl7FuabXsJnV5Q1qIOQwx/sagGF18kogb4gpfcG4gjLBWO0WDiiz1ko/ExayuxE7InyQkBLkxRFG5oxY6Uu3Kg==", + "license": "MIT" + }, + "node_modules/react-focus-lock": { + "version": "2.13.2", + "resolved": "https://registry.npmjs.org/react-focus-lock/-/react-focus-lock-2.13.2.tgz", + "integrity": "sha512-T/7bsofxYqnod2xadvuwjGKHOoL5GH7/EIPI5UyEvaU/c2CcphvGI371opFtuY/SYdbMsNiuF4HsHQ50nA/TKQ==", + "license": "MIT", + "dependencies": { + "@babel/runtime": "^7.0.0", + "focus-lock": "^1.3.5", + "prop-types": "^15.6.2", + "react-clientside-effect": "^1.2.6", + "use-callback-ref": "^1.3.2", + "use-sidecar": "^1.1.2" + }, + "peerDependencies": { + "@types/react": "^16.8.0 || ^17.0.0 || ^18.0.0", + "react": "^16.8.0 || ^17.0.0 || ^18.0.0" + }, + "peerDependenciesMeta": { + "@types/react": { + "optional": true + } + } + }, + "node_modules/react-focus-on": { + "version": "3.9.3", + "resolved": "https://registry.npmjs.org/react-focus-on/-/react-focus-on-3.9.3.tgz", + "integrity": "sha512-GSLz54TvP6OUlsvnlgHJu80nHOAO2ikRTtDt/aP8GZu3DPPAbwHFdliveBwUfPnyKLUKutFMCJUkH55vuo4uKQ==", + "license": "MIT", + "dependencies": { + "aria-hidden": "^1.2.2", + "react-focus-lock": "^2.11.3", + "react-remove-scroll": "^2.5.7", + "react-style-singleton": "^2.2.1", + "tslib": "^2.3.1", + "use-sidecar": "^1.1.2" + }, + "engines": { + "node": ">=8.5.0" + }, + "peerDependencies": { + "@types/react": "^16.8.0 || ^17.0.0 || ^18.0.0", + "react": "^16.8.0 || ^17.0.0 || ^18.0.0" + }, + "peerDependenciesMeta": { + "@types/react": { + "optional": true + } + } + }, + "node_modules/react-focus-on/node_modules/tslib": { + "version": "2.7.0", + "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.7.0.tgz", + "integrity": "sha512-gLXCKdN1/j47AiHiOkJN69hJmcbGTHI0ImLmbYLHykhgeN0jVGola9yVjFgzCUklsZQMW55o+dW7IXv3RCXDzA==", + "license": "0BSD" + }, + "node_modules/react-is": { + "version": "17.0.2", + "resolved": "https://registry.npmjs.org/react-is/-/react-is-17.0.2.tgz", + "integrity": "sha512-w2GsyukL62IJnlaff/nRegPQR94C/XXamvMWmSHRJ4y7Ts/4ocGRmTHvOs8PSE6pB3dWOrD/nueuU5sduBsQ4w==", + "license": "MIT" + }, + "node_modules/react-redux": { + "version": "8.1.3", + "resolved": "https://registry.npmjs.org/react-redux/-/react-redux-8.1.3.tgz", + "integrity": "sha512-n0ZrutD7DaX/j9VscF+uTALI3oUPa/pO4Z3soOBIjuRn/FzVu6aehhysxZCLi6y7duMf52WNZGMl7CtuK5EnRw==", + "license": "MIT", + "dependencies": { + "@babel/runtime": "^7.12.1", + "@types/hoist-non-react-statics": "^3.3.1", + "@types/use-sync-external-store": "^0.0.3", + "hoist-non-react-statics": "^3.3.2", + "react-is": "^18.0.0", + "use-sync-external-store": "^1.0.0" + }, + "peerDependencies": { + "@types/react": "^16.8 || ^17.0 || ^18.0", + "@types/react-dom": "^16.8 || ^17.0 || ^18.0", + "react": "^16.8 || ^17.0 || ^18.0", + "react-dom": "^16.8 || ^17.0 || ^18.0", + "react-native": ">=0.59", + "redux": "^4 || ^5.0.0-beta.0" + }, + "peerDependenciesMeta": { + "@types/react": { + "optional": true + }, + "@types/react-dom": { + "optional": true + }, + "react-dom": { + "optional": true + }, + "react-native": { + "optional": true + }, + "redux": { + "optional": true + } + } + }, + "node_modules/react-redux/node_modules/react-is": { + "version": "18.3.1", + "resolved": "https://registry.npmjs.org/react-is/-/react-is-18.3.1.tgz", + "integrity": "sha512-/LLMVyas0ljjAtoYiPqYiL8VWXzUUdThrmU5+n20DZv+a+ClRoevUzw5JxU+Ieh5/c87ytoTBV9G1FiKfNJdmg==", + "license": "MIT" + }, + "node_modules/react-remove-scroll": { + "version": "2.5.10", + "resolved": "https://registry.npmjs.org/react-remove-scroll/-/react-remove-scroll-2.5.10.tgz", + "integrity": "sha512-m3zvBRANPBw3qxVVjEIPEQinkcwlFZ4qyomuWVpNJdv4c6MvHfXV0C3L9Jx5rr3HeBHKNRX+1jreB5QloDIJjA==", + "license": "MIT", + "dependencies": { + "react-remove-scroll-bar": "^2.3.6", + "react-style-singleton": "^2.2.1", + "tslib": "^2.1.0", + "use-callback-ref": "^1.3.0", + "use-sidecar": "^1.1.2" + }, + "engines": { + "node": ">=10" + }, + "peerDependencies": { + "@types/react": "^16.8.0 || ^17.0.0 || ^18.0.0", + "react": "^16.8.0 || ^17.0.0 || ^18.0.0" + }, + "peerDependenciesMeta": { + "@types/react": { + "optional": true + } + } + }, + "node_modules/react-remove-scroll-bar": { + "version": "2.3.6", + "resolved": "https://registry.npmjs.org/react-remove-scroll-bar/-/react-remove-scroll-bar-2.3.6.tgz", + "integrity": "sha512-DtSYaao4mBmX+HDo5YWYdBWQwYIQQshUV/dVxFxK+KM26Wjwp1gZ6rv6OC3oujI6Bfu6Xyg3TwK533AQutsn/g==", + "license": "MIT", + "dependencies": { + "react-style-singleton": "^2.2.1", + "tslib": "^2.0.0" + }, + "engines": { + "node": ">=10" + }, + "peerDependencies": { + "@types/react": "^16.8.0 || ^17.0.0 || ^18.0.0", + "react": "^16.8.0 || ^17.0.0 || ^18.0.0" + }, + "peerDependenciesMeta": { + "@types/react": { + "optional": true + } + } + }, + "node_modules/react-remove-scroll-bar/node_modules/tslib": { + "version": "2.7.0", + "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.7.0.tgz", + "integrity": "sha512-gLXCKdN1/j47AiHiOkJN69hJmcbGTHI0ImLmbYLHykhgeN0jVGola9yVjFgzCUklsZQMW55o+dW7IXv3RCXDzA==", + "license": "0BSD" + }, + "node_modules/react-remove-scroll/node_modules/tslib": { + "version": "2.7.0", + "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.7.0.tgz", + "integrity": "sha512-gLXCKdN1/j47AiHiOkJN69hJmcbGTHI0ImLmbYLHykhgeN0jVGola9yVjFgzCUklsZQMW55o+dW7IXv3RCXDzA==", + "license": "0BSD" + }, + "node_modules/react-style-singleton": { + "version": "2.2.1", + "resolved": "https://registry.npmjs.org/react-style-singleton/-/react-style-singleton-2.2.1.tgz", + "integrity": "sha512-ZWj0fHEMyWkHzKYUr2Bs/4zU6XLmq9HsgBURm7g5pAVfyn49DgUiNgY2d4lXRlYSiCif9YBGpQleewkcqddc7g==", + "license": "MIT", + "dependencies": { + "get-nonce": "^1.0.0", + "invariant": "^2.2.4", + "tslib": "^2.0.0" + }, + "engines": { + "node": ">=10" + }, + "peerDependencies": { + "@types/react": "^16.8.0 || ^17.0.0 || ^18.0.0", + "react": "^16.8.0 || ^17.0.0 || ^18.0.0" + }, + "peerDependenciesMeta": { + "@types/react": { + "optional": true + } + } + }, + "node_modules/react-style-singleton/node_modules/tslib": { + "version": "2.7.0", + "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.7.0.tgz", + "integrity": "sha512-gLXCKdN1/j47AiHiOkJN69hJmcbGTHI0ImLmbYLHykhgeN0jVGola9yVjFgzCUklsZQMW55o+dW7IXv3RCXDzA==", + "license": "0BSD" + }, + "node_modules/react-virtualized-auto-sizer": { + "version": "1.0.24", + "resolved": "https://registry.npmjs.org/react-virtualized-auto-sizer/-/react-virtualized-auto-sizer-1.0.24.tgz", + "integrity": "sha512-3kCn7N9NEb3FlvJrSHWGQ4iVl+ydQObq2fHMn12i5wbtm74zHOPhz/i64OL3c1S1vi9i2GXtZqNqUJTQ+BnNfg==", + "license": "MIT", + "peerDependencies": { + "react": "^15.3.0 || ^16.0.0-alpha || ^17.0.0 || ^18.0.0", + "react-dom": "^15.3.0 || ^16.0.0-alpha || ^17.0.0 || ^18.0.0" + } + }, + "node_modules/react-window": { + "version": "1.8.10", + "resolved": "https://registry.npmjs.org/react-window/-/react-window-1.8.10.tgz", + "integrity": "sha512-Y0Cx+dnU6NLa5/EvoHukUD0BklJ8qITCtVEPY1C/nL8wwoZ0b5aEw8Ff1dOVHw7fCzMt55XfJDd8S8W8LCaUCg==", + "license": "MIT", + "dependencies": { + "@babel/runtime": "^7.0.0", + "memoize-one": ">=3.1.1 <6" + }, + "engines": { + "node": ">8.0.0" + }, + "peerDependencies": { + "react": "^15.0.0 || ^16.0.0 || ^17.0.0 || ^18.0.0", + "react-dom": "^15.0.0 || ^16.0.0 || ^17.0.0 || ^18.0.0" + } + }, + "node_modules/react-window/node_modules/memoize-one": { + "version": "5.2.1", + "resolved": "https://registry.npmjs.org/memoize-one/-/memoize-one-5.2.1.tgz", + "integrity": "sha512-zYiwtZUcYyXKo/np96AGZAckk+FWWsUdJ3cHGGmld7+AhvcWmQyGCYUh1hc4Q/pkOhb65dQR/pqCyK0cOaHz4Q==", + "license": "MIT" + }, + "node_modules/read-cache": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/read-cache/-/read-cache-1.0.0.tgz", + "integrity": "sha512-Owdv/Ft7IjOgm/i0xvNDZ1LrRANRfew4b2prF3OWMQLxLfu3bS8FVhCsrSCMK4lR56Y9ya+AThoTpDCTxCmpRA==", + "license": "MIT", + "dependencies": { + "pify": "^2.3.0" + } + }, + "node_modules/readdirp": { + "version": "3.6.0", + "resolved": "https://registry.npmjs.org/readdirp/-/readdirp-3.6.0.tgz", + "integrity": "sha512-hOS089on8RduqdbhvQ5Z37A0ESjsqz6qnRcffsMU3495FuTdqSm+7bhJ29JvIOsBDEEnan5DPu9t3To9VRlMzA==", + "license": "MIT", + "dependencies": { + "picomatch": "^2.2.1" + }, + "engines": { + "node": ">=8.10.0" + } + }, + "node_modules/reading-time": { + "version": "1.5.0", + "resolved": "https://registry.npmjs.org/reading-time/-/reading-time-1.5.0.tgz", + "integrity": "sha512-onYyVhBNr4CmAxFsKS7bz+uTLRakypIe4R+5A824vBSkQy/hB3fZepoVEf8OVAxzLvK+H/jm9TzpI3ETSm64Kg==", + "license": "MIT" + }, + "node_modules/redux": { + "version": "4.2.1", + "resolved": "https://registry.npmjs.org/redux/-/redux-4.2.1.tgz", + "integrity": "sha512-LAUYz4lc+Do8/g7aeRa8JkyDErK6ekstQaqWQrNRW//MY1TvCEpMtpTWvlQ+FPbWCx+Xixu/6SHt5N0HR+SB4w==", + "license": "MIT", + "dependencies": { + "@babel/runtime": "^7.9.2" + } + }, + "node_modules/refractor": { + "version": "3.6.0", + "resolved": "https://registry.npmjs.org/refractor/-/refractor-3.6.0.tgz", + "integrity": "sha512-MY9W41IOWxxk31o+YvFCNyNzdkc9M20NoZK5vq6jkv4I/uh2zkWcfudj0Q1fovjUQJrNewS9NMzeTtqPf+n5EA==", + "license": "MIT", + "dependencies": { + "hastscript": "^6.0.0", + "parse-entities": "^2.0.0", + "prismjs": "~1.27.0" + }, + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/regenerator-runtime": { + "version": "0.14.1", + "resolved": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.14.1.tgz", + "integrity": "sha512-dYnhHh0nJoMfnkZs6GmmhFknAGRrLznOu5nc9ML+EJxGvrx6H7teuevqVqCuPcPK//3eDrrjQhehXVx9cnkGdw==", + "license": "MIT" + }, + "node_modules/rehype-katex": { + "version": "7.0.1", + "resolved": "https://registry.npmjs.org/rehype-katex/-/rehype-katex-7.0.1.tgz", + "integrity": "sha512-OiM2wrZ/wuhKkigASodFoo8wimG3H12LWQaH8qSPVJn9apWKFSH3YOCtbKpBorTVw/eI7cuT21XBbvwEswbIOA==", + "license": "MIT", + "dependencies": { + "@types/hast": "^3.0.0", + "@types/katex": "^0.16.0", + "hast-util-from-html-isomorphic": "^2.0.0", + "hast-util-to-text": "^4.0.0", + "katex": "^0.16.0", + "unist-util-visit-parents": "^6.0.0", + "vfile": "^6.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/rehype-katex/node_modules/@types/hast": { + "version": "3.0.4", + "resolved": "https://registry.npmjs.org/@types/hast/-/hast-3.0.4.tgz", + "integrity": "sha512-WPs+bbQw5aCj+x6laNGWLH3wviHtoCv/P3+otBhbOhJgG8qtpdAMlTCxLtsTWA7LH1Oh/bFCHsBn0TPS5m30EQ==", + "license": "MIT", + "dependencies": { + "@types/unist": "*" + } + }, + "node_modules/rehype-katex/node_modules/@types/unist": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/@types/unist/-/unist-3.0.3.tgz", + "integrity": "sha512-ko/gIFJRv177XgZsZcBwnqJN5x/Gien8qNOn0D5bQU/zAzVf9Zt3BlcUiLqhV9y4ARk0GbT3tnUiPNgnTXzc/Q==", + "license": "MIT" + }, + "node_modules/rehype-katex/node_modules/vfile": { + "version": "6.0.3", + "resolved": "https://registry.npmjs.org/vfile/-/vfile-6.0.3.tgz", + "integrity": "sha512-KzIbH/9tXat2u30jf+smMwFCsno4wHVdNmzFyL+T/L3UGqqk6JKfVqOFOZEpZSHADH1k40ab6NUIXZq422ov3Q==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0", + "vfile-message": "^4.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/rehype-pretty-code": { + "version": "0.9.11", + "resolved": "https://registry.npmjs.org/rehype-pretty-code/-/rehype-pretty-code-0.9.11.tgz", + "integrity": "sha512-Eq90eCYXQJISktfRZ8PPtwc5SUyH6fJcxS8XOMnHPUQZBtC6RYo67gGlley9X2nR8vlniPj0/7oCDEYHKQa/oA==", + "license": "MIT", + "workspaces": [ + "./word-highlighter-playground" + ], + "dependencies": { + "@types/hast": "^2.0.0", + "hash-obj": "^4.0.0", + "parse-numeric-range": "^1.3.0" + }, + "engines": { + "node": ">=16" + }, + "peerDependencies": { + "shiki": "*" + } + }, + "node_modules/rehype-raw": { + "version": "5.1.0", + "resolved": "https://registry.npmjs.org/rehype-raw/-/rehype-raw-5.1.0.tgz", + "integrity": "sha512-MDvHAb/5mUnif2R+0IPCYJU8WjHa9UzGtM/F4AVy5GixPlDZ1z3HacYy4xojDU+uBa+0X/3PIfyQI26/2ljJNA==", + "license": "MIT", + "dependencies": { + "hast-util-raw": "^6.1.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/rehype-react": { + "version": "6.2.1", + "resolved": "https://registry.npmjs.org/rehype-react/-/rehype-react-6.2.1.tgz", + "integrity": "sha512-f9KIrjktvLvmbGc7si25HepocOg4z0MuNOtweigKzBcDjiGSTGhyz6VSgaV5K421Cq1O+z4/oxRJ5G9owo0KVg==", + "license": "MIT", + "dependencies": { + "@mapbox/hast-util-table-cell-style": "^0.2.0", + "hast-to-hyperscript": "^9.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/rehype-stringify": { + "version": "8.0.0", + "resolved": "https://registry.npmjs.org/rehype-stringify/-/rehype-stringify-8.0.0.tgz", + "integrity": "sha512-VkIs18G0pj2xklyllrPSvdShAV36Ff3yE5PUO9u36f6+2qJFnn22Z5gKwBOwgXviux4UC7K+/j13AnZfPICi/g==", + "license": "MIT", + "dependencies": { + "hast-util-to-html": "^7.1.1" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/remark-breaks": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/remark-breaks/-/remark-breaks-2.0.2.tgz", + "integrity": "sha512-LsQnPPQ7Fzp9RTjj4IwdEmjPOr9bxe9zYKWhs9ZQOg9hMg8rOfeeqQ410cvVdIK87Famqza1CKRxNkepp2EvUA==", + "license": "MIT", + "dependencies": { + "unist-util-visit": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/remark-emoji": { + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/remark-emoji/-/remark-emoji-2.2.0.tgz", + "integrity": "sha512-P3cj9s5ggsUvWw5fS2uzCHJMGuXYRb0NnZqYlNecewXt8QBU9n5vW3DUUKOhepS8F9CwdMx9B8a3i7pqFWAI5w==", + "license": "MIT", + "dependencies": { + "emoticon": "^3.2.0", + "node-emoji": "^1.10.0", + "unist-util-visit": "^2.0.3" + } + }, + "node_modules/remark-gfm": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/remark-gfm/-/remark-gfm-3.0.1.tgz", + "integrity": "sha512-lEFDoi2PICJyNrACFOfDD3JlLkuSbOa5Wd8EPt06HUdptv8Gn0bxYTdbU/XXQ3swAPkEaGxxPN9cbnMHvVu1Ig==", + "license": "MIT", + "dependencies": { + "@types/mdast": "^3.0.0", + "mdast-util-gfm": "^2.0.0", + "micromark-extension-gfm": "^2.0.0", + "unified": "^10.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/remark-gfm/node_modules/bail": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/bail/-/bail-2.0.2.tgz", + "integrity": "sha512-0xO6mYd7JB2YesxDKplafRpsiOzPt9V02ddPCLbY1xYGPOX24NTyN50qnUxgCPcSoYMhKpAuBTjQoRZCAkUDRw==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/remark-gfm/node_modules/is-plain-obj": { + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-4.1.0.tgz", + "integrity": "sha512-+Pgi+vMuUNkJyExiMBt5IlFoMyKnr5zhJ4Uspz58WOhBF5QoIZkFyNHIbBAtHwzVAgk5RtndVNsDRN61/mmDqg==", + "license": "MIT", + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/remark-gfm/node_modules/trough": { + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/trough/-/trough-2.2.0.tgz", + "integrity": "sha512-tmMpK00BjZiUyVyvrBK7knerNgmgvcV/KLVyuma/SC+TQN167GrMRciANTz09+k3zW8L8t60jWO1GpfkZdjTaw==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/remark-gfm/node_modules/unified": { + "version": "10.1.2", + "resolved": "https://registry.npmjs.org/unified/-/unified-10.1.2.tgz", + "integrity": "sha512-pUSWAi/RAnVy1Pif2kAoeWNBa3JVrx0MId2LASj8G+7AiHWoKZNTomq6LG326T68U7/e263X6fTdcXIy7XnF7Q==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "bail": "^2.0.0", + "extend": "^3.0.0", + "is-buffer": "^2.0.0", + "is-plain-obj": "^4.0.0", + "trough": "^2.0.0", + "vfile": "^5.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/remark-gfm/node_modules/vfile": { + "version": "5.3.7", + "resolved": "https://registry.npmjs.org/vfile/-/vfile-5.3.7.tgz", + "integrity": "sha512-r7qlzkgErKjobAmyNIkkSpizsFPYiUPuJb5pNW1RB4JcYVZhs4lIbVqk8XPk033CV/1z8ss5pkax8SuhGpcG8g==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "is-buffer": "^2.0.0", + "unist-util-stringify-position": "^3.0.0", + "vfile-message": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/remark-gfm/node_modules/vfile-message": { + "version": "3.1.4", + "resolved": "https://registry.npmjs.org/vfile-message/-/vfile-message-3.1.4.tgz", + "integrity": "sha512-fa0Z6P8HUrQN4BZaX05SIVXic+7kE3b05PWAtPuYP9QLHsLKYR7/AlLW3NtOrpXRLeawpDLMsVkmk5DG0NXgWw==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "unist-util-stringify-position": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/remark-math": { + "version": "5.1.1", + "resolved": "https://registry.npmjs.org/remark-math/-/remark-math-5.1.1.tgz", + "integrity": "sha512-cE5T2R/xLVtfFI4cCePtiRn+e6jKMtFDR3P8V3qpv8wpKjwvHoBA4eJzvX+nVrnlNy0911bdGmuspCSwetfYHw==", + "license": "MIT", + "dependencies": { + "@types/mdast": "^3.0.0", + "mdast-util-math": "^2.0.0", + "micromark-extension-math": "^2.0.0", + "unified": "^10.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/remark-math/node_modules/bail": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/bail/-/bail-2.0.2.tgz", + "integrity": "sha512-0xO6mYd7JB2YesxDKplafRpsiOzPt9V02ddPCLbY1xYGPOX24NTyN50qnUxgCPcSoYMhKpAuBTjQoRZCAkUDRw==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/remark-math/node_modules/is-plain-obj": { + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-4.1.0.tgz", + "integrity": "sha512-+Pgi+vMuUNkJyExiMBt5IlFoMyKnr5zhJ4Uspz58WOhBF5QoIZkFyNHIbBAtHwzVAgk5RtndVNsDRN61/mmDqg==", + "license": "MIT", + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/remark-math/node_modules/trough": { + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/trough/-/trough-2.2.0.tgz", + "integrity": "sha512-tmMpK00BjZiUyVyvrBK7knerNgmgvcV/KLVyuma/SC+TQN167GrMRciANTz09+k3zW8L8t60jWO1GpfkZdjTaw==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/remark-math/node_modules/unified": { + "version": "10.1.2", + "resolved": "https://registry.npmjs.org/unified/-/unified-10.1.2.tgz", + "integrity": "sha512-pUSWAi/RAnVy1Pif2kAoeWNBa3JVrx0MId2LASj8G+7AiHWoKZNTomq6LG326T68U7/e263X6fTdcXIy7XnF7Q==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "bail": "^2.0.0", + "extend": "^3.0.0", + "is-buffer": "^2.0.0", + "is-plain-obj": "^4.0.0", + "trough": "^2.0.0", + "vfile": "^5.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/remark-math/node_modules/vfile": { + "version": "5.3.7", + "resolved": "https://registry.npmjs.org/vfile/-/vfile-5.3.7.tgz", + "integrity": "sha512-r7qlzkgErKjobAmyNIkkSpizsFPYiUPuJb5pNW1RB4JcYVZhs4lIbVqk8XPk033CV/1z8ss5pkax8SuhGpcG8g==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "is-buffer": "^2.0.0", + "unist-util-stringify-position": "^3.0.0", + "vfile-message": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/remark-math/node_modules/vfile-message": { + "version": "3.1.4", + "resolved": "https://registry.npmjs.org/vfile-message/-/vfile-message-3.1.4.tgz", + "integrity": "sha512-fa0Z6P8HUrQN4BZaX05SIVXic+7kE3b05PWAtPuYP9QLHsLKYR7/AlLW3NtOrpXRLeawpDLMsVkmk5DG0NXgWw==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "unist-util-stringify-position": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/remark-mdx": { + "version": "2.3.0", + "resolved": "https://registry.npmjs.org/remark-mdx/-/remark-mdx-2.3.0.tgz", + "integrity": "sha512-g53hMkpM0I98MU266IzDFMrTD980gNF3BJnkyFcmN+dD873mQeD5rdMO3Y2X+x8umQfbSE0PcoEDl7ledSA+2g==", + "license": "MIT", + "dependencies": { + "mdast-util-mdx": "^2.0.0", + "micromark-extension-mdxjs": "^1.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/remark-parse": { + "version": "10.0.2", + "resolved": "https://registry.npmjs.org/remark-parse/-/remark-parse-10.0.2.tgz", + "integrity": "sha512-3ydxgHa/ZQzG8LvC7jTXccARYDcRld3VfcgIIFs7bI6vbRSxJJmzgLEIIoYKyrfhaY+ujuWaf/PJiMZXoiCXgw==", + "license": "MIT", + "dependencies": { + "@types/mdast": "^3.0.0", + "mdast-util-from-markdown": "^1.0.0", + "unified": "^10.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/remark-parse-no-trim": { + "version": "8.0.4", + "resolved": "https://registry.npmjs.org/remark-parse-no-trim/-/remark-parse-no-trim-8.0.4.tgz", + "integrity": "sha512-WtqeHNTZ0LSdyemmY1/G6y9WoEFblTtgckfKF5/NUnri919/0/dEu8RCDfvXtJvu96soMvT+mLWWgYVUaiHoag==", + "license": "MIT", + "dependencies": { + "ccount": "^1.0.0", + "collapse-white-space": "^1.0.2", + "is-alphabetical": "^1.0.0", + "is-decimal": "^1.0.0", + "is-whitespace-character": "^1.0.0", + "is-word-character": "^1.0.0", + "markdown-escapes": "^1.0.0", + "parse-entities": "^2.0.0", + "repeat-string": "^1.5.4", + "state-toggle": "^1.0.0", + "trim-trailing-lines": "^1.0.0", + "unherit": "^1.0.4", + "unist-util-remove-position": "^2.0.0", + "vfile-location": "^3.0.0", + "xtend": "^4.0.1" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/remark-parse-no-trim/node_modules/unist-util-remove-position": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/unist-util-remove-position/-/unist-util-remove-position-2.0.1.tgz", + "integrity": "sha512-fDZsLYIe2uT+oGFnuZmy73K6ZxOPG/Qcm+w7jbEjaFcJgbQ6cqjs/eSPzXhsmGpAsWPkqZM9pYjww5QTn3LHMA==", + "license": "MIT", + "dependencies": { + "unist-util-visit": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/remark-parse-no-trim/node_modules/vfile-location": { + "version": "3.2.0", + "resolved": "https://registry.npmjs.org/vfile-location/-/vfile-location-3.2.0.tgz", + "integrity": "sha512-aLEIZKv/oxuCDZ8lkJGhuhztf/BW4M+iHdCwglA/eWc+vtuRFJj8EtgceYFX4LRjOhCAAiNHsKGssC6onJ+jbA==", + "license": "MIT", + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/remark-parse/node_modules/bail": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/bail/-/bail-2.0.2.tgz", + "integrity": "sha512-0xO6mYd7JB2YesxDKplafRpsiOzPt9V02ddPCLbY1xYGPOX24NTyN50qnUxgCPcSoYMhKpAuBTjQoRZCAkUDRw==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/remark-parse/node_modules/is-plain-obj": { + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-4.1.0.tgz", + "integrity": "sha512-+Pgi+vMuUNkJyExiMBt5IlFoMyKnr5zhJ4Uspz58WOhBF5QoIZkFyNHIbBAtHwzVAgk5RtndVNsDRN61/mmDqg==", + "license": "MIT", + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/remark-parse/node_modules/trough": { + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/trough/-/trough-2.2.0.tgz", + "integrity": "sha512-tmMpK00BjZiUyVyvrBK7knerNgmgvcV/KLVyuma/SC+TQN167GrMRciANTz09+k3zW8L8t60jWO1GpfkZdjTaw==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/remark-parse/node_modules/unified": { + "version": "10.1.2", + "resolved": "https://registry.npmjs.org/unified/-/unified-10.1.2.tgz", + "integrity": "sha512-pUSWAi/RAnVy1Pif2kAoeWNBa3JVrx0MId2LASj8G+7AiHWoKZNTomq6LG326T68U7/e263X6fTdcXIy7XnF7Q==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "bail": "^2.0.0", + "extend": "^3.0.0", + "is-buffer": "^2.0.0", + "is-plain-obj": "^4.0.0", + "trough": "^2.0.0", + "vfile": "^5.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/remark-parse/node_modules/vfile": { + "version": "5.3.7", + "resolved": "https://registry.npmjs.org/vfile/-/vfile-5.3.7.tgz", + "integrity": "sha512-r7qlzkgErKjobAmyNIkkSpizsFPYiUPuJb5pNW1RB4JcYVZhs4lIbVqk8XPk033CV/1z8ss5pkax8SuhGpcG8g==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "is-buffer": "^2.0.0", + "unist-util-stringify-position": "^3.0.0", + "vfile-message": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/remark-parse/node_modules/vfile-message": { + "version": "3.1.4", + "resolved": "https://registry.npmjs.org/vfile-message/-/vfile-message-3.1.4.tgz", + "integrity": "sha512-fa0Z6P8HUrQN4BZaX05SIVXic+7kE3b05PWAtPuYP9QLHsLKYR7/AlLW3NtOrpXRLeawpDLMsVkmk5DG0NXgWw==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "unist-util-stringify-position": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/remark-reading-time": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/remark-reading-time/-/remark-reading-time-2.0.1.tgz", + "integrity": "sha512-fy4BKy9SRhtYbEHvp6AItbRTnrhiDGbqLQTSYVbQPGuRCncU1ubSsh9p/W5QZSxtYcUXv8KGL0xBgPLyNJA1xw==", + "license": "ISC", + "dependencies": { + "estree-util-is-identifier-name": "^2.0.0", + "estree-util-value-to-estree": "^1.3.0", + "reading-time": "^1.3.0", + "unist-util-visit": "^3.1.0" + } + }, + "node_modules/remark-reading-time/node_modules/unist-util-visit": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/unist-util-visit/-/unist-util-visit-3.1.0.tgz", + "integrity": "sha512-Szoh+R/Ll68QWAyQyZZpQzZQm2UPbxibDvaY8Xc9SUtYgPsDzx5AWSk++UUt2hJuow8mvwR+rG+LQLw+KsuAKA==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "unist-util-is": "^5.0.0", + "unist-util-visit-parents": "^4.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/remark-reading-time/node_modules/unist-util-visit-parents": { + "version": "4.1.1", + "resolved": "https://registry.npmjs.org/unist-util-visit-parents/-/unist-util-visit-parents-4.1.1.tgz", + "integrity": "sha512-1xAFJXAKpnnJl8G7K5KgU7FY55y3GcLIXqkzUj5QF/QVP7biUm0K0O2oqVkYsdjzJKifYeWn9+o6piAK2hGSHw==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "unist-util-is": "^5.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/remark-rehype": { + "version": "8.1.0", + "resolved": "https://registry.npmjs.org/remark-rehype/-/remark-rehype-8.1.0.tgz", + "integrity": "sha512-EbCu9kHgAxKmW1yEYjx3QafMyGY3q8noUbNUI5xyKbaFP89wbhDrKxyIQNukNYthzjNHZu6J7hwFg7hRm1svYA==", + "license": "MIT", + "dependencies": { + "mdast-util-to-hast": "^10.2.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/remove-accents": { + "version": "0.5.0", + "resolved": "https://registry.npmjs.org/remove-accents/-/remove-accents-0.5.0.tgz", + "integrity": "sha512-8g3/Otx1eJaVD12e31UbJj1YzdtVvzH85HV7t+9MJYk/u3XmkOUJ5Ys9wQrf9PCPK8+xn4ymzqYCiZl6QWKn+A==", + "license": "MIT" + }, + "node_modules/repeat-string": { + "version": "1.6.1", + "resolved": "https://registry.npmjs.org/repeat-string/-/repeat-string-1.6.1.tgz", + "integrity": "sha512-PV0dzCYDNfRi1jCDbJzpW7jNNDRuCOG/jI5ctQcGKt/clZD+YcPS3yIlWuTJMmESC8aevCFmWJy5wjAFgNqN6w==", + "license": "MIT", + "engines": { + "node": ">=0.10" + } + }, + "node_modules/requires-port": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/requires-port/-/requires-port-1.0.0.tgz", + "integrity": "sha512-KigOCHcocU3XODJxsu8i/j8T9tzT4adHiecwORRQ0ZZFcp7ahwXuRU1m+yuO90C5ZUyGeGfocHDI14M3L3yDAQ==", + "license": "MIT" + }, + "node_modules/resolve": { + "version": "1.22.8", + "resolved": "https://registry.npmjs.org/resolve/-/resolve-1.22.8.tgz", + "integrity": "sha512-oKWePCxqpd6FlLvGV1VU0x7bkPmmCNolxzjMf4NczoDnQcIWrAF+cPtZn5i6n+RfD2d9i0tzpKnG6Yk168yIyw==", + "license": "MIT", + "dependencies": { + "is-core-module": "^2.13.0", + "path-parse": "^1.0.7", + "supports-preserve-symlinks-flag": "^1.0.0" + }, + "bin": { + "resolve": "bin/resolve" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/resolve-from": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/resolve-from/-/resolve-from-4.0.0.tgz", + "integrity": "sha512-pb/MYmXstAkysRFx8piNI1tGFNQIFA3vkE3Gq4EuA1dF6gHp/+vgZqsCGJapvy8N3Q+4o7FwvquPJcnZ7RYy4g==", + "license": "MIT", + "engines": { + "node": ">=4" + } + }, + "node_modules/reusify": { + "version": "1.0.4", + "resolved": "https://registry.npmjs.org/reusify/-/reusify-1.0.4.tgz", + "integrity": "sha512-U9nH88a3fc/ekCF1l0/UP1IosiuIjyTh7hBvXVMHYgVcfGvt897Xguj2UOLDeI5BG2m7/uwyaLVT6fbtCwTyzw==", + "license": "MIT", + "engines": { + "iojs": ">=1.0.0", + "node": ">=0.10.0" + } + }, + "node_modules/robust-predicates": { + "version": "3.0.2", + "resolved": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.2.tgz", + "integrity": "sha512-IXgzBWvWQwE6PrDI05OvmXUIruQTcoMDzRsOd5CDvHCVLcLHMTSYvOK5Cm46kWqlV3yAbuSpBZdJ5oP5OUoStg==", + "license": "Unlicense" + }, + "node_modules/run-parallel": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/run-parallel/-/run-parallel-1.2.0.tgz", + "integrity": "sha512-5l4VyZR86LZ/lDxZTR6jqL8AFE2S0IFLMP26AbjsLVADxHdhB/c0GUsH+y39UfCi3dzz8OlQuPmnaJOMoDHQBA==", + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/feross" + }, + { + "type": "patreon", + "url": "https://www.patreon.com/feross" + }, + { + "type": "consulting", + "url": "https://feross.org/support" + } + ], + "license": "MIT", + "dependencies": { + "queue-microtask": "^1.2.2" + } + }, + "node_modules/rw": { + "version": "1.3.3", + "resolved": "https://registry.npmjs.org/rw/-/rw-1.3.3.tgz", + "integrity": "sha512-PdhdWy89SiZogBLaw42zdeqtRJ//zFd2PgQavcICDUgJT5oW10QCRKbJ6bg4r0/UY2M6BWd5tkxuGFRvCkgfHQ==", + "license": "BSD-3-Clause" + }, + "node_modules/sade": { + "version": "1.8.1", + "resolved": "https://registry.npmjs.org/sade/-/sade-1.8.1.tgz", + "integrity": "sha512-xal3CZX1Xlo/k4ApwCFrHVACi9fBqJ7V+mwhBsuf/1IOKbBy098Fex+Wa/5QMubw09pSZ/u8EY8PWgevJsXp1A==", + "license": "MIT", + "dependencies": { + "mri": "^1.1.0" + }, + "engines": { + "node": ">=6" + } + }, + "node_modules/safer-buffer": { + "version": "2.1.2", + "resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz", + "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==", + "license": "MIT" + }, + "node_modules/scheduler": { + "version": "0.23.2", + "resolved": "https://registry.npmjs.org/scheduler/-/scheduler-0.23.2.tgz", + "integrity": "sha512-UOShsPwz7NrMUqhR6t0hWjFduvOzbtv7toDH1/hIrfRNIDBnnBWd0CwJTGvTpngVlmwGCdP9/Zl/tVrDqcuYzQ==", + "license": "MIT", + "dependencies": { + "loose-envify": "^1.1.0" + } + }, + "node_modules/scroll-into-view-if-needed": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/scroll-into-view-if-needed/-/scroll-into-view-if-needed-3.1.0.tgz", + "integrity": "sha512-49oNpRjWRvnU8NyGVmUaYG4jtTkNonFZI86MmGRDqBphEK2EXT9gdEUoQPZhuBM8yWHxCWbobltqYO5M4XrUvQ==", + "license": "MIT", + "dependencies": { + "compute-scroll-into-view": "^3.0.2" + } + }, + "node_modules/section-matter": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/section-matter/-/section-matter-1.0.0.tgz", + "integrity": "sha512-vfD3pmTzGpufjScBh50YHKzEu2lxBWhVEHsNGoEXmCmn2hKGfeNLYMzCJpe8cD7gqX7TJluOVpBkAequ6dgMmA==", + "license": "MIT", + "dependencies": { + "extend-shallow": "^2.0.1", + "kind-of": "^6.0.0" + }, + "engines": { + "node": ">=4" + } + }, + "node_modules/semver": { + "version": "7.6.3", + "resolved": "https://registry.npmjs.org/semver/-/semver-7.6.3.tgz", + "integrity": "sha512-oVekP1cKtI+CTDvHWYFUcMtsK/00wmAEfyqKfNdARm8u1wNVhSgaX7A8d4UuIlUI5e84iEwOhs7ZPYRmzU9U6A==", + "license": "ISC", + "bin": { + "semver": "bin/semver.js" + }, + "engines": { + "node": ">=10" + } + }, + "node_modules/server-only": { + "version": "0.0.1", + "resolved": "https://registry.npmjs.org/server-only/-/server-only-0.0.1.tgz", + "integrity": "sha512-qepMx2JxAa5jjfzxG79yPPq+8BuFToHd1hm7kI+Z4zAq1ftQiP7HcxMhDDItrbtwVeLg/cY2JnKnrcFkmiswNA==", + "license": "MIT" + }, + "node_modules/sharp": { + "version": "0.33.5", + "resolved": "https://registry.npmjs.org/sharp/-/sharp-0.33.5.tgz", + "integrity": "sha512-haPVm1EkS9pgvHrQ/F3Xy+hgcuMV0Wm9vfIBSiwZ05k+xgb0PkBQpGsAA/oWdDobNaZTH5ppvHtzCFbnSEwHVw==", + "hasInstallScript": true, + "license": "Apache-2.0", + "dependencies": { + "color": "^4.2.3", + "detect-libc": "^2.0.3", + "semver": "^7.6.3" + }, + "engines": { + "node": "^18.17.0 || ^20.3.0 || >=21.0.0" + }, + "funding": { + "url": "https://opencollective.com/libvips" + }, + "optionalDependencies": { + "@img/sharp-darwin-arm64": "0.33.5", + "@img/sharp-darwin-x64": "0.33.5", + "@img/sharp-libvips-darwin-arm64": "1.0.4", + "@img/sharp-libvips-darwin-x64": "1.0.4", + "@img/sharp-libvips-linux-arm": "1.0.5", + "@img/sharp-libvips-linux-arm64": "1.0.4", + "@img/sharp-libvips-linux-s390x": "1.0.4", + "@img/sharp-libvips-linux-x64": "1.0.4", + "@img/sharp-libvips-linuxmusl-arm64": "1.0.4", + "@img/sharp-libvips-linuxmusl-x64": "1.0.4", + "@img/sharp-linux-arm": "0.33.5", + "@img/sharp-linux-arm64": "0.33.5", + "@img/sharp-linux-s390x": "0.33.5", + "@img/sharp-linux-x64": "0.33.5", + "@img/sharp-linuxmusl-arm64": "0.33.5", + "@img/sharp-linuxmusl-x64": "0.33.5", + "@img/sharp-wasm32": "0.33.5", + "@img/sharp-win32-ia32": "0.33.5", + "@img/sharp-win32-x64": "0.33.5" + } + }, + "node_modules/shebang-command": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz", + "integrity": "sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==", + "license": "MIT", + "dependencies": { + "shebang-regex": "^3.0.0" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/shebang-regex": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz", + "integrity": "sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==", + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/shiki": { + "version": "0.14.7", + "resolved": "https://registry.npmjs.org/shiki/-/shiki-0.14.7.tgz", + "integrity": "sha512-dNPAPrxSc87ua2sKJ3H5dQ/6ZaY8RNnaAqK+t0eG7p0Soi2ydiqbGOTaZCqaYvA/uZYfS1LJnemt3Q+mSfcPCg==", + "license": "MIT", + "dependencies": { + "ansi-sequence-parser": "^1.1.0", + "jsonc-parser": "^3.2.0", + "vscode-oniguruma": "^1.7.0", + "vscode-textmate": "^8.0.0" + } + }, + "node_modules/signal-exit": { + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-4.1.0.tgz", + "integrity": "sha512-bzyZ1e88w9O1iNJbKnOlvYTrWPDl46O1bG0D3XInv+9tkPrxrN8jUUTiFlDkkmKWgn1M6CfIA13SuGqOa9Korw==", + "license": "ISC", + "engines": { + "node": ">=14" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/simple-swizzle": { + "version": "0.2.2", + "resolved": "https://registry.npmjs.org/simple-swizzle/-/simple-swizzle-0.2.2.tgz", + "integrity": "sha512-JA//kQgZtbuY83m+xT+tXJkmJncGMTFT+C+g2h2R9uxkYIrE2yy9sgmcLhCnw57/WSD+Eh3J97FPEDFnbXnDUg==", + "license": "MIT", + "dependencies": { + "is-arrayish": "^0.3.1" + } + }, + "node_modules/simple-swizzle/node_modules/is-arrayish": { + "version": "0.3.2", + "resolved": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.3.2.tgz", + "integrity": "sha512-eVRqCvVlZbuw3GrM63ovNSNAeA1K16kaR/LRY/92w0zxQ5/1YzwblUX652i4Xs9RwAGjW9d9y6X88t8OaAJfWQ==", + "license": "MIT" + }, + "node_modules/slash": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/slash/-/slash-3.0.0.tgz", + "integrity": "sha512-g9Q1haeby36OSStwb4ntCGGGaKsaVSjQ68fBxoQcutl5fS1vuY18H3wSt3jFyFtrkx+Kz0V1G85A4MyAdDMi2Q==", + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/sort-keys": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/sort-keys/-/sort-keys-5.0.0.tgz", + "integrity": "sha512-Pdz01AvCAottHTPQGzndktFNdbRA75BgOfeT1hH+AMnJFv8lynkPi42rfeEhpx1saTEI3YNMWxfqu0sFD1G8pw==", + "license": "MIT", + "dependencies": { + "is-plain-obj": "^4.0.0" + }, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/sort-keys/node_modules/is-plain-obj": { + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-4.1.0.tgz", + "integrity": "sha512-+Pgi+vMuUNkJyExiMBt5IlFoMyKnr5zhJ4Uspz58WOhBF5QoIZkFyNHIbBAtHwzVAgk5RtndVNsDRN61/mmDqg==", + "license": "MIT", + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/source-map": { + "version": "0.5.7", + "resolved": "https://registry.npmjs.org/source-map/-/source-map-0.5.7.tgz", + "integrity": "sha512-LbrmJOMUSdEVxIKvdcJzQC+nQhe8FUZQTXQy6+I75skNgn3OoQ0DZA8YnFa7gp8tqtL3KPf1kmo0R5DoApeSGQ==", + "license": "BSD-3-Clause", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/source-map-js": { + "version": "1.2.0", + "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.0.tgz", + "integrity": "sha512-itJW8lvSA0TXEphiRoawsCksnlf8SyvmFzIhltqAHluXd88pkCd+cXJVHTDwdCr0IzwptSm035IHQktUu1QUMg==", + "license": "BSD-3-Clause", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/space-separated-tokens": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/space-separated-tokens/-/space-separated-tokens-2.0.2.tgz", + "integrity": "sha512-PEGlAwrG8yXGXRjW32fGbg66JAlOAwbObuqVoJpv/mRgoWDQfgH1wDPvtzWyUSNAXBGSk8h755YDbbcEy3SH2Q==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/sprintf-js": { + "version": "1.0.3", + "resolved": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz", + "integrity": "sha512-D9cPgkvLlV3t3IzL0D0YLvGA9Ahk4PcvVwUbN0dSGr1aP0Nrt4AEnTUbuGvquEC0mA64Gqt1fzirlRs5ibXx8g==", + "license": "BSD-3-Clause" + }, + "node_modules/state-toggle": { + "version": "1.0.3", + "resolved": "https://registry.npmjs.org/state-toggle/-/state-toggle-1.0.3.tgz", + "integrity": "sha512-d/5Z4/2iiCnHw6Xzghyhb+GcmF89bxwgXG60wjIiZaxnymbyOmI8Hk4VqHXiVVp6u2ysaskFfXg3ekCj4WNftQ==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/streamsearch": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/streamsearch/-/streamsearch-1.1.0.tgz", + "integrity": "sha512-Mcc5wHehp9aXz1ax6bZUyY5afg9u2rv5cqQI3mRrYkGC8rW2hM02jWuwjtL++LS5qinSyhj2QfLyNsuc+VsExg==", + "engines": { + "node": ">=10.0.0" + } + }, + "node_modules/string-width": { + "version": "5.1.2", + "resolved": "https://registry.npmjs.org/string-width/-/string-width-5.1.2.tgz", + "integrity": "sha512-HnLOCR3vjcY8beoNLtcjZ5/nxn2afmME6lhrDrebokqMap+XbeW8n9TXpPDOqdGK5qcI3oT0GKTW6wC7EMiVqA==", + "license": "MIT", + "dependencies": { + "eastasianwidth": "^0.2.0", + "emoji-regex": "^9.2.2", + "strip-ansi": "^7.0.1" + }, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/string-width-cjs": { + "name": "string-width", + "version": "4.2.3", + "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", + "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==", + "license": "MIT", + "dependencies": { + "emoji-regex": "^8.0.0", + "is-fullwidth-code-point": "^3.0.0", + "strip-ansi": "^6.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/string-width-cjs/node_modules/ansi-regex": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz", + "integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==", + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/string-width-cjs/node_modules/emoji-regex": { + "version": "8.0.0", + "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", + "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==", + "license": "MIT" + }, + "node_modules/string-width-cjs/node_modules/strip-ansi": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==", + "license": "MIT", + "dependencies": { + "ansi-regex": "^5.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/stringify-entities": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/stringify-entities/-/stringify-entities-3.1.0.tgz", + "integrity": "sha512-3FP+jGMmMV/ffZs86MoghGqAoqXAdxLrJP4GUdrDN1aIScYih5tuIO3eF4To5AJZ79KDZ8Fpdy7QJnK8SsL1Vg==", + "license": "MIT", + "dependencies": { + "character-entities-html4": "^1.0.0", + "character-entities-legacy": "^1.0.0", + "xtend": "^4.0.0" + }, + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/strip-ansi": { + "version": "7.1.0", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.1.0.tgz", + "integrity": "sha512-iq6eVVI64nQQTRYq2KtEg2d2uU7LElhTJwsH4YzIHZshxlgZms/wIc4VoDQTlG/IvVIrBKG06CrZnp0qv7hkcQ==", + "license": "MIT", + "dependencies": { + "ansi-regex": "^6.0.1" + }, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/chalk/strip-ansi?sponsor=1" + } + }, + "node_modules/strip-ansi-cjs": { + "name": "strip-ansi", + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==", + "license": "MIT", + "dependencies": { + "ansi-regex": "^5.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/strip-ansi-cjs/node_modules/ansi-regex": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz", + "integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==", + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/strip-bom-string": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/strip-bom-string/-/strip-bom-string-1.0.0.tgz", + "integrity": "sha512-uCC2VHvQRYu+lMh4My/sFNmF2klFymLX1wHJeXnbEJERpV/ZsVuonzerjfrGpIGF7LBVa1O7i9kjiWvJiFck8g==", + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/strip-eof": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/strip-eof/-/strip-eof-1.0.0.tgz", + "integrity": "sha512-7FCwGGmx8mD5xQd3RPUvnSpUXHM3BWuzjtpD4TXsfcZ9EL4azvVVUscFYwD9nx8Kh+uCBC00XBtAykoMHwTh8Q==", + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/style-to-object": { + "version": "0.4.4", + "resolved": "https://registry.npmjs.org/style-to-object/-/style-to-object-0.4.4.tgz", + "integrity": "sha512-HYNoHZa2GorYNyqiCaBgsxvcJIn7OHq6inEga+E6Ke3m5JkoqpQbnFssk4jwe+K7AhGa2fcha4wSOf1Kn01dMg==", + "license": "MIT", + "dependencies": { + "inline-style-parser": "0.1.1" + } + }, + "node_modules/styled-jsx": { + "version": "5.1.1", + "resolved": "https://registry.npmjs.org/styled-jsx/-/styled-jsx-5.1.1.tgz", + "integrity": "sha512-pW7uC1l4mBZ8ugbiZrcIsiIvVx1UmTfw7UkC3Um2tmfUq9Bhk8IiyEIPl6F8agHgjzku6j0xQEZbfA5uSgSaCw==", + "license": "MIT", + "dependencies": { + "client-only": "0.0.1" + }, + "engines": { + "node": ">= 12.0.0" + }, + "peerDependencies": { + "react": ">= 16.8.0 || 17.x.x || ^18.0.0-0" + }, + "peerDependenciesMeta": { + "@babel/core": { + "optional": true + }, + "babel-plugin-macros": { + "optional": true + } + } + }, + "node_modules/stylis": { + "version": "4.2.0", + "resolved": "https://registry.npmjs.org/stylis/-/stylis-4.2.0.tgz", + "integrity": "sha512-Orov6g6BB1sDfYgzWfTHDOxamtX1bE/zo104Dh9e6fqJ3PooipYyfJ0pUmrZO2wAvO8YbEyeFrkV91XTsGMSrw==", + "license": "MIT" + }, + "node_modules/sucrase": { + "version": "3.35.0", + "resolved": "https://registry.npmjs.org/sucrase/-/sucrase-3.35.0.tgz", + "integrity": "sha512-8EbVDiu9iN/nESwxeSxDKe0dunta1GOlHufmSSXxMD2z2/tMZpDMpvXQGsc+ajGo8y2uYUmixaSRUc/QPoQ0GA==", + "license": "MIT", + "dependencies": { + "@jridgewell/gen-mapping": "^0.3.2", + "commander": "^4.0.0", + "glob": "^10.3.10", + "lines-and-columns": "^1.1.6", + "mz": "^2.7.0", + "pirates": "^4.0.1", + "ts-interface-checker": "^0.1.9" + }, + "bin": { + "sucrase": "bin/sucrase", + "sucrase-node": "bin/sucrase-node" + }, + "engines": { + "node": ">=16 || 14 >=14.17" + } + }, + "node_modules/sucrase/node_modules/commander": { + "version": "4.1.1", + "resolved": "https://registry.npmjs.org/commander/-/commander-4.1.1.tgz", + "integrity": "sha512-NOKm8xhkzAjzFx8B2v5OAHT+u5pRQc2UCa2Vq9jYL/31o2wi9mxBA7LIFs3sV5VSC49z6pEhfbMULvShKj26WA==", + "license": "MIT", + "engines": { + "node": ">= 6" + } + }, + "node_modules/supports-color": { + "version": "5.5.0", + "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-5.5.0.tgz", + "integrity": "sha512-QjVjwdXIt408MIiAqCX4oUKsgU2EqAGzs2Ppkm4aQYbjm+ZEWEcW4SfFNTr4uMNZma0ey4f5lgLrkB0aX0QMow==", + "license": "MIT", + "dependencies": { + "has-flag": "^3.0.0" + }, + "engines": { + "node": ">=4" + } + }, + "node_modules/supports-preserve-symlinks-flag": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/supports-preserve-symlinks-flag/-/supports-preserve-symlinks-flag-1.0.0.tgz", + "integrity": "sha512-ot0WnXS9fgdkgIcePe6RHNk1WA8+muPa6cSjeR3V8K27q9BB1rTE3R1p7Hv0z1ZyAc8s6Vvv8DIyWf681MAt0w==", + "license": "MIT", + "engines": { + "node": ">= 0.4" + }, + "funding": { + "url": "https://github.com/sponsors/ljharb" + } + }, + "node_modules/tabbable": { + "version": "5.3.3", + "resolved": "https://registry.npmjs.org/tabbable/-/tabbable-5.3.3.tgz", + "integrity": "sha512-QD9qKY3StfbZqWOPLp0++pOrAVb/HbUi5xCc8cUo4XjP19808oaMiDzn0leBY5mCespIBM0CIZePzZjgzR83kA==", + "license": "MIT" + }, + "node_modules/tailwindcss": { + "version": "3.4.10", + "resolved": "https://registry.npmjs.org/tailwindcss/-/tailwindcss-3.4.10.tgz", + "integrity": "sha512-KWZkVPm7yJRhdu4SRSl9d4AK2wM3a50UsvgHZO7xY77NQr2V+fIrEuoDGQcbvswWvFGbS2f6e+jC/6WJm1Dl0w==", + "license": "MIT", + "dependencies": { + "@alloc/quick-lru": "^5.2.0", + "arg": "^5.0.2", + "chokidar": "^3.5.3", + "didyoumean": "^1.2.2", + "dlv": "^1.1.3", + "fast-glob": "^3.3.0", + "glob-parent": "^6.0.2", + "is-glob": "^4.0.3", + "jiti": "^1.21.0", + "lilconfig": "^2.1.0", + "micromatch": "^4.0.5", + "normalize-path": "^3.0.0", + "object-hash": "^3.0.0", + "picocolors": "^1.0.0", + "postcss": "^8.4.23", + "postcss-import": "^15.1.0", + "postcss-js": "^4.0.1", + "postcss-load-config": "^4.0.1", + "postcss-nested": "^6.0.1", + "postcss-selector-parser": "^6.0.11", + "resolve": "^1.22.2", + "sucrase": "^3.32.0" + }, + "bin": { + "tailwind": "lib/cli.js", + "tailwindcss": "lib/cli.js" + }, + "engines": { + "node": ">=14.0.0" + } + }, + "node_modules/text-diff": { + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/text-diff/-/text-diff-1.0.1.tgz", + "integrity": "sha512-jAnlP3ggZk7FeLX1awaMR8Y2sMyil9P9FXvNjaIJIQBAom1zvpKGGH31htOVrUFp0vlyygmJJpNrbJ4rfjsxrA==", + "license": "Apache-2.0" + }, + "node_modules/thenify": { + "version": "3.3.1", + "resolved": "https://registry.npmjs.org/thenify/-/thenify-3.3.1.tgz", + "integrity": "sha512-RVZSIV5IG10Hk3enotrhvz0T9em6cyHBLkH/YAZuKqd8hRkKhSfCGIcP2KUY0EPxndzANBmNllzWPwak+bheSw==", + "license": "MIT", + "dependencies": { + "any-promise": "^1.0.0" + } + }, + "node_modules/thenify-all": { + "version": "1.6.0", + "resolved": "https://registry.npmjs.org/thenify-all/-/thenify-all-1.6.0.tgz", + "integrity": "sha512-RNxQH/qI8/t3thXJDwcstUO4zeqo64+Uy/+sNVRBx4Xn2OX+OZ9oP+iJnNFqplFra2ZUVeKCSa2oVWi3T4uVmA==", + "license": "MIT", + "dependencies": { + "thenify": ">= 3.1.0 < 4" + }, + "engines": { + "node": ">=0.8" + } + }, + "node_modules/tiny-invariant": { + "version": "1.3.3", + "resolved": "https://registry.npmjs.org/tiny-invariant/-/tiny-invariant-1.3.3.tgz", + "integrity": "sha512-+FbBPE1o9QAYvviau/qC5SE3caw21q3xkvWKBtja5vgqOWIHHJ3ioaq1VPfn/Szqctz2bU/oYeKd9/z5BL+PVg==", + "license": "MIT" + }, + "node_modules/title": { + "version": "3.5.3", + "resolved": "https://registry.npmjs.org/title/-/title-3.5.3.tgz", + "integrity": "sha512-20JyowYglSEeCvZv3EZ0nZ046vLarO37prvV0mbtQV7C8DJPGgN967r8SJkqd3XK3K3lD3/Iyfp3avjfil8Q2Q==", + "license": "MIT", + "dependencies": { + "arg": "1.0.0", + "chalk": "2.3.0", + "clipboardy": "1.2.2", + "titleize": "1.0.0" + }, + "bin": { + "title": "bin/title.js" + } + }, + "node_modules/title/node_modules/arg": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/arg/-/arg-1.0.0.tgz", + "integrity": "sha512-Wk7TEzl1KqvTGs/uyhmHO/3XLd3t1UeU4IstvPXVzGPM522cTjqjNZ99esCkcL52sjqjo8e8CTBcWhkxvGzoAw==", + "license": "MIT" + }, + "node_modules/title/node_modules/chalk": { + "version": "2.3.0", + "resolved": "https://registry.npmjs.org/chalk/-/chalk-2.3.0.tgz", + "integrity": "sha512-Az5zJR2CBujap2rqXGaJKaPHyJ0IrUimvYNX+ncCy8PJP4ltOGTrHUIo097ZaL2zMeKYpiCdqDvS6zdrTFok3Q==", + "license": "MIT", + "dependencies": { + "ansi-styles": "^3.1.0", + "escape-string-regexp": "^1.0.5", + "supports-color": "^4.0.0" + }, + "engines": { + "node": ">=4" + } + }, + "node_modules/title/node_modules/escape-string-regexp": { + "version": "1.0.5", + "resolved": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz", + "integrity": "sha512-vbRorB5FUQWvla16U8R/qgaFIya2qGzwDrNmCZuYKrbdSUMG6I1ZCGQRefkRVhuOkIGVne7BQ35DSfo1qvJqFg==", + "license": "MIT", + "engines": { + "node": ">=0.8.0" + } + }, + "node_modules/title/node_modules/has-flag": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/has-flag/-/has-flag-2.0.0.tgz", + "integrity": "sha512-P+1n3MnwjR/Epg9BBo1KT8qbye2g2Ou4sFumihwt6I4tsUX7jnLcX4BTOSKg/B1ZrIYMN9FcEnG4x5a7NB8Eng==", + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/title/node_modules/supports-color": { + "version": "4.5.0", + "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-4.5.0.tgz", + "integrity": "sha512-ycQR/UbvI9xIlEdQT1TQqwoXtEldExbCEAJgRo5YXlmSKjv6ThHnP9/vwGa1gr19Gfw+LkFd7KqYMhzrRC5JYw==", + "license": "MIT", + "dependencies": { + "has-flag": "^2.0.0" + }, + "engines": { + "node": ">=4" + } + }, + "node_modules/titleize": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/titleize/-/titleize-1.0.0.tgz", + "integrity": "sha512-TARUb7z1pGvlLxgPk++7wJ6aycXF3GJ0sNSBTAsTuJrQG5QuZlkUQP+zl+nbjAh4gMX9yDw9ZYklMd7vAfJKEw==", + "license": "MIT", + "engines": { + "node": ">=0.10.0" + } + }, + "node_modules/to-fast-properties": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/to-fast-properties/-/to-fast-properties-2.0.0.tgz", + "integrity": "sha512-/OaKK0xYrs3DmxRYqL/yDc+FxFUVYhDlXMhRmv3z915w2HF1tnN1omB354j8VUGO/hbRzyD6Y3sA7v7GS/ceog==", + "license": "MIT", + "engines": { + "node": ">=4" + } + }, + "node_modules/to-regex-range": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-5.0.1.tgz", + "integrity": "sha512-65P7iz6X5yEr1cwcgvQxbbIw7Uk3gOy5dIdtZ4rDveLqhrdJP+Li/Hx6tyK0NEb+2GCyneCMJiGqrADCSNk8sQ==", + "license": "MIT", + "dependencies": { + "is-number": "^7.0.0" + }, + "engines": { + "node": ">=8.0" + } + }, + "node_modules/trim-lines": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/trim-lines/-/trim-lines-3.0.1.tgz", + "integrity": "sha512-kRj8B+YHZCc9kQYdWfJB2/oUl9rA99qbowYYBtr4ui4mZyAQ2JpvVBd/6U2YloATfqBhBTSMhTpgBHtU0Mf3Rg==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/trim-trailing-lines": { + "version": "1.1.4", + "resolved": "https://registry.npmjs.org/trim-trailing-lines/-/trim-trailing-lines-1.1.4.tgz", + "integrity": "sha512-rjUWSqnfTNrjbB9NQWfPMH/xRK1deHeGsHoVfpxJ++XeYXE0d6B1En37AHfw3jtfTU7dzMzZL2jjpe8Qb5gLIQ==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/trough": { + "version": "1.0.5", + "resolved": "https://registry.npmjs.org/trough/-/trough-1.0.5.tgz", + "integrity": "sha512-rvuRbTarPXmMb79SmzEp8aqXNKcK+y0XaB298IXueQ8I2PsrATcPBCSPyK/dDNa2iWOhKlfNnOjdAOTBU/nkFA==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/ts-dedent": { + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/ts-dedent/-/ts-dedent-2.2.0.tgz", + "integrity": "sha512-q5W7tVM71e2xjHZTlgfTDoPF/SmqKG5hddq9SzR49CH2hayqRKJtQ4mtRlSxKaJlR/+9rEM+mnBHf7I2/BQcpQ==", + "license": "MIT", + "engines": { + "node": ">=6.10" + } + }, + "node_modules/ts-interface-checker": { + "version": "0.1.13", + "resolved": "https://registry.npmjs.org/ts-interface-checker/-/ts-interface-checker-0.1.13.tgz", + "integrity": "sha512-Y/arvbn+rrz3JCKl9C4kVNfTfSm2/mEp5FSz5EsZSANGPSlQrpRI5M4PKF+mJnE52jOO90PnPSc3Ur3bTQw0gA==", + "license": "Apache-2.0" + }, + "node_modules/tslib": { + "version": "1.14.1", + "resolved": "https://registry.npmjs.org/tslib/-/tslib-1.14.1.tgz", + "integrity": "sha512-Xni35NKzjgMrwevysHTCArtLDpPvye8zV/0E4EyYn43P7/7qvQwPh9BGkHewbMulVntbigmcT7rdX3BNo9wRJg==", + "license": "0BSD" + }, + "node_modules/type-fest": { + "version": "1.4.0", + "resolved": "https://registry.npmjs.org/type-fest/-/type-fest-1.4.0.tgz", + "integrity": "sha512-yGSza74xk0UG8k+pLh5oeoYirvIiWo5t0/o3zHHAO2tRDiZcxWP7fywNlXhqb6/r6sWvwi+RsyQMWhVLe4BVuA==", + "license": "(MIT OR CC0-1.0)", + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/typescript": { + "version": "4.5.5", + "resolved": "https://registry.npmjs.org/typescript/-/typescript-4.5.5.tgz", + "integrity": "sha512-TCTIul70LyWe6IJWT8QSYeA54WQe8EjQFU4wY52Fasj5UKx88LNYKCgBEHcOMOrFF1rKGbD8v/xcNWVUq9SymA==", + "license": "Apache-2.0", + "bin": { + "tsc": "bin/tsc", + "tsserver": "bin/tsserver" + }, + "engines": { + "node": ">=4.2.0" + } + }, + "node_modules/undici-types": { + "version": "6.13.0", + "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.13.0.tgz", + "integrity": "sha512-xtFJHudx8S2DSoujjMd1WeWvn7KKWFRESZTMeL1RptAYERu29D6jphMjjY+vn96jvN3kVPDNxU/E13VTaXj6jg==", + "dev": true, + "license": "MIT" + }, + "node_modules/unherit": { + "version": "1.1.3", + "resolved": "https://registry.npmjs.org/unherit/-/unherit-1.1.3.tgz", + "integrity": "sha512-Ft16BJcnapDKp0+J/rqFC3Rrk6Y/Ng4nzsC028k2jdDII/rdZ7Wd3pPT/6+vIIxRagwRc9K0IUX0Ra4fKvw+WQ==", + "license": "MIT", + "dependencies": { + "inherits": "^2.0.0", + "xtend": "^4.0.0" + }, + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/unified": { + "version": "9.2.2", + "resolved": "https://registry.npmjs.org/unified/-/unified-9.2.2.tgz", + "integrity": "sha512-Sg7j110mtefBD+qunSLO1lqOEKdrwBFBrR6Qd8f4uwkhWNlbkaqwHse6e7QvD3AP/MNoJdEDLaf8OxYyoWgorQ==", + "license": "MIT", + "dependencies": { + "bail": "^1.0.0", + "extend": "^3.0.0", + "is-buffer": "^2.0.0", + "is-plain-obj": "^2.0.0", + "trough": "^1.0.0", + "vfile": "^4.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/unified/node_modules/is-plain-obj": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-2.1.0.tgz", + "integrity": "sha512-YWnfyRwxL/+SsrWYfOpUtz5b3YD+nyfkHvjbcanzk8zgyO4ASD67uVMRt8k5bM4lLMDnXfriRhOpemw+NfT1eA==", + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/unist-builder": { + "version": "2.0.3", + "resolved": "https://registry.npmjs.org/unist-builder/-/unist-builder-2.0.3.tgz", + "integrity": "sha512-f98yt5pnlMWlzP539tPc4grGMsFaQQlP/vM396b00jngsiINumNmsY8rkXjfoi1c6QaM8nQ3vaGDuoKWbe/1Uw==", + "license": "MIT", + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/unist-util-find-after": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/unist-util-find-after/-/unist-util-find-after-5.0.0.tgz", + "integrity": "sha512-amQa0Ep2m6hE2g72AugUItjbuM8X8cGQnFoHk0pGfrFeT9GZhzN5SW8nRsiGKK7Aif4CrACPENkA6P/Lw6fHGQ==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0", + "unist-util-is": "^6.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/unist-util-find-after/node_modules/@types/unist": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/@types/unist/-/unist-3.0.3.tgz", + "integrity": "sha512-ko/gIFJRv177XgZsZcBwnqJN5x/Gien8qNOn0D5bQU/zAzVf9Zt3BlcUiLqhV9y4ARk0GbT3tnUiPNgnTXzc/Q==", + "license": "MIT" + }, + "node_modules/unist-util-find-after/node_modules/unist-util-is": { + "version": "6.0.0", + "resolved": "https://registry.npmjs.org/unist-util-is/-/unist-util-is-6.0.0.tgz", + "integrity": "sha512-2qCTHimwdxLfz+YzdGfkqNlH0tLi9xjTnHddPmJwtIG9MGsdbutfTc4P+haPD7l7Cjxf/WZj+we5qfVPvvxfYw==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/unist-util-generated": { + "version": "1.1.6", + "resolved": "https://registry.npmjs.org/unist-util-generated/-/unist-util-generated-1.1.6.tgz", + "integrity": "sha512-cln2Mm1/CZzN5ttGK7vkoGw+RZ8VcUH6BtGbq98DDtRGquAAOXig1mrBQYelOwMXYS8rK+vZDyyojSjp7JX+Lg==", + "license": "MIT", + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/unist-util-is": { + "version": "5.2.1", + "resolved": "https://registry.npmjs.org/unist-util-is/-/unist-util-is-5.2.1.tgz", + "integrity": "sha512-u9njyyfEh43npf1M+yGKDGVPbY/JWEemg5nH05ncKPfi+kBbKBJoTdsogMu33uhytuLlv9y0O7GH7fEdwLdLQw==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/unist-util-position": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/unist-util-position/-/unist-util-position-3.1.0.tgz", + "integrity": "sha512-w+PkwCbYSFw8vpgWD0v7zRCl1FpY3fjDSQ3/N/wNd9Ffa4gPi8+4keqt99N3XW6F99t/mUzp2xAhNmfKWp95QA==", + "license": "MIT", + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/unist-util-position-from-estree": { + "version": "1.1.2", + "resolved": "https://registry.npmjs.org/unist-util-position-from-estree/-/unist-util-position-from-estree-1.1.2.tgz", + "integrity": "sha512-poZa0eXpS+/XpoQwGwl79UUdea4ol2ZuCYguVaJS4qzIOMDzbqz8a3erUCOmubSZkaOuGamb3tX790iwOIROww==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/unist-util-remove": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/unist-util-remove/-/unist-util-remove-4.0.0.tgz", + "integrity": "sha512-b4gokeGId57UVRX/eVKej5gXqGlc9+trkORhFJpu9raqZkZhU0zm8Doi05+HaiBsMEIJowL+2WtQ5ItjsngPXg==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0", + "unist-util-is": "^6.0.0", + "unist-util-visit-parents": "^6.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/unist-util-remove-position": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/unist-util-remove-position/-/unist-util-remove-position-5.0.0.tgz", + "integrity": "sha512-Hp5Kh3wLxv0PHj9m2yZhhLt58KzPtEYKQQ4yxfYFEO7EvHwzyDYnduhHnY1mDxoqr7VUwVuHXk9RXKIiYS1N8Q==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0", + "unist-util-visit": "^5.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/unist-util-remove-position/node_modules/@types/unist": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/@types/unist/-/unist-3.0.3.tgz", + "integrity": "sha512-ko/gIFJRv177XgZsZcBwnqJN5x/Gien8qNOn0D5bQU/zAzVf9Zt3BlcUiLqhV9y4ARk0GbT3tnUiPNgnTXzc/Q==", + "license": "MIT" + }, + "node_modules/unist-util-remove-position/node_modules/unist-util-is": { + "version": "6.0.0", + "resolved": "https://registry.npmjs.org/unist-util-is/-/unist-util-is-6.0.0.tgz", + "integrity": "sha512-2qCTHimwdxLfz+YzdGfkqNlH0tLi9xjTnHddPmJwtIG9MGsdbutfTc4P+haPD7l7Cjxf/WZj+we5qfVPvvxfYw==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/unist-util-remove-position/node_modules/unist-util-visit": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/unist-util-visit/-/unist-util-visit-5.0.0.tgz", + "integrity": "sha512-MR04uvD+07cwl/yhVuVWAtw+3GOR/knlL55Nd/wAdblk27GCVt3lqpTivy/tkJcZoNPzTwS1Y+KMojlLDhoTzg==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0", + "unist-util-is": "^6.0.0", + "unist-util-visit-parents": "^6.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/unist-util-remove/node_modules/@types/unist": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/@types/unist/-/unist-3.0.3.tgz", + "integrity": "sha512-ko/gIFJRv177XgZsZcBwnqJN5x/Gien8qNOn0D5bQU/zAzVf9Zt3BlcUiLqhV9y4ARk0GbT3tnUiPNgnTXzc/Q==", + "license": "MIT" + }, + "node_modules/unist-util-remove/node_modules/unist-util-is": { + "version": "6.0.0", + "resolved": "https://registry.npmjs.org/unist-util-is/-/unist-util-is-6.0.0.tgz", + "integrity": "sha512-2qCTHimwdxLfz+YzdGfkqNlH0tLi9xjTnHddPmJwtIG9MGsdbutfTc4P+haPD7l7Cjxf/WZj+we5qfVPvvxfYw==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/unist-util-stringify-position": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/unist-util-stringify-position/-/unist-util-stringify-position-3.0.3.tgz", + "integrity": "sha512-k5GzIBZ/QatR8N5X2y+drfpWG8IDBzdnVj6OInRNWm1oXrzydiaAT2OQiA8DPRRZyAKb9b6I2a6PxYklZD0gKg==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/unist-util-visit": { + "version": "2.0.3", + "resolved": "https://registry.npmjs.org/unist-util-visit/-/unist-util-visit-2.0.3.tgz", + "integrity": "sha512-iJ4/RczbJMkD0712mGktuGpm/U4By4FfDonL7N/9tATGIF4imikjOuagyMY53tnZq3NP6BcmlrHhEKAfGWjh7Q==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "unist-util-is": "^4.0.0", + "unist-util-visit-parents": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/unist-util-visit-parents": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/unist-util-visit-parents/-/unist-util-visit-parents-6.0.1.tgz", + "integrity": "sha512-L/PqWzfTP9lzzEa6CKs0k2nARxTdZduw3zyh8d2NVBnsyvHjSX4TWse388YrrQKbvI8w20fGjGlhgT96WwKykw==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0", + "unist-util-is": "^6.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/unist-util-visit-parents/node_modules/@types/unist": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/@types/unist/-/unist-3.0.3.tgz", + "integrity": "sha512-ko/gIFJRv177XgZsZcBwnqJN5x/Gien8qNOn0D5bQU/zAzVf9Zt3BlcUiLqhV9y4ARk0GbT3tnUiPNgnTXzc/Q==", + "license": "MIT" + }, + "node_modules/unist-util-visit-parents/node_modules/unist-util-is": { + "version": "6.0.0", + "resolved": "https://registry.npmjs.org/unist-util-is/-/unist-util-is-6.0.0.tgz", + "integrity": "sha512-2qCTHimwdxLfz+YzdGfkqNlH0tLi9xjTnHddPmJwtIG9MGsdbutfTc4P+haPD7l7Cjxf/WZj+we5qfVPvvxfYw==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/unist-util-visit/node_modules/unist-util-is": { + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/unist-util-is/-/unist-util-is-4.1.0.tgz", + "integrity": "sha512-ZOQSsnce92GrxSqlnEEseX0gi7GH9zTJZ0p9dtu87WRb/37mMPO2Ilx1s/t9vBHrFhbgweUwb+t7cIn5dxPhZg==", + "license": "MIT", + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/unist-util-visit/node_modules/unist-util-visit-parents": { + "version": "3.1.1", + "resolved": "https://registry.npmjs.org/unist-util-visit-parents/-/unist-util-visit-parents-3.1.1.tgz", + "integrity": "sha512-1KROIZWo6bcMrZEwiH2UrXDyalAa0uqzWCxCJj6lPOvTve2WkfgCytoDTPaMnodXh1WrXOq0haVYHj99ynJlsg==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "unist-util-is": "^4.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/update-browserslist-db": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/update-browserslist-db/-/update-browserslist-db-1.1.0.tgz", + "integrity": "sha512-EdRAaAyk2cUE1wOf2DkEhzxqOQvFOoRJFNS6NeyJ01Gp2beMRpBAINjM2iDXE3KCuKhwnvHIQCJm6ThL2Z+HzQ==", + "funding": [ + { + "type": "opencollective", + "url": "https://opencollective.com/browserslist" + }, + { + "type": "tidelift", + "url": "https://tidelift.com/funding/github/npm/browserslist" + }, + { + "type": "github", + "url": "https://github.com/sponsors/ai" + } + ], + "license": "MIT", + "dependencies": { + "escalade": "^3.1.2", + "picocolors": "^1.0.1" + }, + "bin": { + "update-browserslist-db": "cli.js" + }, + "peerDependencies": { + "browserslist": ">= 4.21.0" + } + }, + "node_modules/url-parse": { + "version": "1.5.10", + "resolved": "https://registry.npmjs.org/url-parse/-/url-parse-1.5.10.tgz", + "integrity": "sha512-WypcfiRhfeUP9vvF0j6rw0J3hrWrw6iZv3+22h6iRMJ/8z1Tj6XfLP4DsUix5MhMPnXpiHDoKyoZ/bdCkwBCiQ==", + "license": "MIT", + "dependencies": { + "querystringify": "^2.1.1", + "requires-port": "^1.0.0" + } + }, + "node_modules/use-callback-ref": { + "version": "1.3.2", + "resolved": "https://registry.npmjs.org/use-callback-ref/-/use-callback-ref-1.3.2.tgz", + "integrity": "sha512-elOQwe6Q8gqZgDA8mrh44qRTQqpIHDcZ3hXTLjBe1i4ph8XpNJnO+aQf3NaG+lriLopI4HMx9VjQLfPQ6vhnoA==", + "license": "MIT", + "dependencies": { + "tslib": "^2.0.0" + }, + "engines": { + "node": ">=10" + }, + "peerDependencies": { + "@types/react": "^16.8.0 || ^17.0.0 || ^18.0.0", + "react": "^16.8.0 || ^17.0.0 || ^18.0.0" + }, + "peerDependenciesMeta": { + "@types/react": { + "optional": true + } + } + }, + "node_modules/use-callback-ref/node_modules/tslib": { + "version": "2.7.0", + "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.7.0.tgz", + "integrity": "sha512-gLXCKdN1/j47AiHiOkJN69hJmcbGTHI0ImLmbYLHykhgeN0jVGola9yVjFgzCUklsZQMW55o+dW7IXv3RCXDzA==", + "license": "0BSD" + }, + "node_modules/use-memo-one": { + "version": "1.1.3", + "resolved": "https://registry.npmjs.org/use-memo-one/-/use-memo-one-1.1.3.tgz", + "integrity": "sha512-g66/K7ZQGYrI6dy8GLpVcMsBp4s17xNkYJVSMvTEevGy3nDxHOfE6z8BVE22+5G5x7t3+bhzrlTDB7ObrEE0cQ==", + "license": "MIT", + "peerDependencies": { + "react": "^16.8.0 || ^17.0.0 || ^18.0.0" + } + }, + "node_modules/use-sidecar": { + "version": "1.1.2", + "resolved": "https://registry.npmjs.org/use-sidecar/-/use-sidecar-1.1.2.tgz", + "integrity": "sha512-epTbsLuzZ7lPClpz2TyryBfztm7m+28DlEv2ZCQ3MDr5ssiwyOwGH/e5F9CkfWjJ1t4clvI58yF822/GUkjjhw==", + "license": "MIT", + "dependencies": { + "detect-node-es": "^1.1.0", + "tslib": "^2.0.0" + }, + "engines": { + "node": ">=10" + }, + "peerDependencies": { + "@types/react": "^16.9.0 || ^17.0.0 || ^18.0.0", + "react": "^16.8.0 || ^17.0.0 || ^18.0.0" + }, + "peerDependenciesMeta": { + "@types/react": { + "optional": true + } + } + }, + "node_modules/use-sidecar/node_modules/tslib": { + "version": "2.7.0", + "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.7.0.tgz", + "integrity": "sha512-gLXCKdN1/j47AiHiOkJN69hJmcbGTHI0ImLmbYLHykhgeN0jVGola9yVjFgzCUklsZQMW55o+dW7IXv3RCXDzA==", + "license": "0BSD" + }, + "node_modules/use-sync-external-store": { + "version": "1.2.2", + "resolved": "https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.2.tgz", + "integrity": "sha512-PElTlVMwpblvbNqQ82d2n6RjStvdSoNe9FG28kNfz3WiXilJm4DdNkEzRhCZuIDwY8U08WVihhGR5iRqAwfDiw==", + "license": "MIT", + "peerDependencies": { + "react": "^16.8.0 || ^17.0.0 || ^18.0.0" + } + }, + "node_modules/util-deprecate": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz", + "integrity": "sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==", + "license": "MIT" + }, + "node_modules/uuid": { + "version": "8.3.2", + "resolved": "https://registry.npmjs.org/uuid/-/uuid-8.3.2.tgz", + "integrity": "sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==", + "license": "MIT", + "bin": { + "uuid": "dist/bin/uuid" + } + }, + "node_modules/uvu": { + "version": "0.5.6", + "resolved": "https://registry.npmjs.org/uvu/-/uvu-0.5.6.tgz", + "integrity": "sha512-+g8ENReyr8YsOc6fv/NVJs2vFdHBnBNdfE49rshrTzDWOlUx4Gq7KOS2GD8eqhy2j+Ejq29+SbKH8yjkAqXqoA==", + "license": "MIT", + "dependencies": { + "dequal": "^2.0.0", + "diff": "^5.0.0", + "kleur": "^4.0.3", + "sade": "^1.7.3" + }, + "bin": { + "uvu": "bin.js" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/vfile": { + "version": "4.2.1", + "resolved": "https://registry.npmjs.org/vfile/-/vfile-4.2.1.tgz", + "integrity": "sha512-O6AE4OskCG5S1emQ/4gl8zK586RqA3srz3nfK/Viy0UPToBc5Trp9BVFb1u0CjsKrAWwnpr4ifM/KBXPWwJbCA==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "is-buffer": "^2.0.0", + "unist-util-stringify-position": "^2.0.0", + "vfile-message": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/vfile-location": { + "version": "5.0.3", + "resolved": "https://registry.npmjs.org/vfile-location/-/vfile-location-5.0.3.tgz", + "integrity": "sha512-5yXvWDEgqeiYiBe1lbxYF7UMAIm/IcopxMHrMQDq3nvKcjPKIhZklUKL+AE7J7uApI4kwe2snsK+eI6UTj9EHg==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0", + "vfile": "^6.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/vfile-location/node_modules/@types/unist": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/@types/unist/-/unist-3.0.3.tgz", + "integrity": "sha512-ko/gIFJRv177XgZsZcBwnqJN5x/Gien8qNOn0D5bQU/zAzVf9Zt3BlcUiLqhV9y4ARk0GbT3tnUiPNgnTXzc/Q==", + "license": "MIT" + }, + "node_modules/vfile-location/node_modules/vfile": { + "version": "6.0.3", + "resolved": "https://registry.npmjs.org/vfile/-/vfile-6.0.3.tgz", + "integrity": "sha512-KzIbH/9tXat2u30jf+smMwFCsno4wHVdNmzFyL+T/L3UGqqk6JKfVqOFOZEpZSHADH1k40ab6NUIXZq422ov3Q==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0", + "vfile-message": "^4.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/vfile-matter": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/vfile-matter/-/vfile-matter-3.0.1.tgz", + "integrity": "sha512-CAAIDwnh6ZdtrqAuxdElUqQRQDQgbbIrYtDYI8gCjXS1qQ+1XdLoK8FIZWxJwn0/I+BkSSZpar3SOgjemQz4fg==", + "license": "MIT", + "dependencies": { + "@types/js-yaml": "^4.0.0", + "is-buffer": "^2.0.0", + "js-yaml": "^4.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/vfile-matter/node_modules/argparse": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz", + "integrity": "sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==", + "license": "Python-2.0" + }, + "node_modules/vfile-matter/node_modules/js-yaml": { + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz", + "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==", + "license": "MIT", + "dependencies": { + "argparse": "^2.0.1" + }, + "bin": { + "js-yaml": "bin/js-yaml.js" + } + }, + "node_modules/vfile-message": { + "version": "4.0.2", + "resolved": "https://registry.npmjs.org/vfile-message/-/vfile-message-4.0.2.tgz", + "integrity": "sha512-jRDZ1IMLttGj41KcZvlrYAaI3CfqpLpfpf+Mfig13viT6NKvRzWZ+lXz0Y5D60w6uJIBAOGq9mSHf0gktF0duw==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0", + "unist-util-stringify-position": "^4.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/vfile-message/node_modules/@types/unist": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/@types/unist/-/unist-3.0.3.tgz", + "integrity": "sha512-ko/gIFJRv177XgZsZcBwnqJN5x/Gien8qNOn0D5bQU/zAzVf9Zt3BlcUiLqhV9y4ARk0GbT3tnUiPNgnTXzc/Q==", + "license": "MIT" + }, + "node_modules/vfile-message/node_modules/unist-util-stringify-position": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/unist-util-stringify-position/-/unist-util-stringify-position-4.0.0.tgz", + "integrity": "sha512-0ASV06AAoKCDkS2+xw5RXJywruurpbC4JZSm7nr7MOt1ojAzvyyaO+UxZf18j8FCF6kmzCZKcAgN/yu2gm2XgQ==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/vfile/node_modules/unist-util-stringify-position": { + "version": "2.0.3", + "resolved": "https://registry.npmjs.org/unist-util-stringify-position/-/unist-util-stringify-position-2.0.3.tgz", + "integrity": "sha512-3faScn5I+hy9VleOq/qNbAd6pAx7iH5jYBMS9I1HgQVijz/4mv5Bvw5iw1sC/90CODiKo81G/ps8AJrISn687g==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.2" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/vfile/node_modules/vfile-message": { + "version": "2.0.4", + "resolved": "https://registry.npmjs.org/vfile-message/-/vfile-message-2.0.4.tgz", + "integrity": "sha512-DjssxRGkMvifUOJre00juHoP9DPWuzjxKuMDrhNbk2TdaYYBNMStsNhEOt3idrtI12VQYM/1+iM0KOzXi4pxwQ==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "unist-util-stringify-position": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/vscode-oniguruma": { + "version": "1.7.0", + "resolved": "https://registry.npmjs.org/vscode-oniguruma/-/vscode-oniguruma-1.7.0.tgz", + "integrity": "sha512-L9WMGRfrjOhgHSdOYgCt/yRMsXzLDJSL7BPrOZt73gU0iWO4mpqzqQzOz5srxqTvMBaR0XZTSrVWo4j55Rc6cA==", + "license": "MIT" + }, + "node_modules/vscode-textmate": { + "version": "8.0.0", + "resolved": "https://registry.npmjs.org/vscode-textmate/-/vscode-textmate-8.0.0.tgz", + "integrity": "sha512-AFbieoL7a5LMqcnOF04ji+rpXadgOXnZsxQr//r83kLPr7biP7am3g9zbaZIaBGwBRWeSvoMD4mgPdX3e4NWBg==", + "license": "MIT" + }, + "node_modules/web-namespaces": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/web-namespaces/-/web-namespaces-2.0.1.tgz", + "integrity": "sha512-bKr1DkiNa2krS7qxNtdrtHAmzuYGFQLiQ13TsorsdT6ULTkPLKuu5+GsFpDlg6JFjUTwX2DyhMPG2be8uPrqsQ==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/web-worker": { + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/web-worker/-/web-worker-1.3.0.tgz", + "integrity": "sha512-BSR9wyRsy/KOValMgd5kMyr3JzpdeoR9KVId8u5GVlTTAtNChlsE4yTxeY7zMdNSyOmoKBv8NH2qeRY9Tg+IaA==", + "license": "Apache-2.0" + }, + "node_modules/which": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/which/-/which-2.0.2.tgz", + "integrity": "sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==", + "license": "ISC", + "dependencies": { + "isexe": "^2.0.0" + }, + "bin": { + "node-which": "bin/node-which" + }, + "engines": { + "node": ">= 8" + } + }, + "node_modules/wrap-ansi": { + "version": "8.1.0", + "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-8.1.0.tgz", + "integrity": "sha512-si7QWI6zUMq56bESFvagtmzMdGOtoxfR+Sez11Mobfc7tm+VkUckk9bW2UeffTGVUbOksxmSw0AA2gs8g71NCQ==", + "license": "MIT", + "dependencies": { + "ansi-styles": "^6.1.0", + "string-width": "^5.0.1", + "strip-ansi": "^7.0.1" + }, + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/chalk/wrap-ansi?sponsor=1" + } + }, + "node_modules/wrap-ansi-cjs": { + "name": "wrap-ansi", + "version": "7.0.0", + "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz", + "integrity": "sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==", + "license": "MIT", + "dependencies": { + "ansi-styles": "^4.0.0", + "string-width": "^4.1.0", + "strip-ansi": "^6.0.0" + }, + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/chalk/wrap-ansi?sponsor=1" + } + }, + "node_modules/wrap-ansi-cjs/node_modules/ansi-regex": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz", + "integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==", + "license": "MIT", + "engines": { + "node": ">=8" + } + }, + "node_modules/wrap-ansi-cjs/node_modules/ansi-styles": { + "version": "4.3.0", + "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz", + "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==", + "license": "MIT", + "dependencies": { + "color-convert": "^2.0.1" + }, + "engines": { + "node": ">=8" + }, + "funding": { + "url": "https://github.com/chalk/ansi-styles?sponsor=1" + } + }, + "node_modules/wrap-ansi-cjs/node_modules/color-convert": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz", + "integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==", + "license": "MIT", + "dependencies": { + "color-name": "~1.1.4" + }, + "engines": { + "node": ">=7.0.0" + } + }, + "node_modules/wrap-ansi-cjs/node_modules/color-name": { + "version": "1.1.4", + "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz", + "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==", + "license": "MIT" + }, + "node_modules/wrap-ansi-cjs/node_modules/emoji-regex": { + "version": "8.0.0", + "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", + "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==", + "license": "MIT" + }, + "node_modules/wrap-ansi-cjs/node_modules/string-width": { + "version": "4.2.3", + "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", + "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==", + "license": "MIT", + "dependencies": { + "emoji-regex": "^8.0.0", + "is-fullwidth-code-point": "^3.0.0", + "strip-ansi": "^6.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/wrap-ansi-cjs/node_modules/strip-ansi": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", + "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==", + "license": "MIT", + "dependencies": { + "ansi-regex": "^5.0.1" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/wrap-ansi/node_modules/ansi-styles": { + "version": "6.2.1", + "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-6.2.1.tgz", + "integrity": "sha512-bN798gFfQX+viw3R7yrGWRqnrN2oRkEkUjjl4JNn4E8GxxbjtG3FbrEIIY3l8/hrwUwIeCZvi4QuOTP4MErVug==", + "license": "MIT", + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/chalk/ansi-styles?sponsor=1" + } + }, + "node_modules/xtend": { + "version": "4.0.2", + "resolved": "https://registry.npmjs.org/xtend/-/xtend-4.0.2.tgz", + "integrity": "sha512-LKYU1iAXJXUgAXn9URjiu+MWhyUXHsvfp7mcuYm9dSUKK0/CjtrUwFAxD82/mCWbtLsGjFIad0wIsod4zrTAEQ==", + "license": "MIT", + "engines": { + "node": ">=0.4" + } + }, + "node_modules/yallist": { + "version": "2.1.2", + "resolved": "https://registry.npmjs.org/yallist/-/yallist-2.1.2.tgz", + "integrity": "sha512-ncTzHV7NvsQZkYe1DW7cbDLm0YpzHmZF5r/iyP3ZnQtMiJ+pjzisCiMNI+Sj+xQF5pXhSHxSB3uDbsBTzY/c2A==", + "license": "ISC" + }, + "node_modules/yaml": { + "version": "1.10.2", + "resolved": "https://registry.npmjs.org/yaml/-/yaml-1.10.2.tgz", + "integrity": "sha512-r3vXyErRCYJ7wg28yvBY5VSoAF8ZvlcW9/BwUzEtUsjvX/DKs24dIkuwjtuprwJJHsbyUbLApepYTR1BN4uHrg==", + "license": "ISC", + "engines": { + "node": ">= 6" + } + }, + "node_modules/yocto-queue": { + "version": "0.1.0", + "resolved": "https://registry.npmjs.org/yocto-queue/-/yocto-queue-0.1.0.tgz", + "integrity": "sha512-rVksvsnNCdJ/ohGc6xgPwyN8eheCxsiLM8mxuE/t/mOVqJewPuO1miLpTHQiRgTKCLexL4MeAFVagts7HmNZ2Q==", + "license": "MIT", + "engines": { + "node": ">=10" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/zod": { + "version": "3.23.8", + "resolved": "https://registry.npmjs.org/zod/-/zod-3.23.8.tgz", + "integrity": "sha512-XBx9AXhXktjUqnepgTiE5flcKIYWi/rme0Eaj+5Y0lftuGBq+jyRu/md4WnuxqgP1ubdpNCsYEYPxrzVHD8d6g==", + "license": "MIT", + "funding": { + "url": "https://github.com/sponsors/colinhacks" + } + }, + "node_modules/zwitch": { + "version": "2.0.4", + "resolved": "https://registry.npmjs.org/zwitch/-/zwitch-2.0.4.tgz", + "integrity": "sha512-bXE4cR/kVZhKZX/RjPEflHaKVhUVl85noU3v6b8apfQEc1x4A+zBxjZ4lN8LqGd6WZ3dl98pY4o717VFmoPp+A==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + } + } +} diff --git a/website/pnpm-lock.yaml b/website/pnpm-lock.yaml deleted file mode 100644 index 3ab1e207..00000000 --- a/website/pnpm-lock.yaml +++ /dev/null @@ -1,6145 +0,0 @@ -lockfileVersion: '9.0' - -settings: - autoInstallPeers: true - excludeLinksFromLockfile: false - -importers: - - .: - dependencies: - '@elastic/datemath': - specifier: ^5.0.3 - version: 5.0.3(moment@2.30.1) - '@elastic/eui': - specifier: ^95.9.0 - version: 95.9.0(@elastic/datemath@5.0.3(moment@2.30.1))(@emotion/css@11.13.0)(@emotion/react@11.13.3(@types/react@18.3.4)(react@18.3.1))(@types/react-dom@18.3.0)(@types/react@18.3.4)(moment@2.30.1)(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(typescript@4.5.5) - '@emotion/css': - specifier: ^11.13.0 - version: 11.13.0 - '@emotion/react': - specifier: ^11.13.3 - version: 11.13.3(@types/react@18.3.4)(react@18.3.1) - '@fortawesome/fontawesome-svg-core': - specifier: ^6.6.0 - version: 6.6.0 - '@fortawesome/free-brands-svg-icons': - specifier: ^6.6.0 - version: 6.6.0 - '@fortawesome/free-solid-svg-icons': - specifier: ^6.6.0 - version: 6.6.0 - '@fortawesome/react-fontawesome': - specifier: ^0.2.2 - version: 0.2.2(@fortawesome/fontawesome-svg-core@6.6.0)(react@18.3.1) - '@tanstack/react-query': - specifier: ^5.52.2 - version: 5.52.2(react@18.3.1) - '@vercel/analytics': - specifier: ^1.3.1 - version: 1.3.1(next@14.2.7(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(react@18.3.1) - autoprefixer: - specifier: ^10.4.20 - version: 10.4.20(postcss@8.4.41) - axios: - specifier: ^1.7.5 - version: 1.7.5 - classnames: - specifier: ^2.5.1 - version: 2.5.1 - lodash: - specifier: ^4.17.21 - version: 4.17.21 - moment: - specifier: ^2.30.1 - version: 2.30.1 - next: - specifier: ^14.2.7 - version: 14.2.7(react-dom@18.3.1(react@18.3.1))(react@18.3.1) - nextra: - specifier: ^2.13.4 - version: 2.13.4(next@14.2.7(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(react-dom@18.3.1(react@18.3.1))(react@18.3.1) - nextra-theme-docs: - specifier: ^2.13.4 - version: 2.13.4(next@14.2.7(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(nextra@2.13.4(next@14.2.7(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(react-dom@18.3.1(react@18.3.1))(react@18.3.1) - papaparse: - specifier: ^5.4.1 - version: 5.4.1 - postcss: - specifier: ^8.4.41 - version: 8.4.41 - prop-types: - specifier: ^15.8.1 - version: 15.8.1 - react: - specifier: ^18.3.1 - version: 18.3.1 - react-dom: - specifier: ^18.3.1 - version: 18.3.1(react@18.3.1) - sharp: - specifier: ^0.33.5 - version: 0.33.5 - tailwindcss: - specifier: ^3.4.10 - version: 3.4.10 - devDependencies: - '@biomejs/biome': - specifier: 1.8.3 - version: 1.8.3 - '@types/node': - specifier: 22.1.0 - version: 22.1.0 - '@types/react': - specifier: ^18.3.4 - version: 18.3.4 - '@types/react-dom': - specifier: ^18.3.0 - version: 18.3.0 - typescript: - specifier: ~4.5.5 - version: 4.5.5 - -packages: - - '@alloc/quick-lru@5.2.0': - resolution: {integrity: sha512-UrcABB+4bUrFABwbluTIBErXwvbsU/V7TZWfmbgJfbkwiBuziS9gxdODUyuiecfdGQ85jglMW6juS3+z5TsKLw==} - engines: {node: '>=10'} - - '@babel/code-frame@7.24.7': - resolution: {integrity: sha512-BcYH1CVJBO9tvyIZ2jVeXgSIMvGZ2FDRvDdOIVQyuklNKSsx+eppDEBq/g47Ayw+RqNFE+URvOShmf+f/qwAlA==} - engines: {node: '>=6.9.0'} - - '@babel/generator@7.25.5': - resolution: {integrity: sha512-abd43wyLfbWoxC6ahM8xTkqLpGB2iWBVyuKC9/srhFunCd1SDNrV1s72bBpK4hLj8KLzHBBcOblvLQZBNw9r3w==} - engines: {node: '>=6.9.0'} - - '@babel/helper-module-imports@7.24.7': - resolution: {integrity: sha512-8AyH3C+74cgCVVXow/myrynrAGv+nTVg5vKu2nZph9x7RcRwzmh0VFallJuFTZ9mx6u4eSdXZfcOzSqTUm0HCA==} - engines: {node: '>=6.9.0'} - - '@babel/helper-string-parser@7.24.8': - resolution: {integrity: sha512-pO9KhhRcuUyGnJWwyEgnRJTSIZHiT+vMD0kPeD+so0l7mxkMT19g3pjY9GTnHySck/hDzq+dtW/4VgnMkippsQ==} - engines: {node: '>=6.9.0'} - - '@babel/helper-validator-identifier@7.24.7': - resolution: {integrity: sha512-rR+PBcQ1SMQDDyF6X0wxtG8QyLCgUB0eRAGguqRLfkCA87l7yAP7ehq8SNj96OOGTO8OBV70KhuFYcIkHXOg0w==} - engines: {node: '>=6.9.0'} - - '@babel/highlight@7.24.7': - resolution: {integrity: sha512-EStJpq4OuY8xYfhGVXngigBJRWxftKX9ksiGDnmlY3o7B/V7KIAc9X4oiK87uPJSc/vs5L869bem5fhZa8caZw==} - engines: {node: '>=6.9.0'} - - '@babel/parser@7.25.4': - resolution: {integrity: sha512-nq+eWrOgdtu3jG5Os4TQP3x3cLA8hR8TvJNjD8vnPa20WGycimcparWnLK4jJhElTK6SDyuJo1weMKO/5LpmLA==} - engines: {node: '>=6.0.0'} - hasBin: true - - '@babel/runtime@7.25.4': - resolution: {integrity: sha512-DSgLeL/FNcpXuzav5wfYvHCGvynXkJbn3Zvc3823AEe9nPwW9IK4UoCSS5yGymmQzN0pCPvivtgS6/8U2kkm1w==} - engines: {node: '>=6.9.0'} - - '@babel/template@7.25.0': - resolution: {integrity: sha512-aOOgh1/5XzKvg1jvVz7AVrx2piJ2XBi227DHmbY6y+bM9H2FlN+IfecYu4Xl0cNiiVejlsCri89LUsbj8vJD9Q==} - engines: {node: '>=6.9.0'} - - '@babel/traverse@7.25.4': - resolution: {integrity: sha512-VJ4XsrD+nOvlXyLzmLzUs/0qjFS4sK30te5yEFlvbbUNEgKaVb2BHZUpAL+ttLPQAHNrsI3zZisbfha5Cvr8vg==} - engines: {node: '>=6.9.0'} - - '@babel/types@7.25.4': - resolution: {integrity: sha512-zQ1ijeeCXVEh+aNL0RlmkPkG8HUiDcU2pzQQFjtbntgAczRASFzj4H+6+bV+dy1ntKR14I/DypeuRG1uma98iQ==} - engines: {node: '>=6.9.0'} - - '@base2/pretty-print-object@1.0.1': - resolution: {integrity: sha512-4iri8i1AqYHJE2DstZYkyEprg6Pq6sKx3xn5FpySk9sNhH7qN2LLlHJCfDTZRILNwQNPD7mATWM0TBui7uC1pA==} - - '@biomejs/biome@1.8.3': - resolution: {integrity: sha512-/uUV3MV+vyAczO+vKrPdOW0Iaet7UnJMU4bNMinggGJTAnBPjCoLEYcyYtYHNnUNYlv4xZMH6hVIQCAozq8d5w==} - engines: {node: '>=14.21.3'} - hasBin: true - - '@biomejs/cli-darwin-arm64@1.8.3': - resolution: {integrity: sha512-9DYOjclFpKrH/m1Oz75SSExR8VKvNSSsLnVIqdnKexj6NwmiMlKk94Wa1kZEdv6MCOHGHgyyoV57Cw8WzL5n3A==} - engines: {node: '>=14.21.3'} - cpu: [arm64] - os: [darwin] - - '@biomejs/cli-darwin-x64@1.8.3': - resolution: {integrity: sha512-UeW44L/AtbmOF7KXLCoM+9PSgPo0IDcyEUfIoOXYeANaNXXf9mLUwV1GeF2OWjyic5zj6CnAJ9uzk2LT3v/wAw==} - engines: {node: '>=14.21.3'} - cpu: [x64] - os: [darwin] - - '@biomejs/cli-linux-arm64-musl@1.8.3': - resolution: {integrity: sha512-9yjUfOFN7wrYsXt/T/gEWfvVxKlnh3yBpnScw98IF+oOeCYb5/b/+K7YNqKROV2i1DlMjg9g/EcN9wvj+NkMuQ==} - engines: {node: '>=14.21.3'} - cpu: [arm64] - os: [linux] - - '@biomejs/cli-linux-arm64@1.8.3': - resolution: {integrity: sha512-fed2ji8s+I/m8upWpTJGanqiJ0rnlHOK3DdxsyVLZQ8ClY6qLuPc9uehCREBifRJLl/iJyQpHIRufLDeotsPtw==} - engines: {node: '>=14.21.3'} - cpu: [arm64] - os: [linux] - - '@biomejs/cli-linux-x64-musl@1.8.3': - resolution: {integrity: sha512-UHrGJX7PrKMKzPGoEsooKC9jXJMa28TUSMjcIlbDnIO4EAavCoVmNQaIuUSH0Ls2mpGMwUIf+aZJv657zfWWjA==} - engines: {node: '>=14.21.3'} - cpu: [x64] - os: [linux] - - '@biomejs/cli-linux-x64@1.8.3': - resolution: {integrity: sha512-I8G2QmuE1teISyT8ie1HXsjFRz9L1m5n83U1O6m30Kw+kPMPSKjag6QGUn+sXT8V+XWIZxFFBoTDEDZW2KPDDw==} - engines: {node: '>=14.21.3'} - cpu: [x64] - os: [linux] - - '@biomejs/cli-win32-arm64@1.8.3': - resolution: {integrity: sha512-J+Hu9WvrBevfy06eU1Na0lpc7uR9tibm9maHynLIoAjLZpQU3IW+OKHUtyL8p6/3pT2Ju5t5emReeIS2SAxhkQ==} - engines: {node: '>=14.21.3'} - cpu: [arm64] - os: [win32] - - '@biomejs/cli-win32-x64@1.8.3': - resolution: {integrity: sha512-/PJ59vA1pnQeKahemaQf4Nyj7IKUvGQSc3Ze1uIGi+Wvr1xF7rGobSrAAG01T/gUDG21vkDsZYM03NAmPiVkqg==} - engines: {node: '>=14.21.3'} - cpu: [x64] - os: [win32] - - '@braintree/sanitize-url@6.0.4': - resolution: {integrity: sha512-s3jaWicZd0pkP0jf5ysyHUI/RE7MHos6qlToFcGWXVp+ykHOy77OUMrfbgJ9it2C5bow7OIQwYYaHjk9XlBQ2A==} - - '@elastic/datemath@5.0.3': - resolution: {integrity: sha512-8Hbr1Uyjm5OcYBfEB60K7sCP6U3IXuWDaLaQmYv3UxgI4jqBWbakoemwWvsqPVUvnwEjuX6z7ghPZbefs8xiaA==} - peerDependencies: - moment: ^2.24.0 - - '@elastic/eui@95.9.0': - resolution: {integrity: sha512-Ppna5bGjamttqHdwhYYrdXOprF3OpEY0schX7mOVJmtpcBtp7wAMYQq/bBELBVb7idO4NytbzI1Q6R6NYs5Tdg==} - engines: {node: 16.x || 18.x || >=20.x} - peerDependencies: - '@elastic/datemath': ^5.0.2 - '@emotion/css': 11.x - '@emotion/react': 11.x - '@types/react': ^16.9 || ^17.0 || ^18.0 - '@types/react-dom': ^16.9 || ^17.0 || ^18.0 - moment: ^2.13.0 - react: ^16.12 || ^17.0 || ^18.0 - react-dom: ^16.12 || ^17.0 || ^18.0 - typescript: ~4.5.3 || ^5 - - '@emnapi/runtime@1.2.0': - resolution: {integrity: sha512-bV21/9LQmcQeCPEg3BDFtvwL6cwiTMksYNWQQ4KOxCZikEGalWtenoZ0wCiukJINlGCIi2KXx01g4FoH/LxpzQ==} - - '@emotion/babel-plugin@11.12.0': - resolution: {integrity: sha512-y2WQb+oP8Jqvvclh8Q55gLUyb7UFvgv7eJfsj7td5TToBrIUtPay2kMrZi4xjq9qw2vD0ZR5fSho0yqoFgX7Rw==} - - '@emotion/cache@11.13.1': - resolution: {integrity: sha512-iqouYkuEblRcXmylXIwwOodiEK5Ifl7JcX7o6V4jI3iW4mLXX3dmt5xwBtIkJiQEXFAI+pC8X0i67yiPkH9Ucw==} - - '@emotion/css@11.13.0': - resolution: {integrity: sha512-BUk99ylT+YHl+W/HN7nv1RCTkDYmKKqa1qbvM/qLSQEg61gipuBF5Hptk/2/ERmX2DCv0ccuFGhz9i0KSZOqPg==} - - '@emotion/hash@0.9.2': - resolution: {integrity: sha512-MyqliTZGuOm3+5ZRSaaBGP3USLw6+EGykkwZns2EPC5g8jJ4z9OrdZY9apkl3+UP9+sdz76YYkwCKP5gh8iY3g==} - - '@emotion/memoize@0.9.0': - resolution: {integrity: sha512-30FAj7/EoJ5mwVPOWhAyCX+FPfMDrVecJAM+Iw9NRoSl4BBAQeqj4cApHHUXOVvIPgLVDsCFoz/hGD+5QQD1GQ==} - - '@emotion/react@11.13.3': - resolution: {integrity: sha512-lIsdU6JNrmYfJ5EbUCf4xW1ovy5wKQ2CkPRM4xogziOxH1nXxBSjpC9YqbFAP7circxMfYp+6x676BqWcEiixg==} - peerDependencies: - '@types/react': '*' - react: '>=16.8.0' - peerDependenciesMeta: - '@types/react': - optional: true - - '@emotion/serialize@1.3.1': - resolution: {integrity: sha512-dEPNKzBPU+vFPGa+z3axPRn8XVDetYORmDC0wAiej+TNcOZE70ZMJa0X7JdeoM6q/nWTMZeLpN/fTnD9o8MQBA==} - - '@emotion/sheet@1.4.0': - resolution: {integrity: sha512-fTBW9/8r2w3dXWYM4HCB1Rdp8NLibOw2+XELH5m5+AkWiL/KqYX6dc0kKYlaYyKjrQ6ds33MCdMPEwgs2z1rqg==} - - '@emotion/unitless@0.10.0': - resolution: {integrity: sha512-dFoMUuQA20zvtVTuxZww6OHoJYgrzfKM1t52mVySDJnMSEa08ruEvdYQbhvyu6soU+NeLVd3yKfTfT0NeV6qGg==} - - '@emotion/use-insertion-effect-with-fallbacks@1.1.0': - resolution: {integrity: sha512-+wBOcIV5snwGgI2ya3u99D7/FJquOIniQT1IKyDsBmEgwvpxMNeS65Oib7OnE2d2aY+3BU4OiH+0Wchf8yk3Hw==} - peerDependencies: - react: '>=16.8.0' - - '@emotion/utils@1.4.0': - resolution: {integrity: sha512-spEnrA1b6hDR/C68lC2M7m6ALPUHZC0lIY7jAS/B/9DuuO1ZP04eov8SMv/6fwRd8pzmsn2AuJEznRREWlQrlQ==} - - '@emotion/weak-memoize@0.4.0': - resolution: {integrity: sha512-snKqtPW01tN0ui7yu9rGv69aJXr/a/Ywvl11sUjNtEcRc+ng/mQriFL0wLXMef74iHa/EkftbDzU9F8iFbH+zg==} - - '@fortawesome/fontawesome-common-types@6.6.0': - resolution: {integrity: sha512-xyX0X9mc0kyz9plIyryrRbl7ngsA9jz77mCZJsUkLl+ZKs0KWObgaEBoSgQiYWAsSmjz/yjl0F++Got0Mdp4Rw==} - engines: {node: '>=6'} - - '@fortawesome/fontawesome-svg-core@6.6.0': - resolution: {integrity: sha512-KHwPkCk6oRT4HADE7smhfsKudt9N/9lm6EJ5BVg0tD1yPA5hht837fB87F8pn15D8JfTqQOjhKTktwmLMiD7Kg==} - engines: {node: '>=6'} - - '@fortawesome/free-brands-svg-icons@6.6.0': - resolution: {integrity: sha512-1MPD8lMNW/earme4OQi1IFHtmHUwAKgghXlNwWi9GO7QkTfD+IIaYpIai4m2YJEzqfEji3jFHX1DZI5pbY/biQ==} - engines: {node: '>=6'} - - '@fortawesome/free-solid-svg-icons@6.6.0': - resolution: {integrity: sha512-IYv/2skhEDFc2WGUcqvFJkeK39Q+HyPf5GHUrT/l2pKbtgEIv1al1TKd6qStR5OIwQdN1GZP54ci3y4mroJWjA==} - engines: {node: '>=6'} - - '@fortawesome/react-fontawesome@0.2.2': - resolution: {integrity: sha512-EnkrprPNqI6SXJl//m29hpaNzOp1bruISWaOiRtkMi/xSvHJlzc2j2JAYS7egxt/EbjSNV/k6Xy0AQI6vB2+1g==} - peerDependencies: - '@fortawesome/fontawesome-svg-core': ~1 || ~6 - react: '>=16.3' - - '@headlessui/react@1.7.19': - resolution: {integrity: sha512-Ll+8q3OlMJfJbAKM/+/Y2q6PPYbryqNTXDbryx7SXLIDamkF6iQFbriYHga0dY44PvDhvvBWCx1Xj4U5+G4hOw==} - engines: {node: '>=10'} - peerDependencies: - react: ^16 || ^17 || ^18 - react-dom: ^16 || ^17 || ^18 - - '@hello-pangea/dnd@16.6.0': - resolution: {integrity: sha512-vfZ4GydqbtUPXSLfAvKvXQ6xwRzIjUSjVU0Sx+70VOhc2xx6CdmJXJ8YhH70RpbTUGjxctslQTHul9sIOxCfFQ==} - peerDependencies: - react: ^16.8.5 || ^17.0.0 || ^18.0.0 - react-dom: ^16.8.5 || ^17.0.0 || ^18.0.0 - - '@img/sharp-darwin-arm64@0.33.5': - resolution: {integrity: sha512-UT4p+iz/2H4twwAoLCqfA9UH5pI6DggwKEGuaPy7nCVQ8ZsiY5PIcrRvD1DzuY3qYL07NtIQcWnBSY/heikIFQ==} - engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0} - cpu: [arm64] - os: [darwin] - - '@img/sharp-darwin-x64@0.33.5': - resolution: {integrity: sha512-fyHac4jIc1ANYGRDxtiqelIbdWkIuQaI84Mv45KvGRRxSAa7o7d1ZKAOBaYbnepLC1WqxfpimdeWfvqqSGwR2Q==} - engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0} - cpu: [x64] - os: [darwin] - - '@img/sharp-libvips-darwin-arm64@1.0.4': - resolution: {integrity: sha512-XblONe153h0O2zuFfTAbQYAX2JhYmDHeWikp1LM9Hul9gVPjFY427k6dFEcOL72O01QxQsWi761svJ/ev9xEDg==} - cpu: [arm64] - os: [darwin] - - '@img/sharp-libvips-darwin-x64@1.0.4': - resolution: {integrity: sha512-xnGR8YuZYfJGmWPvmlunFaWJsb9T/AO2ykoP3Fz/0X5XV2aoYBPkX6xqCQvUTKKiLddarLaxpzNe+b1hjeWHAQ==} - cpu: [x64] - os: [darwin] - - '@img/sharp-libvips-linux-arm64@1.0.4': - resolution: {integrity: sha512-9B+taZ8DlyyqzZQnoeIvDVR/2F4EbMepXMc/NdVbkzsJbzkUjhXv/70GQJ7tdLA4YJgNP25zukcxpX2/SueNrA==} - cpu: [arm64] - os: [linux] - - '@img/sharp-libvips-linux-arm@1.0.5': - resolution: {integrity: sha512-gvcC4ACAOPRNATg/ov8/MnbxFDJqf/pDePbBnuBDcjsI8PssmjoKMAz4LtLaVi+OnSb5FK/yIOamqDwGmXW32g==} - cpu: [arm] - os: [linux] - - '@img/sharp-libvips-linux-s390x@1.0.4': - resolution: {integrity: sha512-u7Wz6ntiSSgGSGcjZ55im6uvTrOxSIS8/dgoVMoiGE9I6JAfU50yH5BoDlYA1tcuGS7g/QNtetJnxA6QEsCVTA==} - cpu: [s390x] - os: [linux] - - '@img/sharp-libvips-linux-x64@1.0.4': - resolution: {integrity: sha512-MmWmQ3iPFZr0Iev+BAgVMb3ZyC4KeFc3jFxnNbEPas60e1cIfevbtuyf9nDGIzOaW9PdnDciJm+wFFaTlj5xYw==} - cpu: [x64] - os: [linux] - - '@img/sharp-libvips-linuxmusl-arm64@1.0.4': - resolution: {integrity: sha512-9Ti+BbTYDcsbp4wfYib8Ctm1ilkugkA/uscUn6UXK1ldpC1JjiXbLfFZtRlBhjPZ5o1NCLiDbg8fhUPKStHoTA==} - cpu: [arm64] - os: [linux] - - '@img/sharp-libvips-linuxmusl-x64@1.0.4': - resolution: {integrity: sha512-viYN1KX9m+/hGkJtvYYp+CCLgnJXwiQB39damAO7WMdKWlIhmYTfHjwSbQeUK/20vY154mwezd9HflVFM1wVSw==} - cpu: [x64] - os: [linux] - - '@img/sharp-linux-arm64@0.33.5': - resolution: {integrity: sha512-JMVv+AMRyGOHtO1RFBiJy/MBsgz0x4AWrT6QoEVVTyh1E39TrCUpTRI7mx9VksGX4awWASxqCYLCV4wBZHAYxA==} - engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0} - cpu: [arm64] - os: [linux] - - '@img/sharp-linux-arm@0.33.5': - resolution: {integrity: sha512-JTS1eldqZbJxjvKaAkxhZmBqPRGmxgu+qFKSInv8moZ2AmT5Yib3EQ1c6gp493HvrvV8QgdOXdyaIBrhvFhBMQ==} - engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0} - cpu: [arm] - os: [linux] - - '@img/sharp-linux-s390x@0.33.5': - resolution: {integrity: sha512-y/5PCd+mP4CA/sPDKl2961b+C9d+vPAveS33s6Z3zfASk2j5upL6fXVPZi7ztePZ5CuH+1kW8JtvxgbuXHRa4Q==} - engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0} - cpu: [s390x] - os: [linux] - - '@img/sharp-linux-x64@0.33.5': - resolution: {integrity: sha512-opC+Ok5pRNAzuvq1AG0ar+1owsu842/Ab+4qvU879ippJBHvyY5n2mxF1izXqkPYlGuP/M556uh53jRLJmzTWA==} - engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0} - cpu: [x64] - os: [linux] - - '@img/sharp-linuxmusl-arm64@0.33.5': - resolution: {integrity: sha512-XrHMZwGQGvJg2V/oRSUfSAfjfPxO+4DkiRh6p2AFjLQztWUuY/o8Mq0eMQVIY7HJ1CDQUJlxGGZRw1a5bqmd1g==} - engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0} - cpu: [arm64] - os: [linux] - - '@img/sharp-linuxmusl-x64@0.33.5': - resolution: {integrity: sha512-WT+d/cgqKkkKySYmqoZ8y3pxx7lx9vVejxW/W4DOFMYVSkErR+w7mf2u8m/y4+xHe7yY9DAXQMWQhpnMuFfScw==} - engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0} - cpu: [x64] - os: [linux] - - '@img/sharp-wasm32@0.33.5': - resolution: {integrity: sha512-ykUW4LVGaMcU9lu9thv85CbRMAwfeadCJHRsg2GmeRa/cJxsVY9Rbd57JcMxBkKHag5U/x7TSBpScF4U8ElVzg==} - engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0} - cpu: [wasm32] - - '@img/sharp-win32-ia32@0.33.5': - resolution: {integrity: sha512-T36PblLaTwuVJ/zw/LaH0PdZkRz5rd3SmMHX8GSmR7vtNSP5Z6bQkExdSK7xGWyxLw4sUknBuugTelgw2faBbQ==} - engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0} - cpu: [ia32] - os: [win32] - - '@img/sharp-win32-x64@0.33.5': - resolution: {integrity: sha512-MpY/o8/8kj+EcnxwvrP4aTJSWw/aZ7JIGR4aBeZkZw5B7/Jn+tY9/VNwtcoGmdT7GfggGIU4kygOMSbYnOrAbg==} - engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0} - cpu: [x64] - os: [win32] - - '@isaacs/cliui@8.0.2': - resolution: {integrity: sha512-O8jcjabXaleOG9DQ0+ARXWZBTfnP4WNAqzuiJK7ll44AmxGKv/J2M4TPjxjY3znBCfvBXFzucm1twdyFybFqEA==} - engines: {node: '>=12'} - - '@jridgewell/gen-mapping@0.3.5': - resolution: {integrity: sha512-IzL8ZoEDIBRWEzlCcRhOaCupYyN5gdIK+Q6fbFdPDg6HqX6jpkItn7DFIpW9LQzXG6Df9sA7+OKnq0qlz/GaQg==} - engines: {node: '>=6.0.0'} - - '@jridgewell/resolve-uri@3.1.2': - resolution: {integrity: sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw==} - engines: {node: '>=6.0.0'} - - '@jridgewell/set-array@1.2.1': - resolution: {integrity: sha512-R8gLRTZeyp03ymzP/6Lil/28tGeGEzhx1q2k703KGWRAI1VdvPIXdG70VJc2pAMw3NA6JKL5hhFu1sJX0Mnn/A==} - engines: {node: '>=6.0.0'} - - '@jridgewell/sourcemap-codec@1.5.0': - resolution: {integrity: sha512-gv3ZRaISU3fjPAgNsriBRqGWQL6quFx04YMPW/zD8XMLsU32mhCCbfbO6KZFLjvYpCZ8zyDEgqsgf+PwPaM7GQ==} - - '@jridgewell/trace-mapping@0.3.25': - resolution: {integrity: sha512-vNk6aEwybGtawWmy/PzwnGDOjCkLWSD2wqvjGGAgOAwCGWySYXfYoxt00IJkTF+8Lb57DwOb3Aa0o9CApepiYQ==} - - '@mapbox/hast-util-table-cell-style@0.2.1': - resolution: {integrity: sha512-LyQz4XJIdCdY/+temIhD/Ed0x/p4GAOUycpFSEK2Ads1CPKZy6b7V/2ROEtQiLLQ8soIs0xe/QAoR6kwpyW/yw==} - engines: {node: '>=12'} - - '@mdx-js/mdx@2.3.0': - resolution: {integrity: sha512-jLuwRlz8DQfQNiUCJR50Y09CGPq3fLtmtUQfVrj79E0JWu3dvsVcxVIcfhR5h0iXu+/z++zDrYeiJqifRynJkA==} - - '@mdx-js/react@2.3.0': - resolution: {integrity: sha512-zQH//gdOmuu7nt2oJR29vFhDv88oGPmVw6BggmrHeMI+xgEkp1B2dX9/bMBSYtK0dyLX/aOmesKS09g222K1/g==} - peerDependencies: - react: '>=16' - - '@napi-rs/simple-git-android-arm-eabi@0.1.19': - resolution: {integrity: sha512-XryEH/hadZ4Duk/HS/HC/cA1j0RHmqUGey3MsCf65ZS0VrWMqChXM/xlTPWuY5jfCc/rPubHaqI7DZlbexnX/g==} - engines: {node: '>= 10'} - cpu: [arm] - os: [android] - - '@napi-rs/simple-git-android-arm64@0.1.19': - resolution: {integrity: sha512-ZQ0cPvY6nV9p7zrR9ZPo7hQBkDAcY/CHj3BjYNhykeUCiSNCrhvwX+WEeg5on8M1j4d5jcI/cwVG2FslfiByUg==} - engines: {node: '>= 10'} - cpu: [arm64] - os: [android] - - '@napi-rs/simple-git-darwin-arm64@0.1.19': - resolution: {integrity: sha512-viZB5TYgjA1vH+QluhxZo0WKro3xBA+1xSzYx8mcxUMO5gnAoUMwXn0ZO/6Zy6pai+aGae+cj6XihGnrBRu3Pg==} - engines: {node: '>= 10'} - cpu: [arm64] - os: [darwin] - - '@napi-rs/simple-git-darwin-x64@0.1.19': - resolution: {integrity: sha512-6dNkzSNUV5X9rsVYQbpZLyJu4Gtkl2vNJ3abBXHX/Etk0ILG5ZasO3ncznIANZQpqcbn/QPHr49J2QYAXGoKJA==} - engines: {node: '>= 10'} - cpu: [x64] - os: [darwin] - - '@napi-rs/simple-git-freebsd-x64@0.1.19': - resolution: {integrity: sha512-sB9krVIchzd20FjI2ZZ8FDsTSsXLBdnwJ6CpeVyrhXHnoszfcqxt49ocZHujAS9lMpXq7i2Nv1EXJmCy4KdhwA==} - engines: {node: '>= 10'} - cpu: [x64] - os: [freebsd] - - '@napi-rs/simple-git-linux-arm-gnueabihf@0.1.19': - resolution: {integrity: sha512-6HPn09lr9N1n5/XKfP8Np53g4fEXVxOFqNkS6rTH3Rm1lZHdazTRH62RggXLTguZwjcE+MvOLvoTIoR5kAS8+g==} - engines: {node: '>= 10'} - cpu: [arm] - os: [linux] - - '@napi-rs/simple-git-linux-arm64-gnu@0.1.19': - resolution: {integrity: sha512-G0gISckt4cVDp3oh5Z6PV3GHJrJO6Z8bIS+9xA7vTtKdqB1i5y0n3cSFLlzQciLzhr+CajFD27doW4lEyErQ/Q==} - engines: {node: '>= 10'} - cpu: [arm64] - os: [linux] - - '@napi-rs/simple-git-linux-arm64-musl@0.1.19': - resolution: {integrity: sha512-OwTRF+H4IZYxmDFRi1IrLMfqbdIpvHeYbJl2X94NVsLVOY+3NUHvEzL3fYaVx5urBaMnIK0DD3wZLbcueWvxbA==} - engines: {node: '>= 10'} - cpu: [arm64] - os: [linux] - - '@napi-rs/simple-git-linux-powerpc64le-gnu@0.1.19': - resolution: {integrity: sha512-p7zuNNVyzpRvkCt2RIGv9FX/WPcPbZ6/FRUgUTZkA2WU33mrbvNqSi4AOqCCl6mBvEd+EOw5NU4lS9ORRJvAEg==} - engines: {node: '>= 10'} - cpu: [powerpc64le] - os: [linux] - - '@napi-rs/simple-git-linux-s390x-gnu@0.1.19': - resolution: {integrity: sha512-6N2vwJUPLiak8GLrS0a3is0gSb0UwI2CHOOqtvQxPmv+JVI8kn3vKiUscsktdDb0wGEPeZ8PvZs0y8UWix7K4g==} - engines: {node: '>= 10'} - cpu: [s390x] - os: [linux] - - '@napi-rs/simple-git-linux-x64-gnu@0.1.19': - resolution: {integrity: sha512-61YfeO1J13WK7MalLgP3QlV6of2rWnVw1aqxWkAgy/lGxoOFSJ4Wid6ANVCEZk4tJpPX/XNeneqkUz5xpeb2Cw==} - engines: {node: '>= 10'} - cpu: [x64] - os: [linux] - - '@napi-rs/simple-git-linux-x64-musl@0.1.19': - resolution: {integrity: sha512-cCTWNpMJnN3PrUBItWcs3dQKCydsIasbrS3laMzq8k7OzF93Zrp2LWDTPlLCO9brbBVpBzy2Qk5Xg9uAfe/Ukw==} - engines: {node: '>= 10'} - cpu: [x64] - os: [linux] - - '@napi-rs/simple-git-win32-arm64-msvc@0.1.19': - resolution: {integrity: sha512-sWavb1BjeLKKBA+PbTsRSSzVNfb7V/dOpaJvkgR5d2kWFn/AHmCZHSSj/3nyZdYf0BdDC+DIvqk3daAEZ6QMVw==} - engines: {node: '>= 10'} - cpu: [arm64] - os: [win32] - - '@napi-rs/simple-git-win32-x64-msvc@0.1.19': - resolution: {integrity: sha512-FmNuPoK4+qwaSCkp8lm3sJlrxk374enW+zCE5ZksXlZzj/9BDJAULJb5QUJ7o9Y8A/G+d8LkdQLPBE2Jaxe5XA==} - engines: {node: '>= 10'} - cpu: [x64] - os: [win32] - - '@napi-rs/simple-git@0.1.19': - resolution: {integrity: sha512-jMxvwzkKzd3cXo2EB9GM2ic0eYo2rP/BS6gJt6HnWbsDO1O8GSD4k7o2Cpr2YERtMpGF/MGcDfsfj2EbQPtrXw==} - engines: {node: '>= 10'} - - '@next/env@14.2.7': - resolution: {integrity: sha512-OTx9y6I3xE/eih+qtthppwLytmpJVPM5PPoJxChFsbjIEFXIayG0h/xLzefHGJviAa3Q5+Fd+9uYojKkHDKxoQ==} - - '@next/swc-darwin-arm64@14.2.7': - resolution: {integrity: sha512-UhZGcOyI9LE/tZL3h9rs/2wMZaaJKwnpAyegUVDGZqwsla6hMfeSj9ssBWQS9yA4UXun3pPhrFLVnw5KXZs3vw==} - engines: {node: '>= 10'} - cpu: [arm64] - os: [darwin] - - '@next/swc-darwin-x64@14.2.7': - resolution: {integrity: sha512-ys2cUgZYRc+CbyDeLAaAdZgS7N1Kpyy+wo0b/gAj+SeOeaj0Lw/q+G1hp+DuDiDAVyxLBCJXEY/AkhDmtihUTA==} - engines: {node: '>= 10'} - cpu: [x64] - os: [darwin] - - '@next/swc-linux-arm64-gnu@14.2.7': - resolution: {integrity: sha512-2xoWtE13sUJ3qrC1lwE/HjbDPm+kBQYFkkiVECJWctRASAHQ+NwjMzgrfqqMYHfMxFb5Wws3w9PqzZJqKFdWcQ==} - engines: {node: '>= 10'} - cpu: [arm64] - os: [linux] - - '@next/swc-linux-arm64-musl@14.2.7': - resolution: {integrity: sha512-+zJ1gJdl35BSAGpkCbfyiY6iRTaPrt3KTl4SF/B1NyELkqqnrNX6cp4IjjjxKpd64/7enI0kf6b9O1Uf3cL0pw==} - engines: {node: '>= 10'} - cpu: [arm64] - os: [linux] - - '@next/swc-linux-x64-gnu@14.2.7': - resolution: {integrity: sha512-m6EBqrskeMUzykBrv0fDX/28lWIBGhMzOYaStp0ihkjzIYJiKUOzVYD1gULHc8XDf5EMSqoH/0/TRAgXqpQwmw==} - engines: {node: '>= 10'} - cpu: [x64] - os: [linux] - - '@next/swc-linux-x64-musl@14.2.7': - resolution: {integrity: sha512-gUu0viOMvMlzFRz1r1eQ7Ql4OE+hPOmA7smfZAhn8vC4+0swMZaZxa9CSIozTYavi+bJNDZ3tgiSdMjmMzRJlQ==} - engines: {node: '>= 10'} - cpu: [x64] - os: [linux] - - '@next/swc-win32-arm64-msvc@14.2.7': - resolution: {integrity: sha512-PGbONHIVIuzWlYmLvuFKcj+8jXnLbx4WrlESYlVnEzDsa3+Q2hI1YHoXaSmbq0k4ZwZ7J6sWNV4UZfx1OeOlbQ==} - engines: {node: '>= 10'} - cpu: [arm64] - os: [win32] - - '@next/swc-win32-ia32-msvc@14.2.7': - resolution: {integrity: sha512-BiSY5umlx9ed5RQDoHcdbuKTUkuFORDqzYKPHlLeS+STUWQKWziVOn3Ic41LuTBvqE0TRJPKpio9GSIblNR+0w==} - engines: {node: '>= 10'} - cpu: [ia32] - os: [win32] - - '@next/swc-win32-x64-msvc@14.2.7': - resolution: {integrity: sha512-pxsI23gKWRt/SPHFkDEsP+w+Nd7gK37Hpv0ngc5HpWy2e7cKx9zR/+Q2ptAUqICNTecAaGWvmhway7pj/JLEWA==} - engines: {node: '>= 10'} - cpu: [x64] - os: [win32] - - '@nodelib/fs.scandir@2.1.5': - resolution: {integrity: sha512-vq24Bq3ym5HEQm2NKCr3yXDwjc7vTsEThRDnkp2DK9p1uqLR+DHurm/NOTo0KG7HYHU7eppKZj3MyqYuMBf62g==} - engines: {node: '>= 8'} - - '@nodelib/fs.stat@2.0.5': - resolution: {integrity: sha512-RkhPPp2zrqDAQA/2jNhnztcPAlv64XdhIp7a7454A5ovI7Bukxgt7MX7udwAu3zg1DcpPU0rz3VV1SeaqvY4+A==} - engines: {node: '>= 8'} - - '@nodelib/fs.walk@1.2.8': - resolution: {integrity: sha512-oGB+UxlgWcgQkgwo8GcEGwemoTFt3FIO9ababBmaGwXIoBKZ+GTy0pP185beGg7Llih/NSHSV2XAs1lnznocSg==} - engines: {node: '>= 8'} - - '@pkgjs/parseargs@0.11.0': - resolution: {integrity: sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg==} - engines: {node: '>=14'} - - '@popperjs/core@2.11.8': - resolution: {integrity: sha512-P1st0aksCrn9sGZhp8GMYwBnQsbvAWsZAX44oXNNvLHGqAOcoVxmjZiohstwQ7SqKnbR47akdNi+uleWD8+g6A==} - - '@swc/counter@0.1.3': - resolution: {integrity: sha512-e2BR4lsJkkRlKZ/qCHPw9ZaSxc0MVUd7gtbtaB7aMvHeJVYe8sOB8DBZkP2DtISHGSku9sCK6T6cnY0CtXrOCQ==} - - '@swc/helpers@0.5.5': - resolution: {integrity: sha512-KGYxvIOXcceOAbEk4bi/dVLEK9z8sZ0uBB3Il5b1rhfClSpcX0yfRO0KmTkqR2cnQDymwLB+25ZyMzICg/cm/A==} - - '@tanstack/query-core@5.52.2': - resolution: {integrity: sha512-9vvbFecK4A0nDnrc/ks41e3UHONF1DAnGz8Tgbxkl59QcvKWmc0ewhYuIKRh8NC4ja5LTHT9EH16KHbn2AIYWA==} - - '@tanstack/react-query@5.52.2': - resolution: {integrity: sha512-d4OwmobpP+6+SvuAxW1RzAY95Pv87Gu+0GjtErzFOUXo+n0FGcwxKvzhswCsXKxsgnAr3bU2eJ2u+GXQAutkCQ==} - peerDependencies: - react: ^18 || ^19 - - '@tanstack/react-virtual@3.10.5': - resolution: {integrity: sha512-PP6QeixGyNli7edy6CmjYX9CaJiqkWzaVx5NmSnBMjjD4WOwXDjX+5JM0sNXpUjJ2gIRFl8Sno/KlZ6X1dbRfg==} - peerDependencies: - react: ^16.8.0 || ^17.0.0 || ^18.0.0 - react-dom: ^16.8.0 || ^17.0.0 || ^18.0.0 - - '@tanstack/virtual-core@3.10.5': - resolution: {integrity: sha512-WlJp8CipNzBz8Q4g159uMfswYHZ8p1+xJwLBdnbBTcSSu0zVoY6i27Suw5J0Y88YBnJ9jHR8jJMH/qSuZWWfNw==} - - '@theguild/remark-mermaid@0.0.5': - resolution: {integrity: sha512-e+ZIyJkEv9jabI4m7q29wZtZv+2iwPGsXJ2d46Zi7e+QcFudiyuqhLhHG/3gX3ZEB+hxTch+fpItyMS8jwbIcw==} - peerDependencies: - react: ^18.2.0 - - '@theguild/remark-npm2yarn@0.2.1': - resolution: {integrity: sha512-jUTFWwDxtLEFtGZh/TW/w30ySaDJ8atKWH8dq2/IiQF61dPrGfETpl0WxD0VdBfuLOeU14/kop466oBSRO/5CA==} - - '@types/acorn@4.0.6': - resolution: {integrity: sha512-veQTnWP+1D/xbxVrPC3zHnCZRjSrKfhbMUlEA43iMZLu7EsnTtkJklIuwrCPbOi8YkvDQAiW05VQQFvvz9oieQ==} - - '@types/d3-scale-chromatic@3.0.3': - resolution: {integrity: sha512-laXM4+1o5ImZv3RpFAsTRn3TEkzqkytiOY0Dz0sq5cnd1dtNlk6sHLon4OvqaiJb28T0S/TdsBI3Sjsy+keJrw==} - - '@types/d3-scale@4.0.8': - resolution: {integrity: sha512-gkK1VVTr5iNiYJ7vWDI+yUFFlszhNMtVeneJ6lUTKPjprsvLLI9/tgEGiXJOnlINJA8FyA88gfnQsHbybVZrYQ==} - - '@types/d3-time@3.0.3': - resolution: {integrity: sha512-2p6olUZ4w3s+07q3Tm2dbiMZy5pCDfYwtLXXHUnVzXgQlZ/OyPtUz6OL382BkOuGlLXqfT+wqv8Fw2v8/0geBw==} - - '@types/debug@4.1.12': - resolution: {integrity: sha512-vIChWdVG3LG1SMxEvI/AK+FWJthlrqlTu7fbrlywTkkaONwk/UAGaULXRlf8vkzFBLVm0zkMdCquhL5aOjhXPQ==} - - '@types/estree-jsx@1.0.5': - resolution: {integrity: sha512-52CcUVNFyfb1A2ALocQw/Dd1BQFNmSdkuC3BkZ6iqhdMfQz7JWOFRuJFloOzjk+6WijU56m9oKXFAXc7o3Towg==} - - '@types/estree@1.0.5': - resolution: {integrity: sha512-/kYRxGDLWzHOB7q+wtSUQlFrtcdUccpfy+X+9iMBpHK8QLLhx2wIPYuS5DYtR9Wa/YlZAbIovy7qVdB1Aq6Lyw==} - - '@types/hast@2.3.10': - resolution: {integrity: sha512-McWspRw8xx8J9HurkVBfYj0xKoE25tOFlHGdx4MJ5xORQrMGZNqJhVQWaIbm6Oyla5kYOXtDiopzKRJzEOkwJw==} - - '@types/hast@3.0.4': - resolution: {integrity: sha512-WPs+bbQw5aCj+x6laNGWLH3wviHtoCv/P3+otBhbOhJgG8qtpdAMlTCxLtsTWA7LH1Oh/bFCHsBn0TPS5m30EQ==} - - '@types/hoist-non-react-statics@3.3.5': - resolution: {integrity: sha512-SbcrWzkKBw2cdwRTwQAswfpB9g9LJWfjtUeW/jvNwbhC8cpmmNYVePa+ncbUe0rGTQ7G3Ff6mYUN2VMfLVr+Sg==} - - '@types/js-yaml@4.0.9': - resolution: {integrity: sha512-k4MGaQl5TGo/iipqb2UDG2UwjXziSWkh0uysQelTlJpX1qGlpUZYm8PnO4DxG1qBomtJUdYJ6qR6xdIah10JLg==} - - '@types/katex@0.16.7': - resolution: {integrity: sha512-HMwFiRujE5PjrgwHQ25+bsLJgowjGjm5Z8FVSf0N6PwgJrwxH0QxzHYDcKsTfV3wva0vzrpqMTJS2jXPr5BMEQ==} - - '@types/lodash@4.17.7': - resolution: {integrity: sha512-8wTvZawATi/lsmNu10/j2hk1KEP0IvjubqPE3cu1Xz7xfXXt5oCq3SNUz4fMIP4XGF9Ky+Ue2tBA3hcS7LSBlA==} - - '@types/mdast@3.0.15': - resolution: {integrity: sha512-LnwD+mUEfxWMa1QpDraczIn6k0Ee3SMicuYSSzS6ZYl2gKS09EClnJYGd8Du6rfc5r/GZEk5o1mRb8TaTj03sQ==} - - '@types/mdast@4.0.4': - resolution: {integrity: sha512-kGaNbPh1k7AFzgpud/gMdvIm5xuECykRR+JnWKQno9TAXVa6WIVCGTPvYGekIDL4uwCZQSYbUxNBSb1aUo79oA==} - - '@types/mdx@2.0.13': - resolution: {integrity: sha512-+OWZQfAYyio6YkJb3HLxDrvnx6SWWDbC0zVPfBRzUk0/nqoDyf6dNxQi3eArPe8rJ473nobTMQ/8Zk+LxJ+Yuw==} - - '@types/ms@0.7.34': - resolution: {integrity: sha512-nG96G3Wp6acyAgJqGasjODb+acrI7KltPiRxzHPXnP3NgI28bpQDRv53olbqGXbfcgF5aiiHmO3xpwEpS5Ld9g==} - - '@types/node@22.1.0': - resolution: {integrity: sha512-AOmuRF0R2/5j1knA3c6G3HOk523Ga+l+ZXltX8SF1+5oqcXijjfTd8fY3XRZqSihEu9XhtQnKYLmkFaoxgsJHw==} - - '@types/numeral@2.0.5': - resolution: {integrity: sha512-kH8I7OSSwQu9DS9JYdFWbuvhVzvFRoCPCkGxNwoGgaPeDfEPJlcxNvEOypZhQ3XXHsGbfIuYcxcJxKUfJHnRfw==} - - '@types/parse-json@4.0.2': - resolution: {integrity: sha512-dISoDXWWQwUquiKsyZ4Ng+HX2KsPL7LyHKHQwgGFEA3IaKac4Obd+h2a/a6waisAoepJlBcx9paWqjA8/HVjCw==} - - '@types/parse5@5.0.3': - resolution: {integrity: sha512-kUNnecmtkunAoQ3CnjmMkzNU/gtxG8guhi+Fk2U/kOpIKjIMKnXGp4IJCgQJrXSgMsWYimYG4TGjz/UzbGEBTw==} - - '@types/prismjs@1.26.4': - resolution: {integrity: sha512-rlAnzkW2sZOjbqZ743IHUhFcvzaGbqijwOu8QZnZCjfQzBqFE3s4lOTJEsxikImav9uzz/42I+O7YUs1mWgMlg==} - - '@types/prop-types@15.7.12': - resolution: {integrity: sha512-5zvhXYtRNRluoE/jAp4GVsSduVUzNWKkOZrCDBWYtE7biZywwdC2AcEzg+cSMLFRfVgeAFqpfNabiPjxFddV1Q==} - - '@types/react-dom@18.3.0': - resolution: {integrity: sha512-EhwApuTmMBmXuFOikhQLIBUn6uFg81SwLMOAUgodJF14SOBOCMdU04gDoYi0WOJJHD144TL32z4yDqCW3dnkQg==} - - '@types/react-window@1.8.8': - resolution: {integrity: sha512-8Ls660bHR1AUA2kuRvVG9D/4XpRC6wjAaPT9dil7Ckc76eP9TKWZwwmgfq8Q1LANX3QNDnoU4Zp48A3w+zK69Q==} - - '@types/react@18.3.4': - resolution: {integrity: sha512-J7W30FTdfCxDDjmfRM+/JqLHBIyl7xUIp9kwK637FGmY7+mkSFSe6L4jpZzhj5QMfLssSDP4/i75AKkrdC7/Jw==} - - '@types/refractor@3.4.1': - resolution: {integrity: sha512-wYuorIiCTSuvRT9srwt+taF6mH/ww+SyN2psM0sjef2qW+sS8GmshgDGTEDgWB1sTVGgYVE6EK7dBA2MxQxibg==} - - '@types/unist@2.0.11': - resolution: {integrity: sha512-CmBKiL6NNo/OqgmMn95Fk9Whlp2mtvIv+KNpQKN2F4SjvrEesubTRWGYSg+BnWZOnlCaSTU1sMpsBOzgbYhnsA==} - - '@types/unist@3.0.3': - resolution: {integrity: sha512-ko/gIFJRv177XgZsZcBwnqJN5x/Gien8qNOn0D5bQU/zAzVf9Zt3BlcUiLqhV9y4ARk0GbT3tnUiPNgnTXzc/Q==} - - '@types/use-sync-external-store@0.0.3': - resolution: {integrity: sha512-EwmlvuaxPNej9+T4v5AuBPJa2x2UOJVdjCtDHgcDqitUeOtjnJKJ+apYjVcAoBEMjKW1VVFGZLUb5+qqa09XFA==} - - '@ungap/structured-clone@1.2.0': - resolution: {integrity: sha512-zuVdFrMJiuCDQUMCzQaD6KL28MjnqqN8XnAqiEq9PNm/hCPTSGfrXCOfwj1ow4LFb/tNymJPwsNbVePc1xFqrQ==} - - '@vercel/analytics@1.3.1': - resolution: {integrity: sha512-xhSlYgAuJ6Q4WQGkzYTLmXwhYl39sWjoMA3nHxfkvG+WdBT25c563a7QhwwKivEOZtPJXifYHR1m2ihoisbWyA==} - peerDependencies: - next: '>= 13' - react: ^18 || ^19 - peerDependenciesMeta: - next: - optional: true - react: - optional: true - - acorn-jsx@5.3.2: - resolution: {integrity: sha512-rq9s+JNhf0IChjtDXxllJ7g41oZk5SlXtp0LHwyA5cejwn7vKmKp4pPri6YEePv2PU65sAsegbXtIinmDFDXgQ==} - peerDependencies: - acorn: ^6.0.0 || ^7.0.0 || ^8.0.0 - - acorn@8.12.1: - resolution: {integrity: sha512-tcpGyI9zbizT9JbV6oYE477V6mTlXvvi0T0G3SNIYE2apm/G5huBa1+K89VGeovbg+jycCrfhl3ADxErOuO6Jg==} - engines: {node: '>=0.4.0'} - hasBin: true - - ansi-regex@5.0.1: - resolution: {integrity: sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==} - engines: {node: '>=8'} - - ansi-regex@6.0.1: - resolution: {integrity: sha512-n5M855fKb2SsfMIiFFoVrABHJC8QtHwVx+mHWP3QcEqBHYienj5dHSgjbxtC0WEZXYt4wcD6zrQElDPhFuZgfA==} - engines: {node: '>=12'} - - ansi-sequence-parser@1.1.1: - resolution: {integrity: sha512-vJXt3yiaUL4UU546s3rPXlsry/RnM730G1+HkpKE012AN0sx1eOrxSu95oKDIonskeLTijMgqWZ3uDEe3NFvyg==} - - ansi-styles@3.2.1: - resolution: {integrity: sha512-VT0ZI6kZRdTh8YyJw3SMbYm/u+NqfsAxEpWO0Pf9sq8/e94WxxOpPKx9FR1FlyCtOVDNOQ+8ntlqFxiRc+r5qA==} - engines: {node: '>=4'} - - ansi-styles@4.3.0: - resolution: {integrity: sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==} - engines: {node: '>=8'} - - ansi-styles@6.2.1: - resolution: {integrity: sha512-bN798gFfQX+viw3R7yrGWRqnrN2oRkEkUjjl4JNn4E8GxxbjtG3FbrEIIY3l8/hrwUwIeCZvi4QuOTP4MErVug==} - engines: {node: '>=12'} - - any-promise@1.3.0: - resolution: {integrity: sha512-7UvmKalWRt1wgjL1RrGxoSJW/0QZFIegpeGvZG9kjp8vrRu55XTHbwnqq2GpXm9uLbcuhxm3IqX9OB4MZR1b2A==} - - anymatch@3.1.3: - resolution: {integrity: sha512-KMReFUr0B4t+D+OBkjR3KYqvocp2XaSzO55UcB6mgQMd3KbcE+mWTyvVV7D/zsdEbNnV6acZUutkiHQXvTr1Rw==} - engines: {node: '>= 8'} - - arch@2.2.0: - resolution: {integrity: sha512-Of/R0wqp83cgHozfIYLbBMnej79U/SVGOOyuB3VVFv1NRM/PSFMK12x9KVtiYzJqmnU5WR2qp0Z5rHb7sWGnFQ==} - - arg@1.0.0: - resolution: {integrity: sha512-Wk7TEzl1KqvTGs/uyhmHO/3XLd3t1UeU4IstvPXVzGPM522cTjqjNZ99esCkcL52sjqjo8e8CTBcWhkxvGzoAw==} - - arg@5.0.2: - resolution: {integrity: sha512-PYjyFOLKQ9y57JvQ6QLo8dAgNqswh8M1RMJYdQduT6xbWSgK36P/Z/v+p888pM69jMMfS8Xd8F6I1kQ/I9HUGg==} - - argparse@1.0.10: - resolution: {integrity: sha512-o5Roy6tNG4SL/FOkCAN6RzjiakZS25RLYFrcMttJqbdd8BWrnA+fGz57iN5Pb06pvBGvl5gQ0B48dJlslXvoTg==} - - argparse@2.0.1: - resolution: {integrity: sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==} - - aria-hidden@1.2.4: - resolution: {integrity: sha512-y+CcFFwelSXpLZk/7fMB2mUbGtX9lKycf1MWJ7CaTIERyitVlyQx6C+sxcROU2BAJ24OiZyK+8wj2i8AlBoS3A==} - engines: {node: '>=10'} - - astring@1.9.0: - resolution: {integrity: sha512-LElXdjswlqjWrPpJFg1Fx4wpkOCxj1TDHlSV4PlaRxHGWko024xICaa97ZkMfs6DRKlCguiAI+rbXv5GWwXIkg==} - hasBin: true - - asynckit@0.4.0: - resolution: {integrity: sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q==} - - attr-accept@2.2.2: - resolution: {integrity: sha512-7prDjvt9HmqiZ0cl5CRjtS84sEyhsHP2coDkaZKRKVfCDo9s7iw7ChVmar78Gu9pC4SoR/28wFu/G5JJhTnqEg==} - engines: {node: '>=4'} - - autoprefixer@10.4.20: - resolution: {integrity: sha512-XY25y5xSv/wEoqzDyXXME4AFfkZI0P23z6Fs3YgymDnKJkCGOnkL0iTxCa85UTqaSgfcqyf3UA6+c7wUvx/16g==} - engines: {node: ^10 || ^12 || >=14} - hasBin: true - peerDependencies: - postcss: ^8.1.0 - - axios@1.7.5: - resolution: {integrity: sha512-fZu86yCo+svH3uqJ/yTdQ0QHpQu5oL+/QE+QPSv6BZSkDAoky9vytxp7u5qk83OJFS3kEBcesWni9WTZAv3tSw==} - - babel-plugin-macros@3.1.0: - resolution: {integrity: sha512-Cg7TFGpIr01vOQNODXOOaGz2NpCU5gl8x1qJFbb6hbZxR7XrcE2vtbAsTAbJ7/xwJtUuJEw8K8Zr/AE0LHlesg==} - engines: {node: '>=10', npm: '>=6'} - - bail@1.0.5: - resolution: {integrity: sha512-xFbRxM1tahm08yHBP16MMjVUAvDaBMD38zsM9EMAUN61omwLmKlOpB/Zku5QkjZ8TZ4vn53pj+t518cH0S03RQ==} - - bail@2.0.2: - resolution: {integrity: sha512-0xO6mYd7JB2YesxDKplafRpsiOzPt9V02ddPCLbY1xYGPOX24NTyN50qnUxgCPcSoYMhKpAuBTjQoRZCAkUDRw==} - - balanced-match@1.0.2: - resolution: {integrity: sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==} - - binary-extensions@2.3.0: - resolution: {integrity: sha512-Ceh+7ox5qe7LJuLHoY0feh3pHuUDHAcRUeyL2VYghZwfpkNIy/+8Ocg0a3UuSoYzavmylwuLWQOf3hl0jjMMIw==} - engines: {node: '>=8'} - - brace-expansion@2.0.1: - resolution: {integrity: sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==} - - braces@3.0.3: - resolution: {integrity: sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==} - engines: {node: '>=8'} - - browserslist@4.23.3: - resolution: {integrity: sha512-btwCFJVjI4YWDNfau8RhZ+B1Q/VLoUITrm3RlP6y1tYGWIOa+InuYiRGXUBXo8nA1qKmHMyLB/iVQg5TT4eFoA==} - engines: {node: ^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7} - hasBin: true - - busboy@1.6.0: - resolution: {integrity: sha512-8SFQbg/0hQ9xy3UNTB0YEnsNBbWfhf7RtnzpL7TkBiTBRfrQ9Fxcnz7VJsleJpyp6rVLvXiuORqjlHi5q+PYuA==} - engines: {node: '>=10.16.0'} - - callsites@3.1.0: - resolution: {integrity: sha512-P8BjAsXvZS+VIDUI11hHCQEv74YT67YUi5JJFNWIqL235sBmjX4+qx9Muvls5ivyNENctx46xQLQ3aTuE7ssaQ==} - engines: {node: '>=6'} - - camelcase-css@2.0.1: - resolution: {integrity: sha512-QOSvevhslijgYwRx6Rv7zKdMF8lbRmx+uQGx2+vDc+KI/eBnsy9kit5aj23AgGu3pa4t9AgwbnXWqS+iOY+2aA==} - engines: {node: '>= 6'} - - caniuse-lite@1.0.30001653: - resolution: {integrity: sha512-XGWQVB8wFQ2+9NZwZ10GxTYC5hk0Fa+q8cSkr0tgvMhYhMHP/QC+WTgrePMDBWiWc/pV+1ik82Al20XOK25Gcw==} - - ccount@1.1.0: - resolution: {integrity: sha512-vlNK021QdI7PNeiUh/lKkC/mNHHfV0m/Ad5JoI0TYtlBnJAslM/JIkm/tGC88bkLIwO6OQ5uV6ztS6kVAtCDlg==} - - ccount@2.0.1: - resolution: {integrity: sha512-eyrF0jiFpY+3drT6383f1qhkbGsLSifNAjA61IUjZjmLCWjItY6LB9ft9YhoDgwfmclB2zhu51Lc7+95b8NRAg==} - - chalk@2.3.0: - resolution: {integrity: sha512-Az5zJR2CBujap2rqXGaJKaPHyJ0IrUimvYNX+ncCy8PJP4ltOGTrHUIo097ZaL2zMeKYpiCdqDvS6zdrTFok3Q==} - engines: {node: '>=4'} - - chalk@2.4.2: - resolution: {integrity: sha512-Mti+f9lpJNcwF4tWV8/OrTTtF1gZi+f8FqlyAdouralcFWFQWF2+NgCHShjkCb+IFBLq9buZwE1xckQU4peSuQ==} - engines: {node: '>=4'} - - character-entities-html4@1.1.4: - resolution: {integrity: sha512-HRcDxZuZqMx3/a+qrzxdBKBPUpxWEq9xw2OPZ3a/174ihfrQKVsFhqtthBInFy1zZ9GgZyFXOatNujm8M+El3g==} - - character-entities-html4@2.1.0: - resolution: {integrity: sha512-1v7fgQRj6hnSwFpq1Eu0ynr/CDEw0rXo2B61qXrLNdHZmPKgb7fqS1a2JwF0rISo9q77jDI8VMEHoApn8qDoZA==} - - character-entities-legacy@1.1.4: - resolution: {integrity: sha512-3Xnr+7ZFS1uxeiUDvV02wQ+QDbc55o97tIV5zHScSPJpcLm/r0DFPcoY3tYRp+VZukxuMeKgXYmsXQHO05zQeA==} - - character-entities-legacy@3.0.0: - resolution: {integrity: sha512-RpPp0asT/6ufRm//AJVwpViZbGM/MkjQFxJccQRHmISF/22NBtsHqAWmL+/pmkPWoIUJdWyeVleTl1wydHATVQ==} - - character-entities@1.2.4: - resolution: {integrity: sha512-iBMyeEHxfVnIakwOuDXpVkc54HijNgCyQB2w0VfGQThle6NXn50zU6V/u+LDhxHcDUPojn6Kpga3PTAD8W1bQw==} - - character-entities@2.0.2: - resolution: {integrity: sha512-shx7oQ0Awen/BRIdkjkvz54PnEEI/EjwXDSIZp86/KKdbafHh1Df/RYGBhn4hbe2+uKC9FnT5UCEdyPz3ai9hQ==} - - character-reference-invalid@1.1.4: - resolution: {integrity: sha512-mKKUkUbhPpQlCOfIuZkvSEgktjPFIsZKRRbC6KWVEMvlzblj3i3asQv5ODsrwt0N3pHAEvjP8KTQPHkp0+6jOg==} - - character-reference-invalid@2.0.1: - resolution: {integrity: sha512-iBZ4F4wRbyORVsu0jPV7gXkOsGYjGHPmAyv+HiHG8gi5PtC9KI2j1+v8/tlibRvjoWX027ypmG/n0HtO5t7unw==} - - chokidar@3.6.0: - resolution: {integrity: sha512-7VT13fmjotKpGipCW9JEQAusEPE+Ei8nl6/g4FBAmIm0GOOLMua9NDDo/DWp0ZAxCr3cPq5ZpBqmPAQgDda2Pw==} - engines: {node: '>= 8.10.0'} - - chroma-js@2.6.0: - resolution: {integrity: sha512-BLHvCB9s8Z1EV4ethr6xnkl/P2YRFOGqfgvuMG/MyCbZPrTA+NeiByY6XvgF0zP4/2deU2CXnWyMa3zu1LqQ3A==} - - classnames@2.5.1: - resolution: {integrity: sha512-saHYOzhIQs6wy2sVxTM6bUDsQO4F50V9RQ22qBpEdCW+I+/Wmke2HOl6lS6dTpdxVhb88/I6+Hs+438c3lfUow==} - - client-only@0.0.1: - resolution: {integrity: sha512-IV3Ou0jSMzZrd3pZ48nLkT9DA7Ag1pnPzaiQhpW7c3RbcqqzvzzVu+L8gfqMp/8IM2MQtSiqaCxrrcfu8I8rMA==} - - clipboardy@1.2.2: - resolution: {integrity: sha512-16KrBOV7bHmHdxcQiCvfUFYVFyEah4FI8vYT1Fr7CGSA4G+xBWMEfUEQJS1hxeHGtI9ju1Bzs9uXSbj5HZKArw==} - engines: {node: '>=4'} - - clsx@2.1.1: - resolution: {integrity: sha512-eYm0QWBtUrBWZWG0d386OGAw16Z995PiOVo2B7bjWSbHedGl5e0ZWaq65kOGgUSNesEIDkB9ISbTg/JK9dhCZA==} - engines: {node: '>=6'} - - collapse-white-space@1.0.6: - resolution: {integrity: sha512-jEovNnrhMuqyCcjfEJA56v0Xq8SkIoPKDyaHahwo3POf4qcSXqMYuwNcOTzp74vTsR9Tn08z4MxWqAhcekogkQ==} - - color-convert@1.9.3: - resolution: {integrity: sha512-QfAUtd+vFdAtFQcC8CCyYt1fYWxSqAiK2cSD6zDB8N3cpsEBAvRxp9zOGg6G/SHHJYAT88/az/IuDGALsNVbGg==} - - color-convert@2.0.1: - resolution: {integrity: sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==} - engines: {node: '>=7.0.0'} - - color-name@1.1.3: - resolution: {integrity: sha512-72fSenhMw2HZMTVHeCA9KCmpEIbzWiQsjN+BHcBbS9vr1mtt+vJjPdksIBNUmKAW8TFUDPJK5SUU3QhE9NEXDw==} - - color-name@1.1.4: - resolution: {integrity: sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==} - - color-string@1.9.1: - resolution: {integrity: sha512-shrVawQFojnZv6xM40anx4CkoDP+fZsw/ZerEMsW/pyzsRbElpsL/DBVW7q3ExxwusdNXI3lXpuhEZkzs8p5Eg==} - - color@4.2.3: - resolution: {integrity: sha512-1rXeuUUiGGrykh+CeBdu5Ie7OJwinCgQY0bc7GCRxy5xVHy+moaqkpL/jqQq0MtQOeYcrqEz4abc5f0KtU7W4A==} - engines: {node: '>=12.5.0'} - - combined-stream@1.0.8: - resolution: {integrity: sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==} - engines: {node: '>= 0.8'} - - comma-separated-tokens@1.0.8: - resolution: {integrity: sha512-GHuDRO12Sypu2cV70d1dkA2EUmXHgntrzbpvOB+Qy+49ypNfGgFQIC2fhhXbnyrJRynDCAARsT7Ou0M6hirpfw==} - - comma-separated-tokens@2.0.3: - resolution: {integrity: sha512-Fu4hJdvzeylCfQPp9SGWidpzrMs7tTrlu6Vb8XGaRGck8QSNZJJp538Wrb60Lax4fPwR64ViY468OIUTbRlGZg==} - - commander@4.1.1: - resolution: {integrity: sha512-NOKm8xhkzAjzFx8B2v5OAHT+u5pRQc2UCa2Vq9jYL/31o2wi9mxBA7LIFs3sV5VSC49z6pEhfbMULvShKj26WA==} - engines: {node: '>= 6'} - - commander@7.2.0: - resolution: {integrity: sha512-QrWXB+ZQSVPmIWIhtEO9H+gwHaMGYiF5ChvoJ+K9ZGHG/sVsa6yiesAD1GC/x46sET00Xlwo1u49RVVVzvcSkw==} - engines: {node: '>= 10'} - - commander@8.3.0: - resolution: {integrity: sha512-OkTL9umf+He2DZkUq8f8J9of7yL6RJKI24dVITBmNfZBmri9zYZQrKkuXiKhyfPSu8tUhnVBB1iKXevvnlR4Ww==} - engines: {node: '>= 12'} - - compute-scroll-into-view@3.1.0: - resolution: {integrity: sha512-rj8l8pD4bJ1nx+dAkMhV1xB5RuZEyVysfxJqB1pRchh1KVvwOv9b7CGB8ZfjTImVv2oF+sYMUkMZq6Na5Ftmbg==} - - convert-source-map@1.9.0: - resolution: {integrity: sha512-ASFBup0Mz1uyiIjANan1jzLQami9z1PoYSZCiiYW2FczPbenXc45FZdBZLzOT+r6+iciuEModtmCti+hjaAk0A==} - - cose-base@1.0.3: - resolution: {integrity: sha512-s9whTXInMSgAp/NVXVNuVxVKzGH2qck3aQlVHxDCdAEPgtMKwc4Wq6/QKhgdEdgbLSi9rBTAcPoRa6JpiG4ksg==} - - cosmiconfig@7.1.0: - resolution: {integrity: sha512-AdmX6xUzdNASswsFtmwSt7Vj8po9IuqXm0UXz7QKPuEUmPB4XyjGfaAr2PSuELMwkRMVH1EpIkX5bTZGRB3eCA==} - engines: {node: '>=10'} - - cross-spawn@5.1.0: - resolution: {integrity: sha512-pTgQJ5KC0d2hcY8eyL1IzlBPYjTkyH72XRZPnLyKus2mBfNjQs3klqbJU2VILqZryAZUt9JOb3h/mWMy23/f5A==} - - cross-spawn@7.0.3: - resolution: {integrity: sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==} - engines: {node: '>= 8'} - - css-box-model@1.2.1: - resolution: {integrity: sha512-a7Vr4Q/kd/aw96bnJG332W9V9LkJO69JRcaCYDUqjp6/z0w6VcZjgAcTbgFxEPfBgdnAwlh3iwu+hLopa+flJw==} - - cssesc@3.0.0: - resolution: {integrity: sha512-/Tb/JcjK111nNScGob5MNtsntNM1aCNUDipB/TkwZFhyDrrE47SOx/18wF2bbjgc3ZzCSKW1T5nt5EbFoAz/Vg==} - engines: {node: '>=4'} - hasBin: true - - csstype@3.1.3: - resolution: {integrity: sha512-M1uQkMl8rQK/szD0LNhtqxIPLpimGm8sOBwU7lLnCpSbTyY3yeU1Vc7l4KT5zT4s/yOxHH5O7tIuuLOCnLADRw==} - - cytoscape-cose-bilkent@4.1.0: - resolution: {integrity: sha512-wgQlVIUJF13Quxiv5e1gstZ08rnZj2XaLHGoFMYXz7SkNfCDOOteKBE6SYRfA9WxxI/iBc3ajfDoc6hb/MRAHQ==} - peerDependencies: - cytoscape: ^3.2.0 - - cytoscape@3.30.2: - resolution: {integrity: sha512-oICxQsjW8uSaRmn4UK/jkczKOqTrVqt5/1WL0POiJUT2EKNc9STM4hYFHv917yu55aTBMFNRzymlJhVAiWPCxw==} - engines: {node: '>=0.10'} - - d3-array@2.12.1: - resolution: {integrity: sha512-B0ErZK/66mHtEsR1TkPEEkwdy+WDesimkM5gpZr5Dsg54BiTA5RXtYW5qTLIAcekaS9xfZrzBLF/OAkB3Qn1YQ==} - - d3-array@3.2.4: - resolution: {integrity: sha512-tdQAmyA18i4J7wprpYq8ClcxZy3SC31QMeByyCFyRt7BVHdREQZ5lpzoe5mFEYZUWe+oq8HBvk9JjpibyEV4Jg==} - engines: {node: '>=12'} - - d3-axis@3.0.0: - resolution: {integrity: sha512-IH5tgjV4jE/GhHkRV0HiVYPDtvfjHQlQfJHs0usq7M30XcSBvOotpmH1IgkcXsO/5gEQZD43B//fc7SRT5S+xw==} - engines: {node: '>=12'} - - d3-brush@3.0.0: - resolution: {integrity: sha512-ALnjWlVYkXsVIGlOsuWH1+3udkYFI48Ljihfnh8FZPF2QS9o+PzGLBslO0PjzVoHLZ2KCVgAM8NVkXPJB2aNnQ==} - engines: {node: '>=12'} - - d3-chord@3.0.1: - resolution: {integrity: sha512-VE5S6TNa+j8msksl7HwjxMHDM2yNK3XCkusIlpX5kwauBfXuyLAtNg9jCp/iHH61tgI4sb6R/EIMWCqEIdjT/g==} - engines: {node: '>=12'} - - d3-color@3.1.0: - resolution: {integrity: sha512-zg/chbXyeBtMQ1LbD/WSoW2DpC3I0mpmPdW+ynRTj/x2DAWYrIY7qeZIHidozwV24m4iavr15lNwIwLxRmOxhA==} - engines: {node: '>=12'} - - d3-contour@4.0.2: - resolution: {integrity: sha512-4EzFTRIikzs47RGmdxbeUvLWtGedDUNkTcmzoeyg4sP/dvCexO47AaQL7VKy/gul85TOxw+IBgA8US2xwbToNA==} - engines: {node: '>=12'} - - d3-delaunay@6.0.4: - resolution: {integrity: sha512-mdjtIZ1XLAM8bm/hx3WwjfHt6Sggek7qH043O8KEjDXN40xi3vx/6pYSVTwLjEgiXQTbvaouWKynLBiUZ6SK6A==} - engines: {node: '>=12'} - - d3-dispatch@3.0.1: - resolution: {integrity: sha512-rzUyPU/S7rwUflMyLc1ETDeBj0NRuHKKAcvukozwhshr6g6c5d8zh4c2gQjY2bZ0dXeGLWc1PF174P2tVvKhfg==} - engines: {node: '>=12'} - - d3-drag@3.0.0: - resolution: {integrity: sha512-pWbUJLdETVA8lQNJecMxoXfH6x+mO2UQo8rSmZ+QqxcbyA3hfeprFgIT//HW2nlHChWeIIMwS2Fq+gEARkhTkg==} - engines: {node: '>=12'} - - d3-dsv@3.0.1: - resolution: {integrity: sha512-UG6OvdI5afDIFP9w4G0mNq50dSOsXHJaRE8arAS5o9ApWnIElp8GZw1Dun8vP8OyHOZ/QJUKUJwxiiCCnUwm+Q==} - engines: {node: '>=12'} - hasBin: true - - d3-ease@3.0.1: - resolution: {integrity: sha512-wR/XK3D3XcLIZwpbvQwQ5fK+8Ykds1ip7A2Txe0yxncXSdq1L9skcG7blcedkOX+ZcgxGAmLX1FrRGbADwzi0w==} - engines: {node: '>=12'} - - d3-fetch@3.0.1: - resolution: {integrity: sha512-kpkQIM20n3oLVBKGg6oHrUchHM3xODkTzjMoj7aWQFq5QEM+R6E4WkzT5+tojDY7yjez8KgCBRoj4aEr99Fdqw==} - engines: {node: '>=12'} - - d3-force@3.0.0: - resolution: {integrity: sha512-zxV/SsA+U4yte8051P4ECydjD/S+qeYtnaIyAs9tgHCqfguma/aAQDjo85A9Z6EKhBirHRJHXIgJUlffT4wdLg==} - engines: {node: '>=12'} - - d3-format@3.1.0: - resolution: {integrity: sha512-YyUI6AEuY/Wpt8KWLgZHsIU86atmikuoOmCfommt0LYHiQSPjvX2AcFc38PX0CBpr2RCyZhjex+NS/LPOv6YqA==} - engines: {node: '>=12'} - - d3-geo@3.1.1: - resolution: {integrity: sha512-637ln3gXKXOwhalDzinUgY83KzNWZRKbYubaG+fGVuc/dxO64RRljtCTnf5ecMyE1RIdtqpkVcq0IbtU2S8j2Q==} - engines: {node: '>=12'} - - d3-hierarchy@3.1.2: - resolution: {integrity: sha512-FX/9frcub54beBdugHjDCdikxThEqjnR93Qt7PvQTOHxyiNCAlvMrHhclk3cD5VeAaq9fxmfRp+CnWw9rEMBuA==} - engines: {node: '>=12'} - - d3-interpolate@3.0.1: - resolution: {integrity: sha512-3bYs1rOD33uo8aqJfKP3JWPAibgw8Zm2+L9vBKEHJ2Rg+viTR7o5Mmv5mZcieN+FRYaAOWX5SJATX6k1PWz72g==} - engines: {node: '>=12'} - - d3-path@1.0.9: - resolution: {integrity: sha512-VLaYcn81dtHVTjEHd8B+pbe9yHWpXKZUC87PzoFmsFrJqgFwDe/qxfp5MlfsfM1V5E/iVt0MmEbWQ7FVIXh/bg==} - - d3-path@3.1.0: - resolution: {integrity: sha512-p3KP5HCf/bvjBSSKuXid6Zqijx7wIfNW+J/maPs+iwR35at5JCbLUT0LzF1cnjbCHWhqzQTIN2Jpe8pRebIEFQ==} - engines: {node: '>=12'} - - d3-polygon@3.0.1: - resolution: {integrity: sha512-3vbA7vXYwfe1SYhED++fPUQlWSYTTGmFmQiany/gdbiWgU/iEyQzyymwL9SkJjFFuCS4902BSzewVGsHHmHtXg==} - engines: {node: '>=12'} - - d3-quadtree@3.0.1: - resolution: {integrity: sha512-04xDrxQTDTCFwP5H6hRhsRcb9xxv2RzkcsygFzmkSIOJy3PeRJP7sNk3VRIbKXcog561P9oU0/rVH6vDROAgUw==} - engines: {node: '>=12'} - - d3-random@3.0.1: - resolution: {integrity: sha512-FXMe9GfxTxqd5D6jFsQ+DJ8BJS4E/fT5mqqdjovykEB2oFbTMDVdg1MGFxfQW+FBOGoB++k8swBrgwSHT1cUXQ==} - engines: {node: '>=12'} - - d3-sankey@0.12.3: - resolution: {integrity: sha512-nQhsBRmM19Ax5xEIPLMY9ZmJ/cDvd1BG3UVvt5h3WRxKg5zGRbvnteTyWAbzeSvlh3tW7ZEmq4VwR5mB3tutmQ==} - - d3-scale-chromatic@3.1.0: - resolution: {integrity: sha512-A3s5PWiZ9YCXFye1o246KoscMWqf8BsD9eRiJ3He7C9OBaxKhAd5TFCdEx/7VbKtxxTsu//1mMJFrEt572cEyQ==} - engines: {node: '>=12'} - - d3-scale@4.0.2: - resolution: {integrity: sha512-GZW464g1SH7ag3Y7hXjf8RoUuAFIqklOAq3MRl4OaWabTFJY9PN/E1YklhXLh+OQ3fM9yS2nOkCoS+WLZ6kvxQ==} - engines: {node: '>=12'} - - d3-selection@3.0.0: - resolution: {integrity: sha512-fmTRWbNMmsmWq6xJV8D19U/gw/bwrHfNXxrIN+HfZgnzqTHp9jOmKMhsTUjXOJnZOdZY9Q28y4yebKzqDKlxlQ==} - engines: {node: '>=12'} - - d3-shape@1.3.7: - resolution: {integrity: sha512-EUkvKjqPFUAZyOlhY5gzCxCeI0Aep04LwIRpsZ/mLFelJiUfnK56jo5JMDSE7yyP2kLSb6LtF+S5chMk7uqPqw==} - - d3-shape@3.2.0: - resolution: {integrity: sha512-SaLBuwGm3MOViRq2ABk3eLoxwZELpH6zhl3FbAoJ7Vm1gofKx6El1Ib5z23NUEhF9AsGl7y+dzLe5Cw2AArGTA==} - engines: {node: '>=12'} - - d3-time-format@4.1.0: - resolution: {integrity: sha512-dJxPBlzC7NugB2PDLwo9Q8JiTR3M3e4/XANkreKSUxF8vvXKqm1Yfq4Q5dl8budlunRVlUUaDUgFt7eA8D6NLg==} - engines: {node: '>=12'} - - d3-time@3.1.0: - resolution: {integrity: sha512-VqKjzBLejbSMT4IgbmVgDjpkYrNWUYJnbCGo874u7MMKIWsILRX+OpX/gTk8MqjpT1A/c6HY2dCA77ZN0lkQ2Q==} - engines: {node: '>=12'} - - d3-timer@3.0.1: - resolution: {integrity: sha512-ndfJ/JxxMd3nw31uyKoY2naivF+r29V+Lc0svZxe1JvvIRmi8hUsrMvdOwgS1o6uBHmiz91geQ0ylPP0aj1VUA==} - engines: {node: '>=12'} - - d3-transition@3.0.1: - resolution: {integrity: sha512-ApKvfjsSR6tg06xrL434C0WydLr7JewBB3V+/39RMHsaXTOG0zmt/OAXeng5M5LBm0ojmxJrpomQVZ1aPvBL4w==} - engines: {node: '>=12'} - peerDependencies: - d3-selection: 2 - 3 - - d3-zoom@3.0.0: - resolution: {integrity: sha512-b8AmV3kfQaqWAuacbPuNbL6vahnOJflOhexLzMMNLga62+/nh0JzvJ0aO/5a5MVgUFGS7Hu1P9P03o3fJkDCyw==} - engines: {node: '>=12'} - - d3@7.9.0: - resolution: {integrity: sha512-e1U46jVP+w7Iut8Jt8ri1YsPOvFpg46k+K8TpCb0P+zjCkjkPnV7WzfDJzMHy1LnA+wj5pLT1wjO901gLXeEhA==} - engines: {node: '>=12'} - - dagre-d3-es@7.0.10: - resolution: {integrity: sha512-qTCQmEhcynucuaZgY5/+ti3X/rnszKZhEQH/ZdWdtP1tA/y3VoHJzcVrO9pjjJCNpigfscAtoUB5ONcd2wNn0A==} - - dayjs@1.11.13: - resolution: {integrity: sha512-oaMBel6gjolK862uaPQOVTA7q3TZhuSvuMQAAglQDOWYO9A91IrAOUJEyKVlqJlHE0vq5p5UXxzdPfMH/x6xNg==} - - debug@4.3.6: - resolution: {integrity: sha512-O/09Bd4Z1fBrU4VzkhFqVgpPzaGbw6Sm9FEkBT1A/YBXQFGuuSxa1dN2nxgxS34JmKXqYx8CZAwEVoJFImUXIg==} - engines: {node: '>=6.0'} - peerDependencies: - supports-color: '*' - peerDependenciesMeta: - supports-color: - optional: true - - decode-named-character-reference@1.0.2: - resolution: {integrity: sha512-O8x12RzrUF8xyVcY0KJowWsmaJxQbmy0/EtnNtHRpsOcT7dFk5W598coHqBVpmWo1oQQfsCqfCmkZN5DJrZVdg==} - - delaunator@5.0.1: - resolution: {integrity: sha512-8nvh+XBe96aCESrGOqMp/84b13H9cdKbG5P2ejQCh4d4sK9RL4371qou9drQjMhvnPmhWl5hnmqbEE0fXr9Xnw==} - - delayed-stream@1.0.0: - resolution: {integrity: sha512-ZySD7Nf91aLB0RxL4KGrKHBXl7Eds1DAmEdcoVawXnLD7SDhpNgtuII2aAkg7a7QS41jxPSZ17p4VdGnMHk3MQ==} - engines: {node: '>=0.4.0'} - - dequal@2.0.3: - resolution: {integrity: sha512-0je+qPKHEMohvfRTCEo3CrPG6cAzAYgmzKyxRiYSSDkS6eGJdyVJm7WaYA5ECaAD9wLB2T4EEeymA5aFVcYXCA==} - engines: {node: '>=6'} - - detect-libc@2.0.3: - resolution: {integrity: sha512-bwy0MGW55bG41VqxxypOsdSdGqLwXPI/focwgTYCFMbdUiBAxLg9CFzG08sz2aqzknwiX7Hkl0bQENjg8iLByw==} - engines: {node: '>=8'} - - detect-node-es@1.1.0: - resolution: {integrity: sha512-ypdmJU/TbBby2Dxibuv7ZLW3Bs1QEmM7nHjEANfohJLvE0XVujisn1qPJcZxg+qDucsr+bP6fLD1rPS3AhJ7EQ==} - - devlop@1.1.0: - resolution: {integrity: sha512-RWmIqhcFf1lRYBvNmr7qTNuyCt/7/ns2jbpp1+PalgE/rDQcBT0fioSMUpJ93irlUhC5hrg4cYqe6U+0ImW0rA==} - - didyoumean@1.2.2: - resolution: {integrity: sha512-gxtyfqMg7GKyhQmb056K7M3xszy/myH8w+B4RT+QXBQsvAOdc3XymqDDPHx1BgPgsdAA5SIifona89YtRATDzw==} - - diff@5.2.0: - resolution: {integrity: sha512-uIFDxqpRZGZ6ThOk84hEfqWoHx2devRFvpTZcTHur85vImfaxUbTW9Ryh4CpCuDnToOP1CEtXKIgytHBPVff5A==} - engines: {node: '>=0.3.1'} - - dlv@1.1.3: - resolution: {integrity: sha512-+HlytyjlPKnIG8XuRG8WvmBP8xs8P71y+SKKS6ZXWoEgLuePxtDoUEiH7WkdePWrQ5JBpE6aoVqfZfJUQkjXwA==} - - dompurify@3.1.6: - resolution: {integrity: sha512-cTOAhc36AalkjtBpfG6O8JimdTMWNXjiePT2xQH/ppBGi/4uIpmj8eKyIkMJErXWARyINV/sB38yf8JCLF5pbQ==} - - eastasianwidth@0.2.0: - resolution: {integrity: sha512-I88TYZWc9XiYHRQ4/3c5rjjfgkjhLyW2luGIheGERbNQ6OY7yTybanSpDXZa8y7VUP9YmDcYa+eyq4ca7iLqWA==} - - electron-to-chromium@1.5.13: - resolution: {integrity: sha512-lbBcvtIJ4J6sS4tb5TLp1b4LyfCdMkwStzXPyAgVgTRAsep4bvrAGaBOP7ZJtQMNJpSQ9SqG4brWOroNaQtm7Q==} - - elkjs@0.9.3: - resolution: {integrity: sha512-f/ZeWvW/BCXbhGEf1Ujp29EASo/lk1FDnETgNKwJrsVvGZhUWCZyg3xLJjAsxfOmt8KjswHmI5EwCQcPMpOYhQ==} - - emoji-regex@8.0.0: - resolution: {integrity: sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==} - - emoji-regex@9.2.2: - resolution: {integrity: sha512-L18DaJsXSUk2+42pv8mLs5jJT2hqFkFE4j21wOmgbUqsZ2hL72NsUU785g9RXgo3s0ZNgVl42TiHp3ZtOv/Vyg==} - - emoticon@3.2.0: - resolution: {integrity: sha512-SNujglcLTTg+lDAcApPNgEdudaqQFiAbJCqzjNxJkvN9vAwCGi0uu8IUVvx+f16h+V44KCY6Y2yboroc9pilHg==} - - entities@4.5.0: - resolution: {integrity: sha512-V0hjH4dGPh9Ao5p0MoRY6BVqtwCjhz6vI5LT8AJ55H+4g9/4vbHx1I54fS0XuclLhDHArPQCiMjDxjaL8fPxhw==} - engines: {node: '>=0.12'} - - error-ex@1.3.2: - resolution: {integrity: sha512-7dFHNmqeFSEt2ZBsCriorKnn3Z2pj+fd9kmI6QoWw4//DL+icEBfc0U7qJCisqrTsKTjw4fNFy2pW9OqStD84g==} - - escalade@3.1.2: - resolution: {integrity: sha512-ErCHMCae19vR8vQGe50xIsVomy19rg6gFu3+r3jkEO46suLMWBksvVyoGgQV+jOfl84ZSOSlmv6Gxa89PmTGmA==} - engines: {node: '>=6'} - - escape-string-regexp@1.0.5: - resolution: {integrity: sha512-vbRorB5FUQWvla16U8R/qgaFIya2qGzwDrNmCZuYKrbdSUMG6I1ZCGQRefkRVhuOkIGVne7BQ35DSfo1qvJqFg==} - engines: {node: '>=0.8.0'} - - escape-string-regexp@4.0.0: - resolution: {integrity: sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==} - engines: {node: '>=10'} - - escape-string-regexp@5.0.0: - resolution: {integrity: sha512-/veY75JbMK4j1yjvuUxuVsiS/hr/4iHs9FTT6cgTexxdE0Ly/glccBAkloH/DofkjRbZU3bnoj38mOmhkZ0lHw==} - engines: {node: '>=12'} - - esprima@4.0.1: - resolution: {integrity: sha512-eGuFFw7Upda+g4p+QHvnW0RyTX/SVeJBDM/gCtMARO0cLuT2HcEKnTPvhjV6aGeqrCB/sbNop0Kszm0jsaWU4A==} - engines: {node: '>=4'} - hasBin: true - - estree-util-attach-comments@2.1.1: - resolution: {integrity: sha512-+5Ba/xGGS6mnwFbXIuQiDPTbuTxuMCooq3arVv7gPZtYpjp+VXH/NkHAP35OOefPhNG/UGqU3vt/LTABwcHX0w==} - - estree-util-build-jsx@2.2.2: - resolution: {integrity: sha512-m56vOXcOBuaF+Igpb9OPAy7f9w9OIkb5yhjsZuaPm7HoGi4oTOQi0h2+yZ+AtKklYFZ+rPC4n0wYCJCEU1ONqg==} - - estree-util-is-identifier-name@2.1.0: - resolution: {integrity: sha512-bEN9VHRyXAUOjkKVQVvArFym08BTWB0aJPppZZr0UNyAqWsLaVfAqP7hbaTJjzHifmB5ebnR8Wm7r7yGN/HonQ==} - - estree-util-to-js@1.2.0: - resolution: {integrity: sha512-IzU74r1PK5IMMGZXUVZbmiu4A1uhiPgW5hm1GjcOfr4ZzHaMPpLNJjR7HjXiIOzi25nZDrgFTobHTkV5Q6ITjA==} - - estree-util-value-to-estree@1.3.0: - resolution: {integrity: sha512-Y+ughcF9jSUJvncXwqRageavjrNPAI+1M/L3BI3PyLp1nmgYTGUXU6t5z1Y7OWuThoDdhPME07bQU+d5LxdJqw==} - engines: {node: '>=12.0.0'} - - estree-util-visit@1.2.1: - resolution: {integrity: sha512-xbgqcrkIVbIG+lI/gzbvd9SGTJL4zqJKBFttUl5pP27KhAjtMKbX/mQXJ7qgyXpMgVy/zvpm0xoQQaGL8OloOw==} - - estree-walker@3.0.3: - resolution: {integrity: sha512-7RUKfXgSMMkzt6ZuXmqapOurLGPPfgj6l9uRZ7lRGolvk0y2yocc35LdcxKC5PQZdn2DMqioAQ2NoWcrTKmm6g==} - - execa@0.8.0: - resolution: {integrity: sha512-zDWS+Rb1E8BlqqhALSt9kUhss8Qq4nN3iof3gsOdyINksElaPyNBtKUMTR62qhvgVWR0CqCX7sdnKe4MnUbFEA==} - engines: {node: '>=4'} - - extend-shallow@2.0.1: - resolution: {integrity: sha512-zCnTtlxNoAiDc3gqY2aYAWFx7XWWiasuF2K8Me5WbN8otHKTUKBwjPtNpRs/rbUZm7KxWAaNj7P1a/p52GbVug==} - engines: {node: '>=0.10.0'} - - extend@3.0.2: - resolution: {integrity: sha512-fjquC59cD7CyW6urNXK0FBufkZcoiGG80wTuPujX590cB5Ttln20E2UB4S/WARVqhXffZl2LNgS+gQdPIIim/g==} - - fast-glob@3.3.2: - resolution: {integrity: sha512-oX2ruAFQwf/Orj8m737Y5adxDQO0LAB7/S5MnxCdTNDd4p6BsyIVsv9JQsATbTSq8KHRpLwIHbVlUNatxd+1Ow==} - engines: {node: '>=8.6.0'} - - fastq@1.17.1: - resolution: {integrity: sha512-sRVD3lWVIXWg6By68ZN7vho9a1pQcN/WBFaAAsDDFzlJjvoGx0P8z7V1t72grFJfJhu3YPZBuu25f7Kaw2jN1w==} - - file-selector@0.4.0: - resolution: {integrity: sha512-iACCiXeMYOvZqlF1kTiYINzgepRBymz1wwjiuup9u9nayhb6g4fSwiyJ/6adli+EPwrWtpgQAh2PoS7HukEGEg==} - engines: {node: '>= 10'} - - fill-range@7.1.1: - resolution: {integrity: sha512-YsGpe3WHLK8ZYi4tWDg2Jy3ebRz2rXowDxnld4bkQB00cc/1Zw9AWnC0i9ztDJitivtQvaI9KaLyKrc+hBW0yg==} - engines: {node: '>=8'} - - find-root@1.1.0: - resolution: {integrity: sha512-NKfW6bec6GfKc0SGx1e07QZY9PE99u0Bft/0rzSD5k3sO/vwkVUpDUKVm5Gpp5Ue3YfShPFTX2070tDs5kB9Ng==} - - flexsearch@0.7.43: - resolution: {integrity: sha512-c5o/+Um8aqCSOXGcZoqZOm+NqtVwNsvVpWv6lfmSclU954O3wvQKxxK8zj74fPaSJbXpSLTs4PRhh+wnoCXnKg==} - - focus-lock@1.3.5: - resolution: {integrity: sha512-QFaHbhv9WPUeLYBDe/PAuLKJ4Dd9OPvKs9xZBr3yLXnUrDNaVXKu2baDBXe3naPY30hgHYSsf2JW4jzas2mDEQ==} - engines: {node: '>=10'} - - focus-visible@5.2.1: - resolution: {integrity: sha512-8Bx950VD1bWTQJEH/AM6SpEk+SU55aVnp4Ujhuuxy3eMEBCRwBnTBnVXr9YAPvZL3/CNjCa8u4IWfNmEO53whA==} - - follow-redirects@1.15.6: - resolution: {integrity: sha512-wWN62YITEaOpSK584EZXJafH1AGpO8RVgElfkuXbTOrPX4fIfOyEpW/CsiNd8JdYrAoOvafRTOEnvsO++qCqFA==} - engines: {node: '>=4.0'} - peerDependencies: - debug: '*' - peerDependenciesMeta: - debug: - optional: true - - foreground-child@3.3.0: - resolution: {integrity: sha512-Ld2g8rrAyMYFXBhEqMz8ZAHBi4J4uS1i/CxGMDnjyFWddMXLVcDp051DZfu+t7+ab7Wv6SMqpWmyFIj5UbfFvg==} - engines: {node: '>=14'} - - form-data@4.0.0: - resolution: {integrity: sha512-ETEklSGi5t0QMZuiXoA/Q6vcnxcLQP5vdugSpuAyi6SVGi2clPPp+xgEhuMaHC+zGgn31Kd235W35f7Hykkaww==} - engines: {node: '>= 6'} - - fraction.js@4.3.7: - resolution: {integrity: sha512-ZsDfxO51wGAXREY55a7la9LScWpwv9RxIrYABrlvOFBlH/ShPnrtsXeuUIfXKKOVicNxQ+o8JTbJvjS4M89yew==} - - fsevents@2.3.3: - resolution: {integrity: sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==} - engines: {node: ^8.16.0 || ^10.6.0 || >=11.0.0} - os: [darwin] - - function-bind@1.1.2: - resolution: {integrity: sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==} - - get-nonce@1.0.1: - resolution: {integrity: sha512-FJhYRoDaiatfEkUK8HKlicmu/3SGFD51q3itKDGoSTysQJBnfOcxU5GxnhE1E6soB76MbT0MBtnKJuXyAx+96Q==} - engines: {node: '>=6'} - - get-stream@3.0.0: - resolution: {integrity: sha512-GlhdIUuVakc8SJ6kK0zAFbiGzRFzNnY4jUuEbV9UROo4Y+0Ny4fjvcZFVTeDA4odpFyOQzaw6hXukJSq/f28sQ==} - engines: {node: '>=4'} - - git-up@7.0.0: - resolution: {integrity: sha512-ONdIrbBCFusq1Oy0sC71F5azx8bVkvtZtMJAsv+a6lz5YAmbNnLD6HAB4gptHZVLPR8S2/kVN6Gab7lryq5+lQ==} - - git-url-parse@13.1.1: - resolution: {integrity: sha512-PCFJyeSSdtnbfhSNRw9Wk96dDCNx+sogTe4YNXeXSJxt7xz5hvXekuRn9JX7m+Mf4OscCu8h+mtAl3+h5Fo8lQ==} - - github-slugger@2.0.0: - resolution: {integrity: sha512-IaOQ9puYtjrkq7Y0Ygl9KDZnrf/aiUJYUpVf89y8kyaxbRG7Y1SrX/jaumrv81vc61+kiMempujsM3Yw7w5qcw==} - - glob-parent@5.1.2: - resolution: {integrity: sha512-AOIgSQCepiJYwP3ARnGx+5VnTu2HBYdzbGP45eLw1vr3zB3vZLeyed1sC9hnbcOc9/SrMyM5RPQrkGz4aS9Zow==} - engines: {node: '>= 6'} - - glob-parent@6.0.2: - resolution: {integrity: sha512-XxwI8EOhVQgWp6iDL+3b0r86f4d6AX6zSU55HfB4ydCEuXLXc5FcYeOu+nnGftS4TEju/11rt4KJPTMgbfmv4A==} - engines: {node: '>=10.13.0'} - - glob@10.4.5: - resolution: {integrity: sha512-7Bv8RF0k6xjo7d4A/PxYLbUCfb6c+Vpd2/mB2yRDlew7Jb5hEXiCD9ibfO7wpk8i4sevK6DFny9h7EYbM3/sHg==} - hasBin: true - - globals@11.12.0: - resolution: {integrity: sha512-WOBp/EEGUiIsJSp7wcv/y6MO+lV9UoncWqxuFfm8eBwzWNgyfBd6Gz+IeKQ9jCmyhoH99g15M3T+QaVHFjizVA==} - engines: {node: '>=4'} - - graceful-fs@4.2.11: - resolution: {integrity: sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==} - - gray-matter@4.0.3: - resolution: {integrity: sha512-5v6yZd4JK3eMI3FqqCouswVqwugaA9r4dNZB1wwcmrD02QkV5H0y7XBQW8QwQqEaZY1pM9aqORSORhJRdNK44Q==} - engines: {node: '>=6.0'} - - has-flag@2.0.0: - resolution: {integrity: sha512-P+1n3MnwjR/Epg9BBo1KT8qbye2g2Ou4sFumihwt6I4tsUX7jnLcX4BTOSKg/B1ZrIYMN9FcEnG4x5a7NB8Eng==} - engines: {node: '>=0.10.0'} - - has-flag@3.0.0: - resolution: {integrity: sha512-sKJf1+ceQBr4SMkvQnBDNDtf4TXpVhVGateu0t918bl30FnbE2m4vNLX+VWe/dpjlb+HugGYzW7uQXH98HPEYw==} - engines: {node: '>=4'} - - hash-obj@4.0.0: - resolution: {integrity: sha512-FwO1BUVWkyHasWDW4S8o0ssQXjvyghLV2rfVhnN36b2bbcj45eGiuzdn9XOvOpjV3TKQD7Gm2BWNXdE9V4KKYg==} - engines: {node: '>=12'} - - hasown@2.0.2: - resolution: {integrity: sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ==} - engines: {node: '>= 0.4'} - - hast-to-hyperscript@9.0.1: - resolution: {integrity: sha512-zQgLKqF+O2F72S1aa4y2ivxzSlko3MAvxkwG8ehGmNiqd98BIN3JM1rAJPmplEyLmGLO2QZYJtIneOSZ2YbJuA==} - - hast-util-from-dom@5.0.0: - resolution: {integrity: sha512-d6235voAp/XR3Hh5uy7aGLbM3S4KamdW0WEgOaU1YoewnuYw4HXb5eRtv9g65m/RFGEfUY1Mw4UqCc5Y8L4Stg==} - - hast-util-from-html-isomorphic@2.0.0: - resolution: {integrity: sha512-zJfpXq44yff2hmE0XmwEOzdWin5xwH+QIhMLOScpX91e/NSGPsAzNCvLQDIEPyO2TXi+lBmU6hjLIhV8MwP2kw==} - - hast-util-from-html@2.0.2: - resolution: {integrity: sha512-HwOHwxdt2zC5KQ/CNoybBntRook2zJvfZE/u5/Ap7aLPe22bDqen7KwGkOqOyzL5zIqKwiYX/OTtE0FWgr6XXA==} - - hast-util-from-parse5@6.0.1: - resolution: {integrity: sha512-jeJUWiN5pSxW12Rh01smtVkZgZr33wBokLzKLwinYOUfSzm1Nl/c3GUGebDyOKjdsRgMvoVbV0VpAcpjF4NrJA==} - - hast-util-from-parse5@8.0.1: - resolution: {integrity: sha512-Er/Iixbc7IEa7r/XLtuG52zoqn/b3Xng/w6aZQ0xGVxzhw5xUFxcRqdPzP6yFi/4HBYRaifaI5fQ1RH8n0ZeOQ==} - - hast-util-is-element@1.1.0: - resolution: {integrity: sha512-oUmNua0bFbdrD/ELDSSEadRVtWZOf3iF6Lbv81naqsIV99RnSCieTbWuWCY8BAeEfKJTKl0gRdokv+dELutHGQ==} - - hast-util-is-element@3.0.0: - resolution: {integrity: sha512-Val9mnv2IWpLbNPqc/pUem+a7Ipj2aHacCwgNfTiK0vJKl0LF+4Ba4+v1oPHFpf3bLYmreq0/l3Gud9S5OH42g==} - - hast-util-parse-selector@2.2.5: - resolution: {integrity: sha512-7j6mrk/qqkSehsM92wQjdIgWM2/BW61u/53G6xmC8i1OmEdKLHbk419QKQUjz6LglWsfqoiHmyMRkP1BGjecNQ==} - - hast-util-parse-selector@4.0.0: - resolution: {integrity: sha512-wkQCkSYoOGCRKERFWcxMVMOcYE2K1AaNLU8DXS9arxnLOUEWbOXKXiJUNzEpqZ3JOKpnha3jkFrumEjVliDe7A==} - - hast-util-raw@6.1.0: - resolution: {integrity: sha512-5FoZLDHBpka20OlZZ4I/+RBw5piVQ8iI1doEvffQhx5CbCyTtP8UCq8Tw6NmTAMtXgsQxmhW7Ly8OdFre5/YMQ==} - - hast-util-raw@9.0.4: - resolution: {integrity: sha512-LHE65TD2YiNsHD3YuXcKPHXPLuYh/gjp12mOfU8jxSrm1f/yJpsb0F/KKljS6U9LJoP0Ux+tCe8iJ2AsPzTdgA==} - - hast-util-to-estree@2.3.3: - resolution: {integrity: sha512-ihhPIUPxN0v0w6M5+IiAZZrn0LH2uZomeWwhn7uP7avZC6TE7lIiEh2yBMPr5+zi1aUCXq6VoYRgs2Bw9xmycQ==} - - hast-util-to-html@7.1.3: - resolution: {integrity: sha512-yk2+1p3EJTEE9ZEUkgHsUSVhIpCsL/bvT8E5GzmWc+N1Po5gBw+0F8bo7dpxXR0nu0bQVxVZGX2lBGF21CmeDw==} - - hast-util-to-parse5@6.0.0: - resolution: {integrity: sha512-Lu5m6Lgm/fWuz8eWnrKezHtVY83JeRGaNQ2kn9aJgqaxvVkFCZQBEhgodZUDUvoodgyROHDb3r5IxAEdl6suJQ==} - - hast-util-to-parse5@8.0.0: - resolution: {integrity: sha512-3KKrV5ZVI8if87DVSi1vDeByYrkGzg4mEfeu4alwgmmIeARiBLKCZS2uw5Gb6nU9x9Yufyj3iudm6i7nl52PFw==} - - hast-util-to-text@4.0.2: - resolution: {integrity: sha512-KK6y/BN8lbaq654j7JgBydev7wuNMcID54lkRav1P0CaE1e47P72AWWPiGKXTJU271ooYzcvTAn/Zt0REnvc7A==} - - hast-util-whitespace@1.0.4: - resolution: {integrity: sha512-I5GTdSfhYfAPNztx2xJRQpG8cuDSNt599/7YUn7Gx/WxNMsG+a835k97TDkFgk123cwjfwINaZknkKkphx/f2A==} - - hast-util-whitespace@2.0.1: - resolution: {integrity: sha512-nAxA0v8+vXSBDt3AnRUNjyRIQ0rD+ntpbAp4LnPkumc5M9yUbSMa4XDU9Q6etY4f1Wp4bNgvc1yjiZtsTTrSng==} - - hastscript@6.0.0: - resolution: {integrity: sha512-nDM6bvd7lIqDUiYEiu5Sl/+6ReP0BMk/2f4U/Rooccxkj0P5nm+acM5PrGJ/t5I8qPGiqZSE6hVAwZEdZIvP4w==} - - hastscript@8.0.0: - resolution: {integrity: sha512-dMOtzCEd3ABUeSIISmrETiKuyydk1w0pa+gE/uormcTpSYuaNJPbX1NU3JLyscSLjwAQM8bWMhhIlnCqnRvDTw==} - - hoist-non-react-statics@3.3.2: - resolution: {integrity: sha512-/gGivxi8JPKWNm/W0jSmzcMPpfpPLc3dY/6GxhX2hQ9iGj3aDfklV4ET7NjKpSinLpJ5vafa9iiGIEZg10SfBw==} - - html-void-elements@1.0.5: - resolution: {integrity: sha512-uE/TxKuyNIcx44cIWnjr/rfIATDH7ZaOMmstu0CwhFG1Dunhlp4OC6/NMbhiwoq5BpW0ubi303qnEk/PZj614w==} - - html-void-elements@3.0.0: - resolution: {integrity: sha512-bEqo66MRXsUGxWHV5IP0PUiAWwoEjba4VCzg0LjFJBpchPaTfyfCKTG6bc5F8ucKec3q5y6qOdGyYTSBEvhCrg==} - - iconv-lite@0.6.3: - resolution: {integrity: sha512-4fCk79wshMdzMp2rH06qWrJE4iolqLhCUH+OiuIgU++RB0+94NlDL81atO7GX55uUKueo0txHNtvEyI6D7WdMw==} - engines: {node: '>=0.10.0'} - - import-fresh@3.3.0: - resolution: {integrity: sha512-veYYhQa+D1QBKznvhUHxb8faxlrwUnxseDAbAp457E0wLNio2bOSKnjYDhMj+YiAq61xrMGhQk9iXVk5FzgQMw==} - engines: {node: '>=6'} - - inherits@2.0.4: - resolution: {integrity: sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==} - - inline-style-parser@0.1.1: - resolution: {integrity: sha512-7NXolsK4CAS5+xvdj5OMMbI962hU/wvwoxk+LWR9Ek9bVtyuuYScDN6eS0rUm6TxApFpw7CX1o4uJzcd4AyD3Q==} - - internmap@1.0.1: - resolution: {integrity: sha512-lDB5YccMydFBtasVtxnZ3MRBHuaoE8GKsppq+EchKL2U4nK/DmEpPHNH8MZe5HkMtpSiTSOZwfN0tzYjO/lJEw==} - - internmap@2.0.3: - resolution: {integrity: sha512-5Hh7Y1wQbvY5ooGgPbDaL5iYLAPzMTUrjMulskHLH6wnv/A+1q5rgEaiuqEjB+oxGXIVZs1FF+R/KPN3ZSQYYg==} - engines: {node: '>=12'} - - intersection-observer@0.12.2: - resolution: {integrity: sha512-7m1vEcPCxXYI8HqnL8CKI6siDyD+eIWSwgB3DZA+ZTogxk9I4CDnj4wilt9x/+/QbHI4YG5YZNmC6458/e9Ktg==} - - invariant@2.2.4: - resolution: {integrity: sha512-phJfQVBuaJM5raOpJjSfkiD6BpbCE4Ns//LaXl6wGYtUBY83nWS6Rf9tXm2e8VaK60JEjYldbPif/A2B1C2gNA==} - - is-alphabetical@1.0.4: - resolution: {integrity: sha512-DwzsA04LQ10FHTZuL0/grVDk4rFoVH1pjAToYwBrHSxcrBIGQuXrQMtD5U1b0U2XVgKZCTLLP8u2Qxqhy3l2Vg==} - - is-alphabetical@2.0.1: - resolution: {integrity: sha512-FWyyY60MeTNyeSRpkM2Iry0G9hpr7/9kD40mD/cGQEuilcZYS4okz8SN2Q6rLCJ8gbCt6fN+rC+6tMGS99LaxQ==} - - is-alphanumerical@1.0.4: - resolution: {integrity: sha512-UzoZUr+XfVz3t3v4KyGEniVL9BDRoQtY7tOyrRybkVNjDFWyo1yhXNGrrBTQxp3ib9BLAWs7k2YKBQsFRkZG9A==} - - is-alphanumerical@2.0.1: - resolution: {integrity: sha512-hmbYhX/9MUMF5uh7tOXyK/n0ZvWpad5caBA17GsC6vyuCqaWliRG5K1qS9inmUhEMaOBIW7/whAnSwveW/LtZw==} - - is-arrayish@0.2.1: - resolution: {integrity: sha512-zz06S8t0ozoDXMG+ube26zeCTNXcKIPJZJi8hBrF4idCLms4CG9QtK7qBl1boi5ODzFpjswb5JPmHCbMpjaYzg==} - - is-arrayish@0.3.2: - resolution: {integrity: sha512-eVRqCvVlZbuw3GrM63ovNSNAeA1K16kaR/LRY/92w0zxQ5/1YzwblUX652i4Xs9RwAGjW9d9y6X88t8OaAJfWQ==} - - is-binary-path@2.1.0: - resolution: {integrity: sha512-ZMERYes6pDydyuGidse7OsHxtbI7WVeUEozgR/g7rd0xUimYNlvZRE/K2MgZTjWy725IfelLeVcEM97mmtRGXw==} - engines: {node: '>=8'} - - is-buffer@2.0.5: - resolution: {integrity: sha512-i2R6zNFDwgEHJyQUtJEk0XFi1i0dPFn/oqjK3/vPCcDeJvW5NQ83V8QbicfF1SupOaB0h8ntgBC2YiE7dfyctQ==} - engines: {node: '>=4'} - - is-core-module@2.15.1: - resolution: {integrity: sha512-z0vtXSwucUJtANQWldhbtbt7BnL0vxiFjIdDLAatwhDYty2bad6s+rijD6Ri4YuYJubLzIJLUidCh09e1djEVQ==} - engines: {node: '>= 0.4'} - - is-decimal@1.0.4: - resolution: {integrity: sha512-RGdriMmQQvZ2aqaQq3awNA6dCGtKpiDFcOzrTWrDAT2MiWrKQVPmxLGHl7Y2nNu6led0kEyoX0enY0qXYsv9zw==} - - is-decimal@2.0.1: - resolution: {integrity: sha512-AAB9hiomQs5DXWcRB1rqsxGUstbRroFOPPVAomNk/3XHR5JyEZChOyTWe2oayKnsSsr/kcGqF+z6yuH6HHpN0A==} - - is-extendable@0.1.1: - resolution: {integrity: sha512-5BMULNob1vgFX6EjQw5izWDxrecWK9AM72rugNr0TFldMOi0fj6Jk+zeKIt0xGj4cEfQIJth4w3OKWOJ4f+AFw==} - engines: {node: '>=0.10.0'} - - is-extglob@2.1.1: - resolution: {integrity: sha512-SbKbANkN603Vi4jEZv49LeVJMn4yGwsbzZworEoyEiutsN3nJYdbO36zfhGJ6QEDpOZIFkDtnq5JRxmvl3jsoQ==} - engines: {node: '>=0.10.0'} - - is-fullwidth-code-point@3.0.0: - resolution: {integrity: sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==} - engines: {node: '>=8'} - - is-glob@4.0.3: - resolution: {integrity: sha512-xelSayHH36ZgE7ZWhli7pW34hNbNl8Ojv5KVmkJD4hBdD3th8Tfk9vYasLM+mXWOZhFkgZfxhLSnrwRr4elSSg==} - engines: {node: '>=0.10.0'} - - is-hexadecimal@1.0.4: - resolution: {integrity: sha512-gyPJuv83bHMpocVYoqof5VDiZveEoGoFL8m3BXNb2VW8Xs+rz9kqO8LOQ5DH6EsuvilT1ApazU0pyl+ytbPtlw==} - - is-hexadecimal@2.0.1: - resolution: {integrity: sha512-DgZQp241c8oO6cA1SbTEWiXeoxV42vlcJxgH+B3hi1AiqqKruZR3ZGF8In3fj4+/y/7rHvlOZLZtgJ/4ttYGZg==} - - is-number@7.0.0: - resolution: {integrity: sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==} - engines: {node: '>=0.12.0'} - - is-obj@3.0.0: - resolution: {integrity: sha512-IlsXEHOjtKhpN8r/tRFj2nDyTmHvcfNeu/nrRIcXE17ROeatXchkojffa1SpdqW4cr/Fj6QkEf/Gn4zf6KKvEQ==} - engines: {node: '>=12'} - - is-plain-obj@2.1.0: - resolution: {integrity: sha512-YWnfyRwxL/+SsrWYfOpUtz5b3YD+nyfkHvjbcanzk8zgyO4ASD67uVMRt8k5bM4lLMDnXfriRhOpemw+NfT1eA==} - engines: {node: '>=8'} - - is-plain-obj@3.0.0: - resolution: {integrity: sha512-gwsOE28k+23GP1B6vFl1oVh/WOzmawBrKwo5Ev6wMKzPkaXaCDIQKzLnvsA42DRlbVTWorkgTKIviAKCWkfUwA==} - engines: {node: '>=10'} - - is-plain-obj@4.1.0: - resolution: {integrity: sha512-+Pgi+vMuUNkJyExiMBt5IlFoMyKnr5zhJ4Uspz58WOhBF5QoIZkFyNHIbBAtHwzVAgk5RtndVNsDRN61/mmDqg==} - engines: {node: '>=12'} - - is-plain-object@5.0.0: - resolution: {integrity: sha512-VRSzKkbMm5jMDoKLbltAkFQ5Qr7VDiTFGXxYFXXowVj387GeGNOCsOH6Msy00SGZ3Fp84b1Naa1psqgcCIEP5Q==} - engines: {node: '>=0.10.0'} - - is-reference@3.0.2: - resolution: {integrity: sha512-v3rht/LgVcsdZa3O2Nqs+NMowLOxeOm7Ay9+/ARQ2F+qEoANRcqrjAZKGN0v8ymUetZGgkp26LTnGT7H0Qo9Pg==} - - is-ssh@1.4.0: - resolution: {integrity: sha512-x7+VxdxOdlV3CYpjvRLBv5Lo9OJerlYanjwFrPR9fuGPjCiNiCzFgAWpiLAohSbsnH4ZAys3SBh+hq5rJosxUQ==} - - is-stream@1.1.0: - resolution: {integrity: sha512-uQPm8kcs47jx38atAcWTVxyltQYoPT68y9aWYdV6yWXSyW8mzSat0TL6CiWdZeCdF3KrAvpVtnHbTv4RN+rqdQ==} - engines: {node: '>=0.10.0'} - - is-whitespace-character@1.0.4: - resolution: {integrity: sha512-SDweEzfIZM0SJV0EUga669UTKlmL0Pq8Lno0QDQsPnvECB3IM2aP0gdx5TrU0A01MAPfViaZiI2V1QMZLaKK5w==} - - is-word-character@1.0.4: - resolution: {integrity: sha512-5SMO8RVennx3nZrqtKwCGyyetPE9VDba5ugvKLaD4KopPG5kR4mQ7tNt/r7feL5yt5h3lpuBbIUmCOG2eSzXHA==} - - isexe@2.0.0: - resolution: {integrity: sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==} - - jackspeak@3.4.3: - resolution: {integrity: sha512-OGlZQpz2yfahA/Rd1Y8Cd9SIEsqvXkLVoSw/cgwhnhFMDbsQFeZYoJJ7bIZBS9BcamUW96asq/npPWugM+RQBw==} - - jiti@1.21.6: - resolution: {integrity: sha512-2yTgeWTWzMWkHu6Jp9NKgePDaYHbntiwvYuuJLbbN9vl7DC9DvXKOB2BC3ZZ92D3cvV/aflH0osDfwpHepQ53w==} - hasBin: true - - js-tokens@4.0.0: - resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==} - - js-yaml@3.14.1: - resolution: {integrity: sha512-okMH7OXXJ7YrN9Ok3/SXrnu4iX9yOk+25nqX4imS2npuvTYDmo/QEZoqwZkYaIDk3jVvBOTOIEgEhaLOynBS9g==} - hasBin: true - - js-yaml@4.1.0: - resolution: {integrity: sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==} - hasBin: true - - jsesc@2.5.2: - resolution: {integrity: sha512-OYu7XEzjkCQ3C5Ps3QIZsQfNpqoJyZZA99wd9aWd05NCtC5pWOkShK2mkL6HXQR6/Cy2lbNdPlZBpuQHXE63gA==} - engines: {node: '>=4'} - hasBin: true - - json-parse-even-better-errors@2.3.1: - resolution: {integrity: sha512-xyFwyhro/JEof6Ghe2iz2NcXoj2sloNsWr/XsERDK/oiPCfaNhl5ONfp+jQdAZRQQ0IJWNzH9zIZF7li91kh2w==} - - jsonc-parser@3.3.1: - resolution: {integrity: sha512-HUgH65KyejrUFPvHFPbqOY0rsFip3Bo5wb4ngvdi1EpCYWUQDC5V+Y7mZws+DLkr4M//zQJoanu1SP+87Dv1oQ==} - - katex@0.16.11: - resolution: {integrity: sha512-RQrI8rlHY92OLf3rho/Ts8i/XvjgguEjOkO1BEXcU3N8BqPpSzBNwV/G0Ukr+P/l3ivvJUE/Fa/CwbS6HesGNQ==} - hasBin: true - - khroma@2.1.0: - resolution: {integrity: sha512-Ls993zuzfayK269Svk9hzpeGUKob/sIgZzyHYdjQoAdQetRKpOLj+k/QQQ/6Qi0Yz65mlROrfd+Ev+1+7dz9Kw==} - - kind-of@6.0.3: - resolution: {integrity: sha512-dcS1ul+9tmeD95T+x28/ehLgd9mENa3LsvDTtzm3vyBEO7RPptvAD+t44WVXaUjTBRcrpFeFlC8WCruUR456hw==} - engines: {node: '>=0.10.0'} - - kleur@4.1.5: - resolution: {integrity: sha512-o+NO+8WrRiQEE4/7nwRJhN1HWpVmJm511pBHUxPLtp0BUISzlBplORYSmTclCnJvQq2tKu/sgl3xVpkc7ZWuQQ==} - engines: {node: '>=6'} - - layout-base@1.0.2: - resolution: {integrity: sha512-8h2oVEZNktL4BH2JCOI90iD1yXwL6iNW7KcCKT2QZgQJR2vbqDsldCTPRU9NifTCqHZci57XvQQ15YTu+sTYPg==} - - lilconfig@2.1.0: - resolution: {integrity: sha512-utWOt/GHzuUxnLKxB6dk81RoOeoNeHgbrXiuGk4yyF5qlRz+iIVWu56E2fqGHFrXz0QNUhLB/8nKqvRH66JKGQ==} - engines: {node: '>=10'} - - lilconfig@3.1.2: - resolution: {integrity: sha512-eop+wDAvpItUys0FWkHIKeC9ybYrTGbU41U5K7+bttZZeohvnY7M9dZ5kB21GNWiFT2q1OoPTvncPCgSOVO5ow==} - engines: {node: '>=14'} - - lines-and-columns@1.2.4: - resolution: {integrity: sha512-7ylylesZQ/PV29jhEDl3Ufjo6ZX7gCqJr5F7PKrqc93v7fzSymt1BpwEU8nAUXs8qzzvqhbjhK5QZg6Mt/HkBg==} - - lodash-es@4.17.21: - resolution: {integrity: sha512-mKnC+QJ9pWVzv+C4/U3rRsHapFfHvQFoFB92e52xeyGMcX6/OlIl78je1u8vePzYZSkkogMPJ2yjxxsb89cxyw==} - - lodash.get@4.4.2: - resolution: {integrity: sha512-z+Uw/vLuy6gQe8cfaFWD7p0wVv8fJl3mbzXh33RS+0oW2wvUqiRXiQ69gLWSLpgB5/6sU+r6BlQR0MBILadqTQ==} - - lodash@4.17.21: - resolution: {integrity: sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==} - - longest-streak@3.1.0: - resolution: {integrity: sha512-9Ri+o0JYgehTaVBBDoMqIl8GXtbWg711O3srftcHhZ0dqnETqLaoIK0x17fUw9rFSlK/0NlsKe0Ahhyl5pXE2g==} - - loose-envify@1.4.0: - resolution: {integrity: sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==} - hasBin: true - - lru-cache@10.4.3: - resolution: {integrity: sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ==} - - lru-cache@4.1.5: - resolution: {integrity: sha512-sWZlbEP2OsHNkXrMl5GYk/jKk70MBng6UU4YI/qGDYbgf6YbP4EvmqISbXCoJiRKs+1bSpFHVgQxvJ17F2li5g==} - - markdown-escapes@1.0.4: - resolution: {integrity: sha512-8z4efJYk43E0upd0NbVXwgSTQs6cT3T06etieCMEg7dRbzCbxUCK/GHlX8mhHRDcp+OLlHkPKsvqQTCvsRl2cg==} - - markdown-extensions@1.1.1: - resolution: {integrity: sha512-WWC0ZuMzCyDHYCasEGs4IPvLyTGftYwh6wIEOULOF0HXcqZlhwRzrK0w2VUlxWA98xnvb/jszw4ZSkJ6ADpM6Q==} - engines: {node: '>=0.10.0'} - - markdown-table@3.0.3: - resolution: {integrity: sha512-Z1NL3Tb1M9wH4XESsCDEksWoKTdlUafKc4pt0GRwjUyXaCFZ+dc3g2erqB6zm3szA2IUSi7VnPI+o/9jnxh9hw==} - - match-sorter@6.3.4: - resolution: {integrity: sha512-jfZW7cWS5y/1xswZo8VBOdudUiSd9nifYRWphc9M5D/ee4w4AoXLgBEdRbgVaxbMuagBPeUC5y2Hi8DO6o9aDg==} - - mdast-util-definitions@4.0.0: - resolution: {integrity: sha512-k8AJ6aNnUkB7IE+5azR9h81O5EQ/cTDXtWdMq9Kk5KcEW/8ritU5CeLg/9HhOC++nALHBlaogJ5jz0Ybk3kPMQ==} - - mdast-util-definitions@5.1.2: - resolution: {integrity: sha512-8SVPMuHqlPME/z3gqVwWY4zVXn8lqKv/pAhC57FuJ40ImXyBpmO5ukh98zB2v7Blql2FiHjHv9LVztSIqjY+MA==} - - mdast-util-find-and-replace@2.2.2: - resolution: {integrity: sha512-MTtdFRz/eMDHXzeK6W3dO7mXUlF82Gom4y0oOgvHhh/HXZAGvIQDUvQ0SuUx+j2tv44b8xTHOm8K/9OoRFnXKw==} - - mdast-util-from-markdown@1.3.1: - resolution: {integrity: sha512-4xTO/M8c82qBcnQc1tgpNtubGUW/Y1tBQ1B0i5CtSoelOLKFYlElIr3bvgREYYO5iRqbMY1YuqZng0GVOI8Qww==} - - mdast-util-gfm-autolink-literal@1.0.3: - resolution: {integrity: sha512-My8KJ57FYEy2W2LyNom4n3E7hKTuQk/0SES0u16tjA9Z3oFkF4RrC/hPAPgjlSpezsOvI8ObcXcElo92wn5IGA==} - - mdast-util-gfm-footnote@1.0.2: - resolution: {integrity: sha512-56D19KOGbE00uKVj3sgIykpwKL179QsVFwx/DCW0u/0+URsryacI4MAdNJl0dh+u2PSsD9FtxPFbHCzJ78qJFQ==} - - mdast-util-gfm-strikethrough@1.0.3: - resolution: {integrity: sha512-DAPhYzTYrRcXdMjUtUjKvW9z/FNAMTdU0ORyMcbmkwYNbKocDpdk+PX1L1dQgOID/+vVs1uBQ7ElrBQfZ0cuiQ==} - - mdast-util-gfm-table@1.0.7: - resolution: {integrity: sha512-jjcpmNnQvrmN5Vx7y7lEc2iIOEytYv7rTvu+MeyAsSHTASGCCRA79Igg2uKssgOs1i1po8s3plW0sTu1wkkLGg==} - - mdast-util-gfm-task-list-item@1.0.2: - resolution: {integrity: sha512-PFTA1gzfp1B1UaiJVyhJZA1rm0+Tzn690frc/L8vNX1Jop4STZgOE6bxUhnzdVSB+vm2GU1tIsuQcA9bxTQpMQ==} - - mdast-util-gfm@2.0.2: - resolution: {integrity: sha512-qvZ608nBppZ4icQlhQQIAdc6S3Ffj9RGmzwUKUWuEICFnd1LVkN3EktF7ZHAgfcEdvZB5owU9tQgt99e2TlLjg==} - - mdast-util-math@2.0.2: - resolution: {integrity: sha512-8gmkKVp9v6+Tgjtq6SYx9kGPpTf6FVYRa53/DLh479aldR9AyP48qeVOgNZ5X7QUK7nOy4yw7vg6mbiGcs9jWQ==} - - mdast-util-mdx-expression@1.3.2: - resolution: {integrity: sha512-xIPmR5ReJDu/DHH1OoIT1HkuybIfRGYRywC+gJtI7qHjCJp/M9jrmBEJW22O8lskDWm562BX2W8TiAwRTb0rKA==} - - mdast-util-mdx-jsx@2.1.4: - resolution: {integrity: sha512-DtMn9CmVhVzZx3f+optVDF8yFgQVt7FghCRNdlIaS3X5Bnym3hZwPbg/XW86vdpKjlc1PVj26SpnLGeJBXD3JA==} - - mdast-util-mdx@2.0.1: - resolution: {integrity: sha512-38w5y+r8nyKlGvNjSEqWrhG0w5PmnRA+wnBvm+ulYCct7nsGYhFVb0lljS9bQav4psDAS1eGkP2LMVcZBi/aqw==} - - mdast-util-mdxjs-esm@1.3.1: - resolution: {integrity: sha512-SXqglS0HrEvSdUEfoXFtcg7DRl7S2cwOXc7jkuusG472Mmjag34DUDeOJUZtl+BVnyeO1frIgVpHlNRWc2gk/w==} - - mdast-util-phrasing@3.0.1: - resolution: {integrity: sha512-WmI1gTXUBJo4/ZmSk79Wcb2HcjPJBzM1nlI/OUWA8yk2X9ik3ffNbBGsU+09BFmXaL1IBb9fiuvq6/KMiNycSg==} - - mdast-util-to-hast@10.2.0: - resolution: {integrity: sha512-JoPBfJ3gBnHZ18icCwHR50orC9kNH81tiR1gs01D8Q5YpV6adHNO9nKNuFBCJQ941/32PT1a63UF/DitmS3amQ==} - - mdast-util-to-hast@12.3.0: - resolution: {integrity: sha512-pits93r8PhnIoU4Vy9bjW39M2jJ6/tdHyja9rrot9uujkN7UTU9SDnE6WNJz/IGyQk3XHX6yNNtrBH6cQzm8Hw==} - - mdast-util-to-hast@13.2.0: - resolution: {integrity: sha512-QGYKEuUsYT9ykKBCMOEDLsU5JRObWQusAolFMeko/tYPufNkRffBAQjIE+99jbA87xv6FgmjLtwjh9wBWajwAA==} - - mdast-util-to-markdown@1.5.0: - resolution: {integrity: sha512-bbv7TPv/WC49thZPg3jXuqzuvI45IL2EVAr/KxF0BSdHsU0ceFHOmwQn6evxAh1GaoK/6GQ1wp4R4oW2+LFL/A==} - - mdast-util-to-string@3.2.0: - resolution: {integrity: sha512-V4Zn/ncyN1QNSqSBxTrMOLpjr+IKdHl2v3KVLoWmDPscP4r9GcCi71gjgvUV1SFSKh92AjAG4peFuBl2/YgCJg==} - - mdurl@1.0.1: - resolution: {integrity: sha512-/sKlQJCBYVY9Ers9hqzKou4H6V5UWc/M59TH2dvkt+84itfnq7uFOMLpOiOS4ujvHP4etln18fmIxA5R5fll0g==} - - memoize-one@5.2.1: - resolution: {integrity: sha512-zYiwtZUcYyXKo/np96AGZAckk+FWWsUdJ3cHGGmld7+AhvcWmQyGCYUh1hc4Q/pkOhb65dQR/pqCyK0cOaHz4Q==} - - memoize-one@6.0.0: - resolution: {integrity: sha512-rkpe71W0N0c0Xz6QD0eJETuWAJGnJ9afsl1srmwPrI+yBCkge5EycXXbYRyvL29zZVUWQCY7InPRCv3GDXuZNw==} - - merge2@1.4.1: - resolution: {integrity: sha512-8q7VEgMJW4J8tcfVPy8g09NcQwZdbwFEqhe/WZkoIzjn/3TGDwtOCYtXGxA3O8tPzpczCCDgv+P2P5y00ZJOOg==} - engines: {node: '>= 8'} - - mermaid@10.9.1: - resolution: {integrity: sha512-Mx45Obds5W1UkW1nv/7dHRsbfMM1aOKA2+Pxs/IGHNonygDHwmng8xTHyS9z4KWVi0rbko8gjiBmuwwXQ7tiNA==} - - micromark-core-commonmark@1.1.0: - resolution: {integrity: sha512-BgHO1aRbolh2hcrzL2d1La37V0Aoz73ymF8rAcKnohLy93titmv62E0gP8Hrx9PKcKrqCZ1BbLGbP3bEhoXYlw==} - - micromark-extension-gfm-autolink-literal@1.0.5: - resolution: {integrity: sha512-z3wJSLrDf8kRDOh2qBtoTRD53vJ+CWIyo7uyZuxf/JAbNJjiHsOpG1y5wxk8drtv3ETAHutCu6N3thkOOgueWg==} - - micromark-extension-gfm-footnote@1.1.2: - resolution: {integrity: sha512-Yxn7z7SxgyGWRNa4wzf8AhYYWNrwl5q1Z8ii+CSTTIqVkmGZF1CElX2JI8g5yGoM3GAman9/PVCUFUSJ0kB/8Q==} - - micromark-extension-gfm-strikethrough@1.0.7: - resolution: {integrity: sha512-sX0FawVE1o3abGk3vRjOH50L5TTLr3b5XMqnP9YDRb34M0v5OoZhG+OHFz1OffZ9dlwgpTBKaT4XW/AsUVnSDw==} - - micromark-extension-gfm-table@1.0.7: - resolution: {integrity: sha512-3ZORTHtcSnMQEKtAOsBQ9/oHp9096pI/UvdPtN7ehKvrmZZ2+bbWhi0ln+I9drmwXMt5boocn6OlwQzNXeVeqw==} - - micromark-extension-gfm-tagfilter@1.0.2: - resolution: {integrity: sha512-5XWB9GbAUSHTn8VPU8/1DBXMuKYT5uOgEjJb8gN3mW0PNW5OPHpSdojoqf+iq1xo7vWzw/P8bAHY0n6ijpXF7g==} - - micromark-extension-gfm-task-list-item@1.0.5: - resolution: {integrity: sha512-RMFXl2uQ0pNQy6Lun2YBYT9g9INXtWJULgbt01D/x8/6yJ2qpKyzdZD3pi6UIkzF++Da49xAelVKUeUMqd5eIQ==} - - micromark-extension-gfm@2.0.3: - resolution: {integrity: sha512-vb9OoHqrhCmbRidQv/2+Bc6pkP0FrtlhurxZofvOEy5o8RtuuvTq+RQ1Vw5ZDNrVraQZu3HixESqbG+0iKk/MQ==} - - micromark-extension-math@2.1.2: - resolution: {integrity: sha512-es0CcOV89VNS9wFmyn+wyFTKweXGW4CEvdaAca6SWRWPyYCbBisnjaHLjWO4Nszuiud84jCpkHsqAJoa768Pvg==} - - micromark-extension-mdx-expression@1.0.8: - resolution: {integrity: sha512-zZpeQtc5wfWKdzDsHRBY003H2Smg+PUi2REhqgIhdzAa5xonhP03FcXxqFSerFiNUr5AWmHpaNPQTBVOS4lrXw==} - - micromark-extension-mdx-jsx@1.0.5: - resolution: {integrity: sha512-gPH+9ZdmDflbu19Xkb8+gheqEDqkSpdCEubQyxuz/Hn8DOXiXvrXeikOoBA71+e8Pfi0/UYmU3wW3H58kr7akA==} - - micromark-extension-mdx-md@1.0.1: - resolution: {integrity: sha512-7MSuj2S7xjOQXAjjkbjBsHkMtb+mDGVW6uI2dBL9snOBCbZmoNgDAeZ0nSn9j3T42UE/g2xVNMn18PJxZvkBEA==} - - micromark-extension-mdxjs-esm@1.0.5: - resolution: {integrity: sha512-xNRBw4aoURcyz/S69B19WnZAkWJMxHMT5hE36GtDAyhoyn/8TuAeqjFJQlwk+MKQsUD7b3l7kFX+vlfVWgcX1w==} - - micromark-extension-mdxjs@1.0.1: - resolution: {integrity: sha512-7YA7hF6i5eKOfFUzZ+0z6avRG52GpWR8DL+kN47y3f2KhxbBZMhmxe7auOeaTBrW2DenbbZTf1ea9tA2hDpC2Q==} - - micromark-factory-destination@1.1.0: - resolution: {integrity: sha512-XaNDROBgx9SgSChd69pjiGKbV+nfHGDPVYFs5dOoDd7ZnMAE+Cuu91BCpsY8RT2NP9vo/B8pds2VQNCLiu0zhg==} - - micromark-factory-label@1.1.0: - resolution: {integrity: sha512-OLtyez4vZo/1NjxGhcpDSbHQ+m0IIGnT8BoPamh+7jVlzLJBH98zzuCoUeMxvM6WsNeh8wx8cKvqLiPHEACn0w==} - - micromark-factory-mdx-expression@1.0.9: - resolution: {integrity: sha512-jGIWzSmNfdnkJq05c7b0+Wv0Kfz3NJ3N4cBjnbO4zjXIlxJr+f8lk+5ZmwFvqdAbUy2q6B5rCY//g0QAAaXDWA==} - - micromark-factory-space@1.1.0: - resolution: {integrity: sha512-cRzEj7c0OL4Mw2v6nwzttyOZe8XY/Z8G0rzmWQZTBi/jjwyw/U4uqKtUORXQrR5bAZZnbTI/feRV/R7hc4jQYQ==} - - micromark-factory-title@1.1.0: - resolution: {integrity: sha512-J7n9R3vMmgjDOCY8NPw55jiyaQnH5kBdV2/UXCtZIpnHH3P6nHUKaH7XXEYuWwx/xUJcawa8plLBEjMPU24HzQ==} - - micromark-factory-whitespace@1.1.0: - resolution: {integrity: sha512-v2WlmiymVSp5oMg+1Q0N1Lxmt6pMhIHD457whWM7/GUlEks1hI9xj5w3zbc4uuMKXGisksZk8DzP2UyGbGqNsQ==} - - micromark-util-character@1.2.0: - resolution: {integrity: sha512-lXraTwcX3yH/vMDaFWCQJP1uIszLVebzUa3ZHdrgxr7KEU/9mL4mVgCpGbyhvNLNlauROiNUq7WN5u7ndbY6xg==} - - micromark-util-character@2.1.0: - resolution: {integrity: sha512-KvOVV+X1yLBfs9dCBSopq/+G1PcgT3lAK07mC4BzXi5E7ahzMAF8oIupDDJ6mievI6F+lAATkbQQlQixJfT3aQ==} - - micromark-util-chunked@1.1.0: - resolution: {integrity: sha512-Ye01HXpkZPNcV6FiyoW2fGZDUw4Yc7vT0E9Sad83+bEDiCJ1uXu0S3mr8WLpsz3HaG3x2q0HM6CTuPdcZcluFQ==} - - micromark-util-classify-character@1.1.0: - resolution: {integrity: sha512-SL0wLxtKSnklKSUplok1WQFoGhUdWYKggKUiqhX+Swala+BtptGCu5iPRc+xvzJ4PXE/hwM3FNXsfEVgoZsWbw==} - - micromark-util-combine-extensions@1.1.0: - resolution: {integrity: sha512-Q20sp4mfNf9yEqDL50WwuWZHUrCO4fEyeDCnMGmG5Pr0Cz15Uo7KBs6jq+dq0EgX4DPwwrh9m0X+zPV1ypFvUA==} - - micromark-util-decode-numeric-character-reference@1.1.0: - resolution: {integrity: sha512-m9V0ExGv0jB1OT21mrWcuf4QhP46pH1KkfWy9ZEezqHKAxkj4mPCy3nIH1rkbdMlChLHX531eOrymlwyZIf2iw==} - - micromark-util-decode-string@1.1.0: - resolution: {integrity: sha512-YphLGCK8gM1tG1bd54azwyrQRjCFcmgj2S2GoJDNnh4vYtnL38JS8M4gpxzOPNyHdNEpheyWXCTnnTDY3N+NVQ==} - - micromark-util-encode@1.1.0: - resolution: {integrity: sha512-EuEzTWSTAj9PA5GOAs992GzNh2dGQO52UvAbtSOMvXTxv3Criqb6IOzJUBCmEqrrXSblJIJBbFFv6zPxpreiJw==} - - micromark-util-encode@2.0.0: - resolution: {integrity: sha512-pS+ROfCXAGLWCOc8egcBvT0kf27GoWMqtdarNfDcjb6YLuV5cM3ioG45Ys2qOVqeqSbjaKg72vU+Wby3eddPsA==} - - micromark-util-events-to-acorn@1.2.3: - resolution: {integrity: sha512-ij4X7Wuc4fED6UoLWkmo0xJQhsktfNh1J0m8g4PbIMPlx+ek/4YdW5mvbye8z/aZvAPUoxgXHrwVlXAPKMRp1w==} - - micromark-util-html-tag-name@1.2.0: - resolution: {integrity: sha512-VTQzcuQgFUD7yYztuQFKXT49KghjtETQ+Wv/zUjGSGBioZnkA4P1XXZPT1FHeJA6RwRXSF47yvJ1tsJdoxwO+Q==} - - micromark-util-normalize-identifier@1.1.0: - resolution: {integrity: sha512-N+w5vhqrBihhjdpM8+5Xsxy71QWqGn7HYNUvch71iV2PM7+E3uWGox1Qp90loa1ephtCxG2ftRV/Conitc6P2Q==} - - micromark-util-resolve-all@1.1.0: - resolution: {integrity: sha512-b/G6BTMSg+bX+xVCshPTPyAu2tmA0E4X98NSR7eIbeC6ycCqCeE7wjfDIgzEbkzdEVJXRtOG4FbEm/uGbCRouA==} - - micromark-util-sanitize-uri@1.2.0: - resolution: {integrity: sha512-QO4GXv0XZfWey4pYFndLUKEAktKkG5kZTdUNaTAkzbuJxn2tNBOr+QtxR2XpWaMhbImT2dPzyLrPXLlPhph34A==} - - micromark-util-sanitize-uri@2.0.0: - resolution: {integrity: sha512-WhYv5UEcZrbAtlsnPuChHUAsu/iBPOVaEVsntLBIdpibO0ddy8OzavZz3iL2xVvBZOpolujSliP65Kq0/7KIYw==} - - micromark-util-subtokenize@1.1.0: - resolution: {integrity: sha512-kUQHyzRoxvZO2PuLzMt2P/dwVsTiivCK8icYTeR+3WgbuPqfHgPPy7nFKbeqRivBvn/3N3GBiNC+JRTMSxEC7A==} - - micromark-util-symbol@1.1.0: - resolution: {integrity: sha512-uEjpEYY6KMs1g7QfJ2eX1SQEV+ZT4rUD3UcF6l57acZvLNK7PBZL+ty82Z1qhK1/yXIY4bdx04FKMgR0g4IAag==} - - micromark-util-symbol@2.0.0: - resolution: {integrity: sha512-8JZt9ElZ5kyTnO94muPxIGS8oyElRJaiJO8EzV6ZSyGQ1Is8xwl4Q45qU5UOg+bGH4AikWziz0iN4sFLWs8PGw==} - - micromark-util-types@1.1.0: - resolution: {integrity: sha512-ukRBgie8TIAcacscVHSiddHjO4k/q3pnedmzMQ4iwDcK0FtFCohKOlFbaOL/mPgfnPsL3C1ZyxJa4sbWrBl3jg==} - - micromark-util-types@2.0.0: - resolution: {integrity: sha512-oNh6S2WMHWRZrmutsRmDDfkzKtxF+bc2VxLC9dvtrDIRFln627VsFP6fLMgTryGDljgLPjkrzQSDcPrjPyDJ5w==} - - micromark@3.2.0: - resolution: {integrity: sha512-uD66tJj54JLYq0De10AhWycZWGQNUvDI55xPgk2sQM5kn1JYlhbCMTtEeT27+vAhW2FBQxLlOmS3pmA7/2z4aA==} - - micromatch@4.0.8: - resolution: {integrity: sha512-PXwfBhYu0hBCPw8Dn0E+WDYb7af3dSLVWKi3HGv84IdF4TyFoC0ysxFd0Goxw7nSv4T/PzEJQxsYsEiFCKo2BA==} - engines: {node: '>=8.6'} - - mime-db@1.52.0: - resolution: {integrity: sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==} - engines: {node: '>= 0.6'} - - mime-types@2.1.35: - resolution: {integrity: sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==} - engines: {node: '>= 0.6'} - - minimatch@9.0.5: - resolution: {integrity: sha512-G6T0ZX48xgozx7587koeX9Ys2NYy6Gmv//P89sEte9V9whIapMNF4idKxnW2QtCcLiTWlb/wfCabAtAFWhhBow==} - engines: {node: '>=16 || 14 >=14.17'} - - minipass@7.1.2: - resolution: {integrity: sha512-qOOzS1cBTWYF4BH8fVePDBOO9iptMnGUEZwNc/cMWnTV2nVLZ7VoNWEPHkYczZA0pdoA7dl6e7FL659nX9S2aw==} - engines: {node: '>=16 || 14 >=14.17'} - - moment@2.30.1: - resolution: {integrity: sha512-uEmtNhbDOrWPFS+hdjFCBfy9f2YoyzRpwcl+DqpC6taX21FzsTLQVbMV/W7PzNSX6x/bhC1zA3c2UQ5NzH6how==} - - mri@1.2.0: - resolution: {integrity: sha512-tzzskb3bG8LvYGFF/mDTpq3jpI6Q9wc3LEmBaghu+DdCssd1FakN7Bc0hVNmEyGq1bq3RgfkCb3cmQLpNPOroA==} - engines: {node: '>=4'} - - ms@2.1.2: - resolution: {integrity: sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==} - - mz@2.7.0: - resolution: {integrity: sha512-z81GNO7nnYMEhrGh9LeymoE4+Yr0Wn5McHIZMK5cfQCl+NDX08sCZgUc9/6MHni9IWuFLm1Z3HTCXu2z9fN62Q==} - - nanoid@3.3.7: - resolution: {integrity: sha512-eSRppjcPIatRIMC1U6UngP8XFcz8MQWGQdt1MTBQ7NaAmvXDfvNxbvWV3x2y6CdEUciCSsDHDQZbhYaB8QEo2g==} - engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1} - hasBin: true - - next-mdx-remote@4.4.1: - resolution: {integrity: sha512-1BvyXaIou6xy3XoNF4yaMZUCb6vD2GTAa5ciOa6WoO+gAUTYsb1K4rI/HSC2ogAWLrb/7VSV52skz07vOzmqIQ==} - engines: {node: '>=14', npm: '>=7'} - peerDependencies: - react: '>=16.x <=18.x' - react-dom: '>=16.x <=18.x' - - next-seo@6.5.0: - resolution: {integrity: sha512-MfzUeWTN/x/rsKp/1n0213eojO97lIl0unxqbeCY+6pAucViHDA8GSLRRcXpgjsSmBxfCFdfpu7LXbt4ANQoNQ==} - peerDependencies: - next: ^8.1.1-canary.54 || >=9.0.0 - react: '>=16.0.0' - react-dom: '>=16.0.0' - - next-themes@0.2.1: - resolution: {integrity: sha512-B+AKNfYNIzh0vqQQKqQItTS8evEouKD7H5Hj3kmuPERwddR2TxvDSFZuTj6T7Jfn1oyeUyJMydPl1Bkxkh0W7A==} - peerDependencies: - next: '*' - react: '*' - react-dom: '*' - - next@14.2.7: - resolution: {integrity: sha512-4Qy2aK0LwH4eQiSvQWyKuC7JXE13bIopEQesWE0c/P3uuNRnZCQanI0vsrMLmUQJLAto+A+/8+sve2hd+BQuOQ==} - engines: {node: '>=18.17.0'} - hasBin: true - peerDependencies: - '@opentelemetry/api': ^1.1.0 - '@playwright/test': ^1.41.2 - react: ^18.2.0 - react-dom: ^18.2.0 - sass: ^1.3.0 - peerDependenciesMeta: - '@opentelemetry/api': - optional: true - '@playwright/test': - optional: true - sass: - optional: true - - nextra-theme-docs@2.13.4: - resolution: {integrity: sha512-2XOoMfwBCTYBt8ds4ZHftt9Wyf2XsykiNo02eir/XEYB+sGeUoE77kzqfidjEOKCSzOHYbK9BDMcg2+B/2vYRw==} - peerDependencies: - next: '>=9.5.3' - nextra: 2.13.4 - react: '>=16.13.1' - react-dom: '>=16.13.1' - - nextra@2.13.4: - resolution: {integrity: sha512-7of2rSBxuUa3+lbMmZwG9cqgftcoNOVQLTT6Rxf3EhBR9t1EI7b43dted8YoqSNaigdE3j1CoyNkX8N/ZzlEpw==} - engines: {node: '>=16'} - peerDependencies: - next: '>=9.5.3' - react: '>=16.13.1' - react-dom: '>=16.13.1' - - node-emoji@1.11.0: - resolution: {integrity: sha512-wo2DpQkQp7Sjm2A0cq+sN7EHKO6Sl0ctXeBdFZrL9T9+UywORbufTcTZxom8YqpLQt/FqNMUkOpkZrJVYSKD3A==} - - node-releases@2.0.18: - resolution: {integrity: sha512-d9VeXT4SJ7ZeOqGX6R5EM022wpL+eWPooLI+5UpWn2jCT1aosUQEhQP214x33Wkwx3JQMvIm+tIoVOdodFS40g==} - - non-layered-tidy-tree-layout@2.0.2: - resolution: {integrity: sha512-gkXMxRzUH+PB0ax9dUN0yYF0S25BqeAYqhgMaLUFmpXLEk7Fcu8f4emJuOAY0V8kjDICxROIKsTAKsV/v355xw==} - - normalize-path@3.0.0: - resolution: {integrity: sha512-6eZs5Ls3WtCisHWp9S2GUy8dqkpGi4BVSz3GaqiE6ezub0512ESztXUwUB6C6IKbQkY2Pnb/mD4WYojCRwcwLA==} - engines: {node: '>=0.10.0'} - - normalize-range@0.1.2: - resolution: {integrity: sha512-bdok/XvKII3nUpklnV6P2hxtMNrCboOjAcyBuQnWEhO665FwrSNRxU+AqpsyvO6LgGYPspN+lu5CLtw4jPRKNA==} - engines: {node: '>=0.10.0'} - - npm-run-path@2.0.2: - resolution: {integrity: sha512-lJxZYlT4DW/bRUtFh1MQIWqmLwQfAxnqWG4HhEdjMlkrJYnJn0Jrr2u3mgxqaWsdiBc76TYkTG/mhrnYTuzfHw==} - engines: {node: '>=4'} - - npm-to-yarn@2.2.1: - resolution: {integrity: sha512-O/j/ROyX0KGLG7O6Ieut/seQ0oiTpHF2tXAcFbpdTLQFiaNtkyTXXocM1fwpaa60dg1qpWj0nHlbNhx6qwuENQ==} - engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0} - - numeral@2.0.6: - resolution: {integrity: sha512-qaKRmtYPZ5qdw4jWJD6bxEf1FJEqllJrwxCLIm0sQU/A7v2/czigzOb+C2uSiFsa9lBUzeH7M1oK+Q+OLxL3kA==} - - object-assign@4.1.1: - resolution: {integrity: sha512-rJgTQnkUnH1sFw8yT6VSU3zD3sWmu6sZhIseY8VX+GRu3P6F7Fu+JNDoXfklElbLJSnc3FUQHVe4cU5hj+BcUg==} - engines: {node: '>=0.10.0'} - - object-hash@3.0.0: - resolution: {integrity: sha512-RSn9F68PjH9HqtltsSnqYC1XXoWe9Bju5+213R98cNGttag9q9yAOTzdbsqvIa7aNm5WffBZFpWYr2aWrklWAw==} - engines: {node: '>= 6'} - - p-finally@1.0.0: - resolution: {integrity: sha512-LICb2p9CB7FS+0eR1oqWnHhp0FljGLZCWBE9aix0Uye9W8LTQPwMTYVGWQWIw9RdQiDg4+epXQODwIYJtSJaow==} - engines: {node: '>=4'} - - p-limit@3.1.0: - resolution: {integrity: sha512-TYOanM3wGwNGsZN2cVTYPArw454xnXj5qmWF1bEoAc4+cU/ol7GVh7odevjp1FNHduHc3KZMcFduxU5Xc6uJRQ==} - engines: {node: '>=10'} - - package-json-from-dist@1.0.0: - resolution: {integrity: sha512-dATvCeZN/8wQsGywez1mzHtTlP22H8OEfPrVMLNr4/eGa+ijtLn/6M5f0dY8UKNrC2O9UCU6SSoG3qRKnt7STw==} - - papaparse@5.4.1: - resolution: {integrity: sha512-HipMsgJkZu8br23pW15uvo6sib6wne/4woLZPlFf3rpDyMe9ywEXUsuD7+6K9PRkJlVT51j/sCOYDKGGS3ZJrw==} - - parent-module@1.0.1: - resolution: {integrity: sha512-GQ2EWRpQV8/o+Aw8YqtfZZPfNRWZYkbidE9k5rpl/hC3vtHHBfGm2Ifi6qWV+coDGkrUKZAxE3Lot5kcsRlh+g==} - engines: {node: '>=6'} - - parse-entities@2.0.0: - resolution: {integrity: sha512-kkywGpCcRYhqQIchaWqZ875wzpS/bMKhz5HnN3p7wveJTkTtyAB/AlnS0f8DFSqYW1T82t6yEAkEcB+A1I3MbQ==} - - parse-entities@4.0.1: - resolution: {integrity: sha512-SWzvYcSJh4d/SGLIOQfZ/CoNv6BTlI6YEQ7Nj82oDVnRpwe/Z/F1EMx42x3JAOwGBlCjeCH0BRJQbQ/opHL17w==} - - parse-json@5.2.0: - resolution: {integrity: sha512-ayCKvm/phCGxOkYRSCM82iDwct8/EonSEgCSxWxD7ve6jHggsFl4fZVQBPRNgQoKiuV/odhFrGzQXZwbifC8Rg==} - engines: {node: '>=8'} - - parse-numeric-range@1.3.0: - resolution: {integrity: sha512-twN+njEipszzlMJd4ONUYgSfZPDxgHhT9Ahed5uTigpQn90FggW4SA/AIPq/6a149fTbE9qBEcSwE3FAEp6wQQ==} - - parse-path@7.0.0: - resolution: {integrity: sha512-Euf9GG8WT9CdqwuWJGdf3RkUcTBArppHABkO7Lm8IzRQp0e2r/kkFnmhu4TSK30Wcu5rVAZLmfPKSBBi9tWFog==} - - parse-url@8.1.0: - resolution: {integrity: sha512-xDvOoLU5XRrcOZvnI6b8zA6n9O9ejNk/GExuz1yBuWUGn9KA97GI6HTs6u02wKara1CeVmZhH+0TZFdWScR89w==} - - parse5@6.0.1: - resolution: {integrity: sha512-Ofn/CTFzRGTTxwpNEs9PP93gXShHcTq255nzRYSKe8AkVpZY7e1fpmTfOyoIvjP5HG7Z2ZM7VS9PPhQGW2pOpw==} - - parse5@7.1.2: - resolution: {integrity: sha512-Czj1WaSVpaoj0wbhMzLmWD69anp2WH7FXMB9n1Sy8/ZFF9jolSQVMu1Ij5WIyGmcBmhk7EOndpO4mIpihVqAXw==} - - path-key@2.0.1: - resolution: {integrity: sha512-fEHGKCSmUSDPv4uoj8AlD+joPlq3peND+HRYyxFz4KPw4z926S/b8rIuFs2FYJg3BwsxJf6A9/3eIdLaYC+9Dw==} - engines: {node: '>=4'} - - path-key@3.1.1: - resolution: {integrity: sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q==} - engines: {node: '>=8'} - - path-parse@1.0.7: - resolution: {integrity: sha512-LDJzPVEEEPR+y48z93A0Ed0yXb8pAByGWo/k5YYdYgpY2/2EsOsksJrq7lOHxryrVOn1ejG6oAp8ahvOIQD8sw==} - - path-scurry@1.11.1: - resolution: {integrity: sha512-Xa4Nw17FS9ApQFJ9umLiJS4orGjm7ZzwUrwamcGQuHSzDyth9boKDaycYdDcZDuqYATXw4HFXgaqWTctW/v1HA==} - engines: {node: '>=16 || 14 >=14.18'} - - path-type@4.0.0: - resolution: {integrity: sha512-gDKb8aZMDeD/tZWs9P6+q0J9Mwkdl6xMV8TjnGP3qJVJ06bdMgkbBlLU8IdfOsIsFz2BW1rNVT3XuNEl8zPAvw==} - engines: {node: '>=8'} - - periscopic@3.1.0: - resolution: {integrity: sha512-vKiQ8RRtkl9P+r/+oefh25C3fhybptkHKCZSPlcXiJux2tJF55GnEj3BVn4A5gKfq9NWWXXrxkHBwVPUfH0opw==} - - picocolors@1.0.1: - resolution: {integrity: sha512-anP1Z8qwhkbmu7MFP5iTt+wQKXgwzf7zTyGlcdzabySa9vd0Xt392U0rVmz9poOaBj0uHJKyyo9/upk0HrEQew==} - - picomatch@2.3.1: - resolution: {integrity: sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==} - engines: {node: '>=8.6'} - - pify@2.3.0: - resolution: {integrity: sha512-udgsAY+fTnvv7kI7aaxbqwWNb0AHiB0qBO89PZKPkoTmGOgdbrHDKD+0B2X4uTfJ/FT1R09r9gTsjUjNJotuog==} - engines: {node: '>=0.10.0'} - - pirates@4.0.6: - resolution: {integrity: sha512-saLsH7WeYYPiD25LDuLRRY/i+6HaPYr6G1OUlN39otzkSTxKnubR9RTxS3/Kk50s1g2JTgFwWQDQyplC5/SHZg==} - engines: {node: '>= 6'} - - postcss-import@15.1.0: - resolution: {integrity: sha512-hpr+J05B2FVYUAXHeK1YyI267J/dDDhMU6B6civm8hSY1jYJnBXxzKDKDswzJmtLHryrjhnDjqqp/49t8FALew==} - engines: {node: '>=14.0.0'} - peerDependencies: - postcss: ^8.0.0 - - postcss-js@4.0.1: - resolution: {integrity: sha512-dDLF8pEO191hJMtlHFPRa8xsizHaM82MLfNkUHdUtVEV3tgTp5oj+8qbEqYM57SLfc74KSbw//4SeJma2LRVIw==} - engines: {node: ^12 || ^14 || >= 16} - peerDependencies: - postcss: ^8.4.21 - - postcss-load-config@4.0.2: - resolution: {integrity: sha512-bSVhyJGL00wMVoPUzAVAnbEoWyqRxkjv64tUl427SKnPrENtq6hJwUojroMz2VB+Q1edmi4IfrAPpami5VVgMQ==} - engines: {node: '>= 14'} - peerDependencies: - postcss: '>=8.0.9' - ts-node: '>=9.0.0' - peerDependenciesMeta: - postcss: - optional: true - ts-node: - optional: true - - postcss-nested@6.2.0: - resolution: {integrity: sha512-HQbt28KulC5AJzG+cZtj9kvKB93CFCdLvog1WFLf1D+xmMvPGlBstkpTEZfK5+AN9hfJocyBFCNiqyS48bpgzQ==} - engines: {node: '>=12.0'} - peerDependencies: - postcss: ^8.2.14 - - postcss-selector-parser@6.1.2: - resolution: {integrity: sha512-Q8qQfPiZ+THO/3ZrOrO0cJJKfpYCagtMUkXbnEfmgUjwXg6z/WBeOyS9APBBPCTSiDV+s4SwQGu8yFsiMRIudg==} - engines: {node: '>=4'} - - postcss-value-parser@4.2.0: - resolution: {integrity: sha512-1NNCs6uurfkVbeXG4S8JFT9t19m45ICnif8zWLd5oPSZ50QnwMfK+H3jv408d4jw/7Bttv5axS5IiHoLaVNHeQ==} - - postcss@8.4.31: - resolution: {integrity: sha512-PS08Iboia9mts/2ygV3eLpY5ghnUcfLV/EXTOW1E2qYxJKGGBUtNjN76FYHnMs36RmARn41bC0AZmn+rR0OVpQ==} - engines: {node: ^10 || ^12 || >=14} - - postcss@8.4.41: - resolution: {integrity: sha512-TesUflQ0WKZqAvg52PWL6kHgLKP6xB6heTOdoYM0Wt2UHyxNa4K25EZZMgKns3BH1RLVbZCREPpLY0rhnNoHVQ==} - engines: {node: ^10 || ^12 || >=14} - - prismjs@1.27.0: - resolution: {integrity: sha512-t13BGPUlFDR7wRB5kQDG4jjl7XeuH6jbJGt11JHPL96qwsEHNX2+68tFXqc1/k+/jALsbSWJKUOT/hcYAZ5LkA==} - engines: {node: '>=6'} - - prop-types@15.8.1: - resolution: {integrity: sha512-oj87CgZICdulUohogVAR7AjlC0327U4el4L6eAvOqCeudMDVU0NThNaV+b9Df4dXgSP1gXMTnPdhfe/2qDH5cg==} - - property-information@5.6.0: - resolution: {integrity: sha512-YUHSPk+A30YPv+0Qf8i9Mbfe/C0hdPXk1s1jPVToV8pk8BQtpw10ct89Eo7OWkutrwqvT0eicAxlOg3dOAu8JA==} - - property-information@6.5.0: - resolution: {integrity: sha512-PgTgs/BlvHxOu8QuEN7wi5A0OmXaBcHpmCSTehcs6Uuu9IkDIEo13Hy7n898RHfrQ49vKCoGeWZSaAK01nwVig==} - - protocols@2.0.1: - resolution: {integrity: sha512-/XJ368cyBJ7fzLMwLKv1e4vLxOju2MNAIokcr7meSaNcVbWz/CPcW22cP04mwxOErdA5mwjA8Q6w/cdAQxVn7Q==} - - proxy-from-env@1.1.0: - resolution: {integrity: sha512-D+zkORCbA9f1tdWRK0RaCR3GPv50cMxcrz4X8k5LTSUD1Dkw47mKJEZQNunItRTkWwgtaUSo1RVFRIG9ZXiFYg==} - - pseudomap@1.0.2: - resolution: {integrity: sha512-b/YwNhb8lk1Zz2+bXXpS/LK9OisiZZ1SNsSLxN1x2OXVEhW2Ckr/7mWE5vrC1ZTiJlD9g19jWszTmJsB+oEpFQ==} - - querystringify@2.2.0: - resolution: {integrity: sha512-FIqgj2EUvTa7R50u0rGsyTftzjYmv/a3hO345bZNrqabNqjtgiDMgmo4mkUjd+nzU5oF3dClKqFIPUKybUyqoQ==} - - queue-microtask@1.2.3: - resolution: {integrity: sha512-NuaNSa6flKT5JaSYQzJok04JzTL1CA6aGhv5rfLW3PgqA+M2ChpZQnAC8h8i4ZFkBS8X5RqkDBHA7r4hej3K9A==} - - raf-schd@4.0.3: - resolution: {integrity: sha512-tQkJl2GRWh83ui2DiPTJz9wEiMN20syf+5oKfB03yYP7ioZcJwsIK8FjrtLwH1m7C7e+Tt2yYBlrOpdT+dyeIQ==} - - react-clientside-effect@1.2.6: - resolution: {integrity: sha512-XGGGRQAKY+q25Lz9a/4EPqom7WRjz3z9R2k4jhVKA/puQFH/5Nt27vFZYql4m4NVNdUvX8PS3O7r/Zzm7cjUlg==} - peerDependencies: - react: ^15.3.0 || ^16.0.0 || ^17.0.0 || ^18.0.0 - - react-dom@18.3.1: - resolution: {integrity: sha512-5m4nQKp+rZRb09LNH59GM4BxTh9251/ylbKIbpe7TpGxfJ+9kv6BLkLBXIjjspbgbnIBNqlI23tRnTWT0snUIw==} - peerDependencies: - react: ^18.3.1 - - react-dropzone@11.7.1: - resolution: {integrity: sha512-zxCMwhfPy1olUEbw3FLNPLhAm/HnaYH5aELIEglRbqabizKAdHs0h+WuyOpmA+v1JXn0++fpQDdNfUagWt5hJQ==} - engines: {node: '>= 10.13'} - peerDependencies: - react: '>= 16.8' - - react-element-to-jsx-string@15.0.0: - resolution: {integrity: sha512-UDg4lXB6BzlobN60P8fHWVPX3Kyw8ORrTeBtClmIlGdkOOE+GYQSFvmEU5iLLpwp/6v42DINwNcwOhOLfQ//FQ==} - peerDependencies: - react: ^0.14.8 || ^15.0.1 || ^16.0.0 || ^17.0.1 || ^18.0.0 - react-dom: ^0.14.8 || ^15.0.1 || ^16.0.0 || ^17.0.1 || ^18.0.0 - - react-focus-lock@2.13.2: - resolution: {integrity: sha512-T/7bsofxYqnod2xadvuwjGKHOoL5GH7/EIPI5UyEvaU/c2CcphvGI371opFtuY/SYdbMsNiuF4HsHQ50nA/TKQ==} - peerDependencies: - '@types/react': ^16.8.0 || ^17.0.0 || ^18.0.0 - react: ^16.8.0 || ^17.0.0 || ^18.0.0 - peerDependenciesMeta: - '@types/react': - optional: true - - react-focus-on@3.9.3: - resolution: {integrity: sha512-GSLz54TvP6OUlsvnlgHJu80nHOAO2ikRTtDt/aP8GZu3DPPAbwHFdliveBwUfPnyKLUKutFMCJUkH55vuo4uKQ==} - engines: {node: '>=8.5.0'} - peerDependencies: - '@types/react': ^16.8.0 || ^17.0.0 || ^18.0.0 - react: ^16.8.0 || ^17.0.0 || ^18.0.0 - peerDependenciesMeta: - '@types/react': - optional: true - - react-is@16.13.1: - resolution: {integrity: sha512-24e6ynE2H+OKt4kqsOvNd8kBpV65zoxbA4BVsEOB3ARVWQki/DHzaUoC5KuON/BiccDaCCTZBuOcfZs70kR8bQ==} - - react-is@17.0.2: - resolution: {integrity: sha512-w2GsyukL62IJnlaff/nRegPQR94C/XXamvMWmSHRJ4y7Ts/4ocGRmTHvOs8PSE6pB3dWOrD/nueuU5sduBsQ4w==} - - react-is@18.1.0: - resolution: {integrity: sha512-Fl7FuabXsJnV5Q1qIOQwx/sagGF18kogb4gpfcG4gjLBWO0WDiiz1ko/ExayuxE7InyQkBLkxRFG5oxY6Uu3Kg==} - - react-is@18.3.1: - resolution: {integrity: sha512-/LLMVyas0ljjAtoYiPqYiL8VWXzUUdThrmU5+n20DZv+a+ClRoevUzw5JxU+Ieh5/c87ytoTBV9G1FiKfNJdmg==} - - react-redux@8.1.3: - resolution: {integrity: sha512-n0ZrutD7DaX/j9VscF+uTALI3oUPa/pO4Z3soOBIjuRn/FzVu6aehhysxZCLi6y7duMf52WNZGMl7CtuK5EnRw==} - peerDependencies: - '@types/react': ^16.8 || ^17.0 || ^18.0 - '@types/react-dom': ^16.8 || ^17.0 || ^18.0 - react: ^16.8 || ^17.0 || ^18.0 - react-dom: ^16.8 || ^17.0 || ^18.0 - react-native: '>=0.59' - redux: ^4 || ^5.0.0-beta.0 - peerDependenciesMeta: - '@types/react': - optional: true - '@types/react-dom': - optional: true - react-dom: - optional: true - react-native: - optional: true - redux: - optional: true - - react-remove-scroll-bar@2.3.6: - resolution: {integrity: sha512-DtSYaao4mBmX+HDo5YWYdBWQwYIQQshUV/dVxFxK+KM26Wjwp1gZ6rv6OC3oujI6Bfu6Xyg3TwK533AQutsn/g==} - engines: {node: '>=10'} - peerDependencies: - '@types/react': ^16.8.0 || ^17.0.0 || ^18.0.0 - react: ^16.8.0 || ^17.0.0 || ^18.0.0 - peerDependenciesMeta: - '@types/react': - optional: true - - react-remove-scroll@2.5.10: - resolution: {integrity: sha512-m3zvBRANPBw3qxVVjEIPEQinkcwlFZ4qyomuWVpNJdv4c6MvHfXV0C3L9Jx5rr3HeBHKNRX+1jreB5QloDIJjA==} - engines: {node: '>=10'} - peerDependencies: - '@types/react': ^16.8.0 || ^17.0.0 || ^18.0.0 - react: ^16.8.0 || ^17.0.0 || ^18.0.0 - peerDependenciesMeta: - '@types/react': - optional: true - - react-style-singleton@2.2.1: - resolution: {integrity: sha512-ZWj0fHEMyWkHzKYUr2Bs/4zU6XLmq9HsgBURm7g5pAVfyn49DgUiNgY2d4lXRlYSiCif9YBGpQleewkcqddc7g==} - engines: {node: '>=10'} - peerDependencies: - '@types/react': ^16.8.0 || ^17.0.0 || ^18.0.0 - react: ^16.8.0 || ^17.0.0 || ^18.0.0 - peerDependenciesMeta: - '@types/react': - optional: true - - react-virtualized-auto-sizer@1.0.24: - resolution: {integrity: sha512-3kCn7N9NEb3FlvJrSHWGQ4iVl+ydQObq2fHMn12i5wbtm74zHOPhz/i64OL3c1S1vi9i2GXtZqNqUJTQ+BnNfg==} - peerDependencies: - react: ^15.3.0 || ^16.0.0-alpha || ^17.0.0 || ^18.0.0 - react-dom: ^15.3.0 || ^16.0.0-alpha || ^17.0.0 || ^18.0.0 - - react-window@1.8.10: - resolution: {integrity: sha512-Y0Cx+dnU6NLa5/EvoHukUD0BklJ8qITCtVEPY1C/nL8wwoZ0b5aEw8Ff1dOVHw7fCzMt55XfJDd8S8W8LCaUCg==} - engines: {node: '>8.0.0'} - peerDependencies: - react: ^15.0.0 || ^16.0.0 || ^17.0.0 || ^18.0.0 - react-dom: ^15.0.0 || ^16.0.0 || ^17.0.0 || ^18.0.0 - - react@18.3.1: - resolution: {integrity: sha512-wS+hAgJShR0KhEvPJArfuPVN1+Hz1t0Y6n5jLrGQbkb4urgPE/0Rve+1kMB1v/oWgHgm4WIcV+i7F2pTVj+2iQ==} - engines: {node: '>=0.10.0'} - - read-cache@1.0.0: - resolution: {integrity: sha512-Owdv/Ft7IjOgm/i0xvNDZ1LrRANRfew4b2prF3OWMQLxLfu3bS8FVhCsrSCMK4lR56Y9ya+AThoTpDCTxCmpRA==} - - readdirp@3.6.0: - resolution: {integrity: sha512-hOS089on8RduqdbhvQ5Z37A0ESjsqz6qnRcffsMU3495FuTdqSm+7bhJ29JvIOsBDEEnan5DPu9t3To9VRlMzA==} - engines: {node: '>=8.10.0'} - - reading-time@1.5.0: - resolution: {integrity: sha512-onYyVhBNr4CmAxFsKS7bz+uTLRakypIe4R+5A824vBSkQy/hB3fZepoVEf8OVAxzLvK+H/jm9TzpI3ETSm64Kg==} - - redux@4.2.1: - resolution: {integrity: sha512-LAUYz4lc+Do8/g7aeRa8JkyDErK6ekstQaqWQrNRW//MY1TvCEpMtpTWvlQ+FPbWCx+Xixu/6SHt5N0HR+SB4w==} - - refractor@3.6.0: - resolution: {integrity: sha512-MY9W41IOWxxk31o+YvFCNyNzdkc9M20NoZK5vq6jkv4I/uh2zkWcfudj0Q1fovjUQJrNewS9NMzeTtqPf+n5EA==} - - regenerator-runtime@0.14.1: - resolution: {integrity: sha512-dYnhHh0nJoMfnkZs6GmmhFknAGRrLznOu5nc9ML+EJxGvrx6H7teuevqVqCuPcPK//3eDrrjQhehXVx9cnkGdw==} - - rehype-katex@7.0.1: - resolution: {integrity: sha512-OiM2wrZ/wuhKkigASodFoo8wimG3H12LWQaH8qSPVJn9apWKFSH3YOCtbKpBorTVw/eI7cuT21XBbvwEswbIOA==} - - rehype-pretty-code@0.9.11: - resolution: {integrity: sha512-Eq90eCYXQJISktfRZ8PPtwc5SUyH6fJcxS8XOMnHPUQZBtC6RYo67gGlley9X2nR8vlniPj0/7oCDEYHKQa/oA==} - engines: {node: '>=16'} - peerDependencies: - shiki: '*' - - rehype-raw@5.1.0: - resolution: {integrity: sha512-MDvHAb/5mUnif2R+0IPCYJU8WjHa9UzGtM/F4AVy5GixPlDZ1z3HacYy4xojDU+uBa+0X/3PIfyQI26/2ljJNA==} - - rehype-raw@7.0.0: - resolution: {integrity: sha512-/aE8hCfKlQeA8LmyeyQvQF3eBiLRGNlfBJEvWH7ivp9sBqs7TNqBL5X3v157rM4IFETqDnIOO+z5M/biZbo9Ww==} - - rehype-react@6.2.1: - resolution: {integrity: sha512-f9KIrjktvLvmbGc7si25HepocOg4z0MuNOtweigKzBcDjiGSTGhyz6VSgaV5K421Cq1O+z4/oxRJ5G9owo0KVg==} - - rehype-stringify@8.0.0: - resolution: {integrity: sha512-VkIs18G0pj2xklyllrPSvdShAV36Ff3yE5PUO9u36f6+2qJFnn22Z5gKwBOwgXviux4UC7K+/j13AnZfPICi/g==} - - remark-breaks@2.0.2: - resolution: {integrity: sha512-LsQnPPQ7Fzp9RTjj4IwdEmjPOr9bxe9zYKWhs9ZQOg9hMg8rOfeeqQ410cvVdIK87Famqza1CKRxNkepp2EvUA==} - - remark-emoji@2.2.0: - resolution: {integrity: sha512-P3cj9s5ggsUvWw5fS2uzCHJMGuXYRb0NnZqYlNecewXt8QBU9n5vW3DUUKOhepS8F9CwdMx9B8a3i7pqFWAI5w==} - - remark-gfm@3.0.1: - resolution: {integrity: sha512-lEFDoi2PICJyNrACFOfDD3JlLkuSbOa5Wd8EPt06HUdptv8Gn0bxYTdbU/XXQ3swAPkEaGxxPN9cbnMHvVu1Ig==} - - remark-math@5.1.1: - resolution: {integrity: sha512-cE5T2R/xLVtfFI4cCePtiRn+e6jKMtFDR3P8V3qpv8wpKjwvHoBA4eJzvX+nVrnlNy0911bdGmuspCSwetfYHw==} - - remark-mdx@2.3.0: - resolution: {integrity: sha512-g53hMkpM0I98MU266IzDFMrTD980gNF3BJnkyFcmN+dD873mQeD5rdMO3Y2X+x8umQfbSE0PcoEDl7ledSA+2g==} - - remark-parse-no-trim@8.0.4: - resolution: {integrity: sha512-WtqeHNTZ0LSdyemmY1/G6y9WoEFblTtgckfKF5/NUnri919/0/dEu8RCDfvXtJvu96soMvT+mLWWgYVUaiHoag==} - - remark-parse@10.0.2: - resolution: {integrity: sha512-3ydxgHa/ZQzG8LvC7jTXccARYDcRld3VfcgIIFs7bI6vbRSxJJmzgLEIIoYKyrfhaY+ujuWaf/PJiMZXoiCXgw==} - - remark-reading-time@2.0.1: - resolution: {integrity: sha512-fy4BKy9SRhtYbEHvp6AItbRTnrhiDGbqLQTSYVbQPGuRCncU1ubSsh9p/W5QZSxtYcUXv8KGL0xBgPLyNJA1xw==} - - remark-rehype@10.1.0: - resolution: {integrity: sha512-EFmR5zppdBp0WQeDVZ/b66CWJipB2q2VLNFMabzDSGR66Z2fQii83G5gTBbgGEnEEA0QRussvrFHxk1HWGJskw==} - - remark-rehype@8.1.0: - resolution: {integrity: sha512-EbCu9kHgAxKmW1yEYjx3QafMyGY3q8noUbNUI5xyKbaFP89wbhDrKxyIQNukNYthzjNHZu6J7hwFg7hRm1svYA==} - - remove-accents@0.5.0: - resolution: {integrity: sha512-8g3/Otx1eJaVD12e31UbJj1YzdtVvzH85HV7t+9MJYk/u3XmkOUJ5Ys9wQrf9PCPK8+xn4ymzqYCiZl6QWKn+A==} - - repeat-string@1.6.1: - resolution: {integrity: sha512-PV0dzCYDNfRi1jCDbJzpW7jNNDRuCOG/jI5ctQcGKt/clZD+YcPS3yIlWuTJMmESC8aevCFmWJy5wjAFgNqN6w==} - engines: {node: '>=0.10'} - - requires-port@1.0.0: - resolution: {integrity: sha512-KigOCHcocU3XODJxsu8i/j8T9tzT4adHiecwORRQ0ZZFcp7ahwXuRU1m+yuO90C5ZUyGeGfocHDI14M3L3yDAQ==} - - resolve-from@4.0.0: - resolution: {integrity: sha512-pb/MYmXstAkysRFx8piNI1tGFNQIFA3vkE3Gq4EuA1dF6gHp/+vgZqsCGJapvy8N3Q+4o7FwvquPJcnZ7RYy4g==} - engines: {node: '>=4'} - - resolve@1.22.8: - resolution: {integrity: sha512-oKWePCxqpd6FlLvGV1VU0x7bkPmmCNolxzjMf4NczoDnQcIWrAF+cPtZn5i6n+RfD2d9i0tzpKnG6Yk168yIyw==} - hasBin: true - - reusify@1.0.4: - resolution: {integrity: sha512-U9nH88a3fc/ekCF1l0/UP1IosiuIjyTh7hBvXVMHYgVcfGvt897Xguj2UOLDeI5BG2m7/uwyaLVT6fbtCwTyzw==} - engines: {iojs: '>=1.0.0', node: '>=0.10.0'} - - robust-predicates@3.0.2: - resolution: {integrity: sha512-IXgzBWvWQwE6PrDI05OvmXUIruQTcoMDzRsOd5CDvHCVLcLHMTSYvOK5Cm46kWqlV3yAbuSpBZdJ5oP5OUoStg==} - - run-parallel@1.2.0: - resolution: {integrity: sha512-5l4VyZR86LZ/lDxZTR6jqL8AFE2S0IFLMP26AbjsLVADxHdhB/c0GUsH+y39UfCi3dzz8OlQuPmnaJOMoDHQBA==} - - rw@1.3.3: - resolution: {integrity: sha512-PdhdWy89SiZogBLaw42zdeqtRJ//zFd2PgQavcICDUgJT5oW10QCRKbJ6bg4r0/UY2M6BWd5tkxuGFRvCkgfHQ==} - - sade@1.8.1: - resolution: {integrity: sha512-xal3CZX1Xlo/k4ApwCFrHVACi9fBqJ7V+mwhBsuf/1IOKbBy098Fex+Wa/5QMubw09pSZ/u8EY8PWgevJsXp1A==} - engines: {node: '>=6'} - - safer-buffer@2.1.2: - resolution: {integrity: sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==} - - scheduler@0.23.2: - resolution: {integrity: sha512-UOShsPwz7NrMUqhR6t0hWjFduvOzbtv7toDH1/hIrfRNIDBnnBWd0CwJTGvTpngVlmwGCdP9/Zl/tVrDqcuYzQ==} - - scroll-into-view-if-needed@3.1.0: - resolution: {integrity: sha512-49oNpRjWRvnU8NyGVmUaYG4jtTkNonFZI86MmGRDqBphEK2EXT9gdEUoQPZhuBM8yWHxCWbobltqYO5M4XrUvQ==} - - section-matter@1.0.0: - resolution: {integrity: sha512-vfD3pmTzGpufjScBh50YHKzEu2lxBWhVEHsNGoEXmCmn2hKGfeNLYMzCJpe8cD7gqX7TJluOVpBkAequ6dgMmA==} - engines: {node: '>=4'} - - semver@7.6.3: - resolution: {integrity: sha512-oVekP1cKtI+CTDvHWYFUcMtsK/00wmAEfyqKfNdARm8u1wNVhSgaX7A8d4UuIlUI5e84iEwOhs7ZPYRmzU9U6A==} - engines: {node: '>=10'} - hasBin: true - - server-only@0.0.1: - resolution: {integrity: sha512-qepMx2JxAa5jjfzxG79yPPq+8BuFToHd1hm7kI+Z4zAq1ftQiP7HcxMhDDItrbtwVeLg/cY2JnKnrcFkmiswNA==} - - sharp@0.33.5: - resolution: {integrity: sha512-haPVm1EkS9pgvHrQ/F3Xy+hgcuMV0Wm9vfIBSiwZ05k+xgb0PkBQpGsAA/oWdDobNaZTH5ppvHtzCFbnSEwHVw==} - engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0} - - shebang-command@1.2.0: - resolution: {integrity: sha512-EV3L1+UQWGor21OmnvojK36mhg+TyIKDh3iFBKBohr5xeXIhNBcx8oWdgkTEEQ+BEFFYdLRuqMfd5L84N1V5Vg==} - engines: {node: '>=0.10.0'} - - shebang-command@2.0.0: - resolution: {integrity: sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==} - engines: {node: '>=8'} - - shebang-regex@1.0.0: - resolution: {integrity: sha512-wpoSFAxys6b2a2wHZ1XpDSgD7N9iVjg29Ph9uV/uaP9Ex/KXlkTZTeddxDPSYQpgvzKLGJke2UU0AzoGCjNIvQ==} - engines: {node: '>=0.10.0'} - - shebang-regex@3.0.0: - resolution: {integrity: sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==} - engines: {node: '>=8'} - - shiki@0.14.7: - resolution: {integrity: sha512-dNPAPrxSc87ua2sKJ3H5dQ/6ZaY8RNnaAqK+t0eG7p0Soi2ydiqbGOTaZCqaYvA/uZYfS1LJnemt3Q+mSfcPCg==} - - signal-exit@3.0.7: - resolution: {integrity: sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==} - - signal-exit@4.1.0: - resolution: {integrity: sha512-bzyZ1e88w9O1iNJbKnOlvYTrWPDl46O1bG0D3XInv+9tkPrxrN8jUUTiFlDkkmKWgn1M6CfIA13SuGqOa9Korw==} - engines: {node: '>=14'} - - simple-swizzle@0.2.2: - resolution: {integrity: sha512-JA//kQgZtbuY83m+xT+tXJkmJncGMTFT+C+g2h2R9uxkYIrE2yy9sgmcLhCnw57/WSD+Eh3J97FPEDFnbXnDUg==} - - slash@3.0.0: - resolution: {integrity: sha512-g9Q1haeby36OSStwb4ntCGGGaKsaVSjQ68fBxoQcutl5fS1vuY18H3wSt3jFyFtrkx+Kz0V1G85A4MyAdDMi2Q==} - engines: {node: '>=8'} - - sort-keys@5.0.0: - resolution: {integrity: sha512-Pdz01AvCAottHTPQGzndktFNdbRA75BgOfeT1hH+AMnJFv8lynkPi42rfeEhpx1saTEI3YNMWxfqu0sFD1G8pw==} - engines: {node: '>=12'} - - source-map-js@1.2.0: - resolution: {integrity: sha512-itJW8lvSA0TXEphiRoawsCksnlf8SyvmFzIhltqAHluXd88pkCd+cXJVHTDwdCr0IzwptSm035IHQktUu1QUMg==} - engines: {node: '>=0.10.0'} - - source-map@0.5.7: - resolution: {integrity: sha512-LbrmJOMUSdEVxIKvdcJzQC+nQhe8FUZQTXQy6+I75skNgn3OoQ0DZA8YnFa7gp8tqtL3KPf1kmo0R5DoApeSGQ==} - engines: {node: '>=0.10.0'} - - source-map@0.7.4: - resolution: {integrity: sha512-l3BikUxvPOcn5E74dZiq5BGsTb5yEwhaTSzccU6t4sDOH8NWJCstKO5QT2CvtFoK6F0saL7p9xHAqHOlCPJygA==} - engines: {node: '>= 8'} - - space-separated-tokens@1.1.5: - resolution: {integrity: sha512-q/JSVd1Lptzhf5bkYm4ob4iWPjx0KiRe3sRFBNrVqbJkFaBm5vbbowy1mymoPNLRa52+oadOhJ+K49wsSeSjTA==} - - space-separated-tokens@2.0.2: - resolution: {integrity: sha512-PEGlAwrG8yXGXRjW32fGbg66JAlOAwbObuqVoJpv/mRgoWDQfgH1wDPvtzWyUSNAXBGSk8h755YDbbcEy3SH2Q==} - - sprintf-js@1.0.3: - resolution: {integrity: sha512-D9cPgkvLlV3t3IzL0D0YLvGA9Ahk4PcvVwUbN0dSGr1aP0Nrt4AEnTUbuGvquEC0mA64Gqt1fzirlRs5ibXx8g==} - - state-toggle@1.0.3: - resolution: {integrity: sha512-d/5Z4/2iiCnHw6Xzghyhb+GcmF89bxwgXG60wjIiZaxnymbyOmI8Hk4VqHXiVVp6u2ysaskFfXg3ekCj4WNftQ==} - - streamsearch@1.1.0: - resolution: {integrity: sha512-Mcc5wHehp9aXz1ax6bZUyY5afg9u2rv5cqQI3mRrYkGC8rW2hM02jWuwjtL++LS5qinSyhj2QfLyNsuc+VsExg==} - engines: {node: '>=10.0.0'} - - string-width@4.2.3: - resolution: {integrity: sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==} - engines: {node: '>=8'} - - string-width@5.1.2: - resolution: {integrity: sha512-HnLOCR3vjcY8beoNLtcjZ5/nxn2afmME6lhrDrebokqMap+XbeW8n9TXpPDOqdGK5qcI3oT0GKTW6wC7EMiVqA==} - engines: {node: '>=12'} - - stringify-entities@3.1.0: - resolution: {integrity: sha512-3FP+jGMmMV/ffZs86MoghGqAoqXAdxLrJP4GUdrDN1aIScYih5tuIO3eF4To5AJZ79KDZ8Fpdy7QJnK8SsL1Vg==} - - stringify-entities@4.0.4: - resolution: {integrity: sha512-IwfBptatlO+QCJUo19AqvrPNqlVMpW9YEL2LIVY+Rpv2qsjCGxaDLNRgeGsQWJhfItebuJhsGSLjaBbNSQ+ieg==} - - strip-ansi@6.0.1: - resolution: {integrity: sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==} - engines: {node: '>=8'} - - strip-ansi@7.1.0: - resolution: {integrity: sha512-iq6eVVI64nQQTRYq2KtEg2d2uU7LElhTJwsH4YzIHZshxlgZms/wIc4VoDQTlG/IvVIrBKG06CrZnp0qv7hkcQ==} - engines: {node: '>=12'} - - strip-bom-string@1.0.0: - resolution: {integrity: sha512-uCC2VHvQRYu+lMh4My/sFNmF2klFymLX1wHJeXnbEJERpV/ZsVuonzerjfrGpIGF7LBVa1O7i9kjiWvJiFck8g==} - engines: {node: '>=0.10.0'} - - strip-eof@1.0.0: - resolution: {integrity: sha512-7FCwGGmx8mD5xQd3RPUvnSpUXHM3BWuzjtpD4TXsfcZ9EL4azvVVUscFYwD9nx8Kh+uCBC00XBtAykoMHwTh8Q==} - engines: {node: '>=0.10.0'} - - style-to-object@0.3.0: - resolution: {integrity: sha512-CzFnRRXhzWIdItT3OmF8SQfWyahHhjq3HwcMNCNLn+N7klOOqPjMeG/4JSu77D7ypZdGvSzvkrbyeTMizz2VrA==} - - style-to-object@0.4.4: - resolution: {integrity: sha512-HYNoHZa2GorYNyqiCaBgsxvcJIn7OHq6inEga+E6Ke3m5JkoqpQbnFssk4jwe+K7AhGa2fcha4wSOf1Kn01dMg==} - - styled-jsx@5.1.1: - resolution: {integrity: sha512-pW7uC1l4mBZ8ugbiZrcIsiIvVx1UmTfw7UkC3Um2tmfUq9Bhk8IiyEIPl6F8agHgjzku6j0xQEZbfA5uSgSaCw==} - engines: {node: '>= 12.0.0'} - peerDependencies: - '@babel/core': '*' - babel-plugin-macros: '*' - react: '>= 16.8.0 || 17.x.x || ^18.0.0-0' - peerDependenciesMeta: - '@babel/core': - optional: true - babel-plugin-macros: - optional: true - - stylis@4.2.0: - resolution: {integrity: sha512-Orov6g6BB1sDfYgzWfTHDOxamtX1bE/zo104Dh9e6fqJ3PooipYyfJ0pUmrZO2wAvO8YbEyeFrkV91XTsGMSrw==} - - stylis@4.3.4: - resolution: {integrity: sha512-osIBl6BGUmSfDkyH2mB7EFvCJntXDrLhKjHTRj/rK6xLH0yuPrHULDRQzKokSOD4VoorhtKpfcfW1GAntu8now==} - - sucrase@3.35.0: - resolution: {integrity: sha512-8EbVDiu9iN/nESwxeSxDKe0dunta1GOlHufmSSXxMD2z2/tMZpDMpvXQGsc+ajGo8y2uYUmixaSRUc/QPoQ0GA==} - engines: {node: '>=16 || 14 >=14.17'} - hasBin: true - - supports-color@4.5.0: - resolution: {integrity: sha512-ycQR/UbvI9xIlEdQT1TQqwoXtEldExbCEAJgRo5YXlmSKjv6ThHnP9/vwGa1gr19Gfw+LkFd7KqYMhzrRC5JYw==} - engines: {node: '>=4'} - - supports-color@5.5.0: - resolution: {integrity: sha512-QjVjwdXIt408MIiAqCX4oUKsgU2EqAGzs2Ppkm4aQYbjm+ZEWEcW4SfFNTr4uMNZma0ey4f5lgLrkB0aX0QMow==} - engines: {node: '>=4'} - - supports-preserve-symlinks-flag@1.0.0: - resolution: {integrity: sha512-ot0WnXS9fgdkgIcePe6RHNk1WA8+muPa6cSjeR3V8K27q9BB1rTE3R1p7Hv0z1ZyAc8s6Vvv8DIyWf681MAt0w==} - engines: {node: '>= 0.4'} - - tabbable@5.3.3: - resolution: {integrity: sha512-QD9qKY3StfbZqWOPLp0++pOrAVb/HbUi5xCc8cUo4XjP19808oaMiDzn0leBY5mCespIBM0CIZePzZjgzR83kA==} - - tailwindcss@3.4.10: - resolution: {integrity: sha512-KWZkVPm7yJRhdu4SRSl9d4AK2wM3a50UsvgHZO7xY77NQr2V+fIrEuoDGQcbvswWvFGbS2f6e+jC/6WJm1Dl0w==} - engines: {node: '>=14.0.0'} - hasBin: true - - text-diff@1.0.1: - resolution: {integrity: sha512-jAnlP3ggZk7FeLX1awaMR8Y2sMyil9P9FXvNjaIJIQBAom1zvpKGGH31htOVrUFp0vlyygmJJpNrbJ4rfjsxrA==} - - thenify-all@1.6.0: - resolution: {integrity: sha512-RNxQH/qI8/t3thXJDwcstUO4zeqo64+Uy/+sNVRBx4Xn2OX+OZ9oP+iJnNFqplFra2ZUVeKCSa2oVWi3T4uVmA==} - engines: {node: '>=0.8'} - - thenify@3.3.1: - resolution: {integrity: sha512-RVZSIV5IG10Hk3enotrhvz0T9em6cyHBLkH/YAZuKqd8hRkKhSfCGIcP2KUY0EPxndzANBmNllzWPwak+bheSw==} - - tiny-invariant@1.3.3: - resolution: {integrity: sha512-+FbBPE1o9QAYvviau/qC5SE3caw21q3xkvWKBtja5vgqOWIHHJ3ioaq1VPfn/Szqctz2bU/oYeKd9/z5BL+PVg==} - - title@3.5.3: - resolution: {integrity: sha512-20JyowYglSEeCvZv3EZ0nZ046vLarO37prvV0mbtQV7C8DJPGgN967r8SJkqd3XK3K3lD3/Iyfp3avjfil8Q2Q==} - hasBin: true - - titleize@1.0.0: - resolution: {integrity: sha512-TARUb7z1pGvlLxgPk++7wJ6aycXF3GJ0sNSBTAsTuJrQG5QuZlkUQP+zl+nbjAh4gMX9yDw9ZYklMd7vAfJKEw==} - engines: {node: '>=0.10.0'} - - to-fast-properties@2.0.0: - resolution: {integrity: sha512-/OaKK0xYrs3DmxRYqL/yDc+FxFUVYhDlXMhRmv3z915w2HF1tnN1omB354j8VUGO/hbRzyD6Y3sA7v7GS/ceog==} - engines: {node: '>=4'} - - to-regex-range@5.0.1: - resolution: {integrity: sha512-65P7iz6X5yEr1cwcgvQxbbIw7Uk3gOy5dIdtZ4rDveLqhrdJP+Li/Hx6tyK0NEb+2GCyneCMJiGqrADCSNk8sQ==} - engines: {node: '>=8.0'} - - trim-lines@3.0.1: - resolution: {integrity: sha512-kRj8B+YHZCc9kQYdWfJB2/oUl9rA99qbowYYBtr4ui4mZyAQ2JpvVBd/6U2YloATfqBhBTSMhTpgBHtU0Mf3Rg==} - - trim-trailing-lines@1.1.4: - resolution: {integrity: sha512-rjUWSqnfTNrjbB9NQWfPMH/xRK1deHeGsHoVfpxJ++XeYXE0d6B1En37AHfw3jtfTU7dzMzZL2jjpe8Qb5gLIQ==} - - trough@1.0.5: - resolution: {integrity: sha512-rvuRbTarPXmMb79SmzEp8aqXNKcK+y0XaB298IXueQ8I2PsrATcPBCSPyK/dDNa2iWOhKlfNnOjdAOTBU/nkFA==} - - trough@2.2.0: - resolution: {integrity: sha512-tmMpK00BjZiUyVyvrBK7knerNgmgvcV/KLVyuma/SC+TQN167GrMRciANTz09+k3zW8L8t60jWO1GpfkZdjTaw==} - - ts-dedent@2.2.0: - resolution: {integrity: sha512-q5W7tVM71e2xjHZTlgfTDoPF/SmqKG5hddq9SzR49CH2hayqRKJtQ4mtRlSxKaJlR/+9rEM+mnBHf7I2/BQcpQ==} - engines: {node: '>=6.10'} - - ts-interface-checker@0.1.13: - resolution: {integrity: sha512-Y/arvbn+rrz3JCKl9C4kVNfTfSm2/mEp5FSz5EsZSANGPSlQrpRI5M4PKF+mJnE52jOO90PnPSc3Ur3bTQw0gA==} - - tslib@1.14.1: - resolution: {integrity: sha512-Xni35NKzjgMrwevysHTCArtLDpPvye8zV/0E4EyYn43P7/7qvQwPh9BGkHewbMulVntbigmcT7rdX3BNo9wRJg==} - - tslib@2.7.0: - resolution: {integrity: sha512-gLXCKdN1/j47AiHiOkJN69hJmcbGTHI0ImLmbYLHykhgeN0jVGola9yVjFgzCUklsZQMW55o+dW7IXv3RCXDzA==} - - type-fest@1.4.0: - resolution: {integrity: sha512-yGSza74xk0UG8k+pLh5oeoYirvIiWo5t0/o3zHHAO2tRDiZcxWP7fywNlXhqb6/r6sWvwi+RsyQMWhVLe4BVuA==} - engines: {node: '>=10'} - - typescript@4.5.5: - resolution: {integrity: sha512-TCTIul70LyWe6IJWT8QSYeA54WQe8EjQFU4wY52Fasj5UKx88LNYKCgBEHcOMOrFF1rKGbD8v/xcNWVUq9SymA==} - engines: {node: '>=4.2.0'} - hasBin: true - - undici-types@6.13.0: - resolution: {integrity: sha512-xtFJHudx8S2DSoujjMd1WeWvn7KKWFRESZTMeL1RptAYERu29D6jphMjjY+vn96jvN3kVPDNxU/E13VTaXj6jg==} - - unherit@1.1.3: - resolution: {integrity: sha512-Ft16BJcnapDKp0+J/rqFC3Rrk6Y/Ng4nzsC028k2jdDII/rdZ7Wd3pPT/6+vIIxRagwRc9K0IUX0Ra4fKvw+WQ==} - - unified@10.1.2: - resolution: {integrity: sha512-pUSWAi/RAnVy1Pif2kAoeWNBa3JVrx0MId2LASj8G+7AiHWoKZNTomq6LG326T68U7/e263X6fTdcXIy7XnF7Q==} - - unified@9.2.2: - resolution: {integrity: sha512-Sg7j110mtefBD+qunSLO1lqOEKdrwBFBrR6Qd8f4uwkhWNlbkaqwHse6e7QvD3AP/MNoJdEDLaf8OxYyoWgorQ==} - - unist-builder@2.0.3: - resolution: {integrity: sha512-f98yt5pnlMWlzP539tPc4grGMsFaQQlP/vM396b00jngsiINumNmsY8rkXjfoi1c6QaM8nQ3vaGDuoKWbe/1Uw==} - - unist-util-find-after@5.0.0: - resolution: {integrity: sha512-amQa0Ep2m6hE2g72AugUItjbuM8X8cGQnFoHk0pGfrFeT9GZhzN5SW8nRsiGKK7Aif4CrACPENkA6P/Lw6fHGQ==} - - unist-util-generated@1.1.6: - resolution: {integrity: sha512-cln2Mm1/CZzN5ttGK7vkoGw+RZ8VcUH6BtGbq98DDtRGquAAOXig1mrBQYelOwMXYS8rK+vZDyyojSjp7JX+Lg==} - - unist-util-generated@2.0.1: - resolution: {integrity: sha512-qF72kLmPxAw0oN2fwpWIqbXAVyEqUzDHMsbtPvOudIlUzXYFIeQIuxXQCRCFh22B7cixvU0MG7m3MW8FTq/S+A==} - - unist-util-is@3.0.0: - resolution: {integrity: sha512-sVZZX3+kspVNmLWBPAB6r+7D9ZgAFPNWm66f7YNb420RlQSbn+n8rG8dGZSkrER7ZIXGQYNm5pqC3v3HopH24A==} - - unist-util-is@4.1.0: - resolution: {integrity: sha512-ZOQSsnce92GrxSqlnEEseX0gi7GH9zTJZ0p9dtu87WRb/37mMPO2Ilx1s/t9vBHrFhbgweUwb+t7cIn5dxPhZg==} - - unist-util-is@5.2.1: - resolution: {integrity: sha512-u9njyyfEh43npf1M+yGKDGVPbY/JWEemg5nH05ncKPfi+kBbKBJoTdsogMu33uhytuLlv9y0O7GH7fEdwLdLQw==} - - unist-util-is@6.0.0: - resolution: {integrity: sha512-2qCTHimwdxLfz+YzdGfkqNlH0tLi9xjTnHddPmJwtIG9MGsdbutfTc4P+haPD7l7Cjxf/WZj+we5qfVPvvxfYw==} - - unist-util-position-from-estree@1.1.2: - resolution: {integrity: sha512-poZa0eXpS+/XpoQwGwl79UUdea4ol2ZuCYguVaJS4qzIOMDzbqz8a3erUCOmubSZkaOuGamb3tX790iwOIROww==} - - unist-util-position@3.1.0: - resolution: {integrity: sha512-w+PkwCbYSFw8vpgWD0v7zRCl1FpY3fjDSQ3/N/wNd9Ffa4gPi8+4keqt99N3XW6F99t/mUzp2xAhNmfKWp95QA==} - - unist-util-position@4.0.4: - resolution: {integrity: sha512-kUBE91efOWfIVBo8xzh/uZQ7p9ffYRtUbMRZBNFYwf0RK8koUMx6dGUfwylLOKmaT2cs4wSW96QoYUSXAyEtpg==} - - unist-util-position@5.0.0: - resolution: {integrity: sha512-fucsC7HjXvkB5R3kTCO7kUjRdrS0BJt3M/FPxmHMBOm8JQi2BsHAHFsy27E0EolP8rp0NzXsJ+jNPyDWvOJZPA==} - - unist-util-remove-position@2.0.1: - resolution: {integrity: sha512-fDZsLYIe2uT+oGFnuZmy73K6ZxOPG/Qcm+w7jbEjaFcJgbQ6cqjs/eSPzXhsmGpAsWPkqZM9pYjww5QTn3LHMA==} - - unist-util-remove-position@4.0.2: - resolution: {integrity: sha512-TkBb0HABNmxzAcfLf4qsIbFbaPDvMO6wa3b3j4VcEzFVaw1LBKwnW4/sRJ/atSLSzoIg41JWEdnE7N6DIhGDGQ==} - - unist-util-remove-position@5.0.0: - resolution: {integrity: sha512-Hp5Kh3wLxv0PHj9m2yZhhLt58KzPtEYKQQ4yxfYFEO7EvHwzyDYnduhHnY1mDxoqr7VUwVuHXk9RXKIiYS1N8Q==} - - unist-util-remove@4.0.0: - resolution: {integrity: sha512-b4gokeGId57UVRX/eVKej5gXqGlc9+trkORhFJpu9raqZkZhU0zm8Doi05+HaiBsMEIJowL+2WtQ5ItjsngPXg==} - - unist-util-stringify-position@2.0.3: - resolution: {integrity: sha512-3faScn5I+hy9VleOq/qNbAd6pAx7iH5jYBMS9I1HgQVijz/4mv5Bvw5iw1sC/90CODiKo81G/ps8AJrISn687g==} - - unist-util-stringify-position@3.0.3: - resolution: {integrity: sha512-k5GzIBZ/QatR8N5X2y+drfpWG8IDBzdnVj6OInRNWm1oXrzydiaAT2OQiA8DPRRZyAKb9b6I2a6PxYklZD0gKg==} - - unist-util-stringify-position@4.0.0: - resolution: {integrity: sha512-0ASV06AAoKCDkS2+xw5RXJywruurpbC4JZSm7nr7MOt1ojAzvyyaO+UxZf18j8FCF6kmzCZKcAgN/yu2gm2XgQ==} - - unist-util-visit-parents@2.1.2: - resolution: {integrity: sha512-DyN5vD4NE3aSeB+PXYNKxzGsfocxp6asDc2XXE3b0ekO2BaRUpBicbbUygfSvYfUz1IkmjFR1YF7dPklraMZ2g==} - - unist-util-visit-parents@3.1.1: - resolution: {integrity: sha512-1KROIZWo6bcMrZEwiH2UrXDyalAa0uqzWCxCJj6lPOvTve2WkfgCytoDTPaMnodXh1WrXOq0haVYHj99ynJlsg==} - - unist-util-visit-parents@4.1.1: - resolution: {integrity: sha512-1xAFJXAKpnnJl8G7K5KgU7FY55y3GcLIXqkzUj5QF/QVP7biUm0K0O2oqVkYsdjzJKifYeWn9+o6piAK2hGSHw==} - - unist-util-visit-parents@5.1.3: - resolution: {integrity: sha512-x6+y8g7wWMyQhL1iZfhIPhDAs7Xwbn9nRosDXl7qoPTSCy0yNxnKc+hWokFifWQIDGi154rdUqKvbCa4+1kLhg==} - - unist-util-visit-parents@6.0.1: - resolution: {integrity: sha512-L/PqWzfTP9lzzEa6CKs0k2nARxTdZduw3zyh8d2NVBnsyvHjSX4TWse388YrrQKbvI8w20fGjGlhgT96WwKykw==} - - unist-util-visit@1.4.1: - resolution: {integrity: sha512-AvGNk7Bb//EmJZyhtRUnNMEpId/AZ5Ph/KUpTI09WHQuDZHKovQ1oEv3mfmKpWKtoMzyMC4GLBm1Zy5k12fjIw==} - - unist-util-visit@2.0.3: - resolution: {integrity: sha512-iJ4/RczbJMkD0712mGktuGpm/U4By4FfDonL7N/9tATGIF4imikjOuagyMY53tnZq3NP6BcmlrHhEKAfGWjh7Q==} - - unist-util-visit@3.1.0: - resolution: {integrity: sha512-Szoh+R/Ll68QWAyQyZZpQzZQm2UPbxibDvaY8Xc9SUtYgPsDzx5AWSk++UUt2hJuow8mvwR+rG+LQLw+KsuAKA==} - - unist-util-visit@4.1.2: - resolution: {integrity: sha512-MSd8OUGISqHdVvfY9TPhyK2VdUrPgxkUtWSuMHF6XAAFuL4LokseigBnZtPnJMu+FbynTkFNnFlyjxpVKujMRg==} - - unist-util-visit@5.0.0: - resolution: {integrity: sha512-MR04uvD+07cwl/yhVuVWAtw+3GOR/knlL55Nd/wAdblk27GCVt3lqpTivy/tkJcZoNPzTwS1Y+KMojlLDhoTzg==} - - update-browserslist-db@1.1.0: - resolution: {integrity: sha512-EdRAaAyk2cUE1wOf2DkEhzxqOQvFOoRJFNS6NeyJ01Gp2beMRpBAINjM2iDXE3KCuKhwnvHIQCJm6ThL2Z+HzQ==} - hasBin: true - peerDependencies: - browserslist: '>= 4.21.0' - - url-parse@1.5.10: - resolution: {integrity: sha512-WypcfiRhfeUP9vvF0j6rw0J3hrWrw6iZv3+22h6iRMJ/8z1Tj6XfLP4DsUix5MhMPnXpiHDoKyoZ/bdCkwBCiQ==} - - use-callback-ref@1.3.2: - resolution: {integrity: sha512-elOQwe6Q8gqZgDA8mrh44qRTQqpIHDcZ3hXTLjBe1i4ph8XpNJnO+aQf3NaG+lriLopI4HMx9VjQLfPQ6vhnoA==} - engines: {node: '>=10'} - peerDependencies: - '@types/react': ^16.8.0 || ^17.0.0 || ^18.0.0 - react: ^16.8.0 || ^17.0.0 || ^18.0.0 - peerDependenciesMeta: - '@types/react': - optional: true - - use-memo-one@1.1.3: - resolution: {integrity: sha512-g66/K7ZQGYrI6dy8GLpVcMsBp4s17xNkYJVSMvTEevGy3nDxHOfE6z8BVE22+5G5x7t3+bhzrlTDB7ObrEE0cQ==} - peerDependencies: - react: ^16.8.0 || ^17.0.0 || ^18.0.0 - - use-sidecar@1.1.2: - resolution: {integrity: sha512-epTbsLuzZ7lPClpz2TyryBfztm7m+28DlEv2ZCQ3MDr5ssiwyOwGH/e5F9CkfWjJ1t4clvI58yF822/GUkjjhw==} - engines: {node: '>=10'} - peerDependencies: - '@types/react': ^16.9.0 || ^17.0.0 || ^18.0.0 - react: ^16.8.0 || ^17.0.0 || ^18.0.0 - peerDependenciesMeta: - '@types/react': - optional: true - - use-sync-external-store@1.2.2: - resolution: {integrity: sha512-PElTlVMwpblvbNqQ82d2n6RjStvdSoNe9FG28kNfz3WiXilJm4DdNkEzRhCZuIDwY8U08WVihhGR5iRqAwfDiw==} - peerDependencies: - react: ^16.8.0 || ^17.0.0 || ^18.0.0 - - util-deprecate@1.0.2: - resolution: {integrity: sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==} - - uuid@8.3.2: - resolution: {integrity: sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==} - hasBin: true - - uuid@9.0.1: - resolution: {integrity: sha512-b+1eJOlsR9K8HJpow9Ok3fiWOWSIcIzXodvv0rQjVoOVNpWMpxf1wZNpt4y9h10odCNrqnYp1OBzRktckBe3sA==} - hasBin: true - - uvu@0.5.6: - resolution: {integrity: sha512-+g8ENReyr8YsOc6fv/NVJs2vFdHBnBNdfE49rshrTzDWOlUx4Gq7KOS2GD8eqhy2j+Ejq29+SbKH8yjkAqXqoA==} - engines: {node: '>=8'} - hasBin: true - - vfile-location@3.2.0: - resolution: {integrity: sha512-aLEIZKv/oxuCDZ8lkJGhuhztf/BW4M+iHdCwglA/eWc+vtuRFJj8EtgceYFX4LRjOhCAAiNHsKGssC6onJ+jbA==} - - vfile-location@5.0.3: - resolution: {integrity: sha512-5yXvWDEgqeiYiBe1lbxYF7UMAIm/IcopxMHrMQDq3nvKcjPKIhZklUKL+AE7J7uApI4kwe2snsK+eI6UTj9EHg==} - - vfile-matter@3.0.1: - resolution: {integrity: sha512-CAAIDwnh6ZdtrqAuxdElUqQRQDQgbbIrYtDYI8gCjXS1qQ+1XdLoK8FIZWxJwn0/I+BkSSZpar3SOgjemQz4fg==} - - vfile-message@2.0.4: - resolution: {integrity: sha512-DjssxRGkMvifUOJre00juHoP9DPWuzjxKuMDrhNbk2TdaYYBNMStsNhEOt3idrtI12VQYM/1+iM0KOzXi4pxwQ==} - - vfile-message@3.1.4: - resolution: {integrity: sha512-fa0Z6P8HUrQN4BZaX05SIVXic+7kE3b05PWAtPuYP9QLHsLKYR7/AlLW3NtOrpXRLeawpDLMsVkmk5DG0NXgWw==} - - vfile-message@4.0.2: - resolution: {integrity: sha512-jRDZ1IMLttGj41KcZvlrYAaI3CfqpLpfpf+Mfig13viT6NKvRzWZ+lXz0Y5D60w6uJIBAOGq9mSHf0gktF0duw==} - - vfile@4.2.1: - resolution: {integrity: sha512-O6AE4OskCG5S1emQ/4gl8zK586RqA3srz3nfK/Viy0UPToBc5Trp9BVFb1u0CjsKrAWwnpr4ifM/KBXPWwJbCA==} - - vfile@5.3.7: - resolution: {integrity: sha512-r7qlzkgErKjobAmyNIkkSpizsFPYiUPuJb5pNW1RB4JcYVZhs4lIbVqk8XPk033CV/1z8ss5pkax8SuhGpcG8g==} - - vfile@6.0.3: - resolution: {integrity: sha512-KzIbH/9tXat2u30jf+smMwFCsno4wHVdNmzFyL+T/L3UGqqk6JKfVqOFOZEpZSHADH1k40ab6NUIXZq422ov3Q==} - - vscode-oniguruma@1.7.0: - resolution: {integrity: sha512-L9WMGRfrjOhgHSdOYgCt/yRMsXzLDJSL7BPrOZt73gU0iWO4mpqzqQzOz5srxqTvMBaR0XZTSrVWo4j55Rc6cA==} - - vscode-textmate@8.0.0: - resolution: {integrity: sha512-AFbieoL7a5LMqcnOF04ji+rpXadgOXnZsxQr//r83kLPr7biP7am3g9zbaZIaBGwBRWeSvoMD4mgPdX3e4NWBg==} - - web-namespaces@1.1.4: - resolution: {integrity: sha512-wYxSGajtmoP4WxfejAPIr4l0fVh+jeMXZb08wNc0tMg6xsfZXj3cECqIK0G7ZAqUq0PP8WlMDtaOGVBTAWztNw==} - - web-namespaces@2.0.1: - resolution: {integrity: sha512-bKr1DkiNa2krS7qxNtdrtHAmzuYGFQLiQ13TsorsdT6ULTkPLKuu5+GsFpDlg6JFjUTwX2DyhMPG2be8uPrqsQ==} - - web-worker@1.3.0: - resolution: {integrity: sha512-BSR9wyRsy/KOValMgd5kMyr3JzpdeoR9KVId8u5GVlTTAtNChlsE4yTxeY7zMdNSyOmoKBv8NH2qeRY9Tg+IaA==} - - which@1.3.1: - resolution: {integrity: sha512-HxJdYWq1MTIQbJ3nw0cqssHoTNU267KlrDuGZ1WYlxDStUtKUhOaJmh112/TZmHxxUfuJqPXSOm7tDyas0OSIQ==} - hasBin: true - - which@2.0.2: - resolution: {integrity: sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==} - engines: {node: '>= 8'} - hasBin: true - - wrap-ansi@7.0.0: - resolution: {integrity: sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==} - engines: {node: '>=10'} - - wrap-ansi@8.1.0: - resolution: {integrity: sha512-si7QWI6zUMq56bESFvagtmzMdGOtoxfR+Sez11Mobfc7tm+VkUckk9bW2UeffTGVUbOksxmSw0AA2gs8g71NCQ==} - engines: {node: '>=12'} - - xtend@4.0.2: - resolution: {integrity: sha512-LKYU1iAXJXUgAXn9URjiu+MWhyUXHsvfp7mcuYm9dSUKK0/CjtrUwFAxD82/mCWbtLsGjFIad0wIsod4zrTAEQ==} - engines: {node: '>=0.4'} - - yallist@2.1.2: - resolution: {integrity: sha512-ncTzHV7NvsQZkYe1DW7cbDLm0YpzHmZF5r/iyP3ZnQtMiJ+pjzisCiMNI+Sj+xQF5pXhSHxSB3uDbsBTzY/c2A==} - - yaml@1.10.2: - resolution: {integrity: sha512-r3vXyErRCYJ7wg28yvBY5VSoAF8ZvlcW9/BwUzEtUsjvX/DKs24dIkuwjtuprwJJHsbyUbLApepYTR1BN4uHrg==} - engines: {node: '>= 6'} - - yaml@2.5.0: - resolution: {integrity: sha512-2wWLbGbYDiSqqIKoPjar3MPgB94ErzCtrNE1FdqGuaO0pi2JGjmE8aW8TDZwzU7vuxcGRdL/4gPQwQ7hD5AMSw==} - engines: {node: '>= 14'} - hasBin: true - - yocto-queue@0.1.0: - resolution: {integrity: sha512-rVksvsnNCdJ/ohGc6xgPwyN8eheCxsiLM8mxuE/t/mOVqJewPuO1miLpTHQiRgTKCLexL4MeAFVagts7HmNZ2Q==} - engines: {node: '>=10'} - - zod@3.23.8: - resolution: {integrity: sha512-XBx9AXhXktjUqnepgTiE5flcKIYWi/rme0Eaj+5Y0lftuGBq+jyRu/md4WnuxqgP1ubdpNCsYEYPxrzVHD8d6g==} - - zwitch@1.0.5: - resolution: {integrity: sha512-V50KMwwzqJV0NpZIZFwfOD5/lyny3WlSzRiXgA0G7VUnRlqttta1L6UQIHzd6EuBY/cHGfwTIck7w1yH6Q5zUw==} - - zwitch@2.0.4: - resolution: {integrity: sha512-bXE4cR/kVZhKZX/RjPEflHaKVhUVl85noU3v6b8apfQEc1x4A+zBxjZ4lN8LqGd6WZ3dl98pY4o717VFmoPp+A==} - -snapshots: - - '@alloc/quick-lru@5.2.0': {} - - '@babel/code-frame@7.24.7': - dependencies: - '@babel/highlight': 7.24.7 - picocolors: 1.0.1 - - '@babel/generator@7.25.5': - dependencies: - '@babel/types': 7.25.4 - '@jridgewell/gen-mapping': 0.3.5 - '@jridgewell/trace-mapping': 0.3.25 - jsesc: 2.5.2 - - '@babel/helper-module-imports@7.24.7': - dependencies: - '@babel/traverse': 7.25.4 - '@babel/types': 7.25.4 - transitivePeerDependencies: - - supports-color - - '@babel/helper-string-parser@7.24.8': {} - - '@babel/helper-validator-identifier@7.24.7': {} - - '@babel/highlight@7.24.7': - dependencies: - '@babel/helper-validator-identifier': 7.24.7 - chalk: 2.4.2 - js-tokens: 4.0.0 - picocolors: 1.0.1 - - '@babel/parser@7.25.4': - dependencies: - '@babel/types': 7.25.4 - - '@babel/runtime@7.25.4': - dependencies: - regenerator-runtime: 0.14.1 - - '@babel/template@7.25.0': - dependencies: - '@babel/code-frame': 7.24.7 - '@babel/parser': 7.25.4 - '@babel/types': 7.25.4 - - '@babel/traverse@7.25.4': - dependencies: - '@babel/code-frame': 7.24.7 - '@babel/generator': 7.25.5 - '@babel/parser': 7.25.4 - '@babel/template': 7.25.0 - '@babel/types': 7.25.4 - debug: 4.3.6 - globals: 11.12.0 - transitivePeerDependencies: - - supports-color - - '@babel/types@7.25.4': - dependencies: - '@babel/helper-string-parser': 7.24.8 - '@babel/helper-validator-identifier': 7.24.7 - to-fast-properties: 2.0.0 - - '@base2/pretty-print-object@1.0.1': {} - - '@biomejs/biome@1.8.3': - optionalDependencies: - '@biomejs/cli-darwin-arm64': 1.8.3 - '@biomejs/cli-darwin-x64': 1.8.3 - '@biomejs/cli-linux-arm64': 1.8.3 - '@biomejs/cli-linux-arm64-musl': 1.8.3 - '@biomejs/cli-linux-x64': 1.8.3 - '@biomejs/cli-linux-x64-musl': 1.8.3 - '@biomejs/cli-win32-arm64': 1.8.3 - '@biomejs/cli-win32-x64': 1.8.3 - - '@biomejs/cli-darwin-arm64@1.8.3': - optional: true - - '@biomejs/cli-darwin-x64@1.8.3': - optional: true - - '@biomejs/cli-linux-arm64-musl@1.8.3': - optional: true - - '@biomejs/cli-linux-arm64@1.8.3': - optional: true - - '@biomejs/cli-linux-x64-musl@1.8.3': - optional: true - - '@biomejs/cli-linux-x64@1.8.3': - optional: true - - '@biomejs/cli-win32-arm64@1.8.3': - optional: true - - '@biomejs/cli-win32-x64@1.8.3': - optional: true - - '@braintree/sanitize-url@6.0.4': {} - - '@elastic/datemath@5.0.3(moment@2.30.1)': - dependencies: - moment: 2.30.1 - tslib: 1.14.1 - - '@elastic/eui@95.9.0(@elastic/datemath@5.0.3(moment@2.30.1))(@emotion/css@11.13.0)(@emotion/react@11.13.3(@types/react@18.3.4)(react@18.3.1))(@types/react-dom@18.3.0)(@types/react@18.3.4)(moment@2.30.1)(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(typescript@4.5.5)': - dependencies: - '@elastic/datemath': 5.0.3(moment@2.30.1) - '@emotion/css': 11.13.0 - '@emotion/react': 11.13.3(@types/react@18.3.4)(react@18.3.1) - '@hello-pangea/dnd': 16.6.0(@types/react-dom@18.3.0)(@types/react@18.3.4)(react-dom@18.3.1(react@18.3.1))(react@18.3.1) - '@types/lodash': 4.17.7 - '@types/numeral': 2.0.5 - '@types/react': 18.3.4 - '@types/react-dom': 18.3.0 - '@types/react-window': 1.8.8 - '@types/refractor': 3.4.1 - chroma-js: 2.6.0 - classnames: 2.5.1 - lodash: 4.17.21 - mdast-util-to-hast: 10.2.0 - moment: 2.30.1 - numeral: 2.0.6 - prop-types: 15.8.1 - react: 18.3.1 - react-dom: 18.3.1(react@18.3.1) - react-dropzone: 11.7.1(react@18.3.1) - react-element-to-jsx-string: 15.0.0(react-dom@18.3.1(react@18.3.1))(react@18.3.1) - react-focus-on: 3.9.3(@types/react@18.3.4)(react@18.3.1) - react-is: 17.0.2 - react-remove-scroll-bar: 2.3.6(@types/react@18.3.4)(react@18.3.1) - react-virtualized-auto-sizer: 1.0.24(react-dom@18.3.1(react@18.3.1))(react@18.3.1) - react-window: 1.8.10(react-dom@18.3.1(react@18.3.1))(react@18.3.1) - refractor: 3.6.0 - rehype-raw: 5.1.0 - rehype-react: 6.2.1 - rehype-stringify: 8.0.0 - remark-breaks: 2.0.2 - remark-emoji: 2.2.0 - remark-parse-no-trim: 8.0.4 - remark-rehype: 8.1.0 - tabbable: 5.3.3 - text-diff: 1.0.1 - typescript: 4.5.5 - unified: 9.2.2 - unist-util-visit: 2.0.3 - url-parse: 1.5.10 - uuid: 8.3.2 - vfile: 4.2.1 - transitivePeerDependencies: - - react-native - - '@emnapi/runtime@1.2.0': - dependencies: - tslib: 2.7.0 - optional: true - - '@emotion/babel-plugin@11.12.0': - dependencies: - '@babel/helper-module-imports': 7.24.7 - '@babel/runtime': 7.25.4 - '@emotion/hash': 0.9.2 - '@emotion/memoize': 0.9.0 - '@emotion/serialize': 1.3.1 - babel-plugin-macros: 3.1.0 - convert-source-map: 1.9.0 - escape-string-regexp: 4.0.0 - find-root: 1.1.0 - source-map: 0.5.7 - stylis: 4.2.0 - transitivePeerDependencies: - - supports-color - - '@emotion/cache@11.13.1': - dependencies: - '@emotion/memoize': 0.9.0 - '@emotion/sheet': 1.4.0 - '@emotion/utils': 1.4.0 - '@emotion/weak-memoize': 0.4.0 - stylis: 4.2.0 - - '@emotion/css@11.13.0': - dependencies: - '@emotion/babel-plugin': 11.12.0 - '@emotion/cache': 11.13.1 - '@emotion/serialize': 1.3.1 - '@emotion/sheet': 1.4.0 - '@emotion/utils': 1.4.0 - transitivePeerDependencies: - - supports-color - - '@emotion/hash@0.9.2': {} - - '@emotion/memoize@0.9.0': {} - - '@emotion/react@11.13.3(@types/react@18.3.4)(react@18.3.1)': - dependencies: - '@babel/runtime': 7.25.4 - '@emotion/babel-plugin': 11.12.0 - '@emotion/cache': 11.13.1 - '@emotion/serialize': 1.3.1 - '@emotion/use-insertion-effect-with-fallbacks': 1.1.0(react@18.3.1) - '@emotion/utils': 1.4.0 - '@emotion/weak-memoize': 0.4.0 - hoist-non-react-statics: 3.3.2 - react: 18.3.1 - optionalDependencies: - '@types/react': 18.3.4 - transitivePeerDependencies: - - supports-color - - '@emotion/serialize@1.3.1': - dependencies: - '@emotion/hash': 0.9.2 - '@emotion/memoize': 0.9.0 - '@emotion/unitless': 0.10.0 - '@emotion/utils': 1.4.0 - csstype: 3.1.3 - - '@emotion/sheet@1.4.0': {} - - '@emotion/unitless@0.10.0': {} - - '@emotion/use-insertion-effect-with-fallbacks@1.1.0(react@18.3.1)': - dependencies: - react: 18.3.1 - - '@emotion/utils@1.4.0': {} - - '@emotion/weak-memoize@0.4.0': {} - - '@fortawesome/fontawesome-common-types@6.6.0': {} - - '@fortawesome/fontawesome-svg-core@6.6.0': - dependencies: - '@fortawesome/fontawesome-common-types': 6.6.0 - - '@fortawesome/free-brands-svg-icons@6.6.0': - dependencies: - '@fortawesome/fontawesome-common-types': 6.6.0 - - '@fortawesome/free-solid-svg-icons@6.6.0': - dependencies: - '@fortawesome/fontawesome-common-types': 6.6.0 - - '@fortawesome/react-fontawesome@0.2.2(@fortawesome/fontawesome-svg-core@6.6.0)(react@18.3.1)': - dependencies: - '@fortawesome/fontawesome-svg-core': 6.6.0 - prop-types: 15.8.1 - react: 18.3.1 - - '@headlessui/react@1.7.19(react-dom@18.3.1(react@18.3.1))(react@18.3.1)': - dependencies: - '@tanstack/react-virtual': 3.10.5(react-dom@18.3.1(react@18.3.1))(react@18.3.1) - client-only: 0.0.1 - react: 18.3.1 - react-dom: 18.3.1(react@18.3.1) - - '@hello-pangea/dnd@16.6.0(@types/react-dom@18.3.0)(@types/react@18.3.4)(react-dom@18.3.1(react@18.3.1))(react@18.3.1)': - dependencies: - '@babel/runtime': 7.25.4 - css-box-model: 1.2.1 - memoize-one: 6.0.0 - raf-schd: 4.0.3 - react: 18.3.1 - react-dom: 18.3.1(react@18.3.1) - react-redux: 8.1.3(@types/react-dom@18.3.0)(@types/react@18.3.4)(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(redux@4.2.1) - redux: 4.2.1 - use-memo-one: 1.1.3(react@18.3.1) - transitivePeerDependencies: - - '@types/react' - - '@types/react-dom' - - react-native - - '@img/sharp-darwin-arm64@0.33.5': - optionalDependencies: - '@img/sharp-libvips-darwin-arm64': 1.0.4 - optional: true - - '@img/sharp-darwin-x64@0.33.5': - optionalDependencies: - '@img/sharp-libvips-darwin-x64': 1.0.4 - optional: true - - '@img/sharp-libvips-darwin-arm64@1.0.4': - optional: true - - '@img/sharp-libvips-darwin-x64@1.0.4': - optional: true - - '@img/sharp-libvips-linux-arm64@1.0.4': - optional: true - - '@img/sharp-libvips-linux-arm@1.0.5': - optional: true - - '@img/sharp-libvips-linux-s390x@1.0.4': - optional: true - - '@img/sharp-libvips-linux-x64@1.0.4': - optional: true - - '@img/sharp-libvips-linuxmusl-arm64@1.0.4': - optional: true - - '@img/sharp-libvips-linuxmusl-x64@1.0.4': - optional: true - - '@img/sharp-linux-arm64@0.33.5': - optionalDependencies: - '@img/sharp-libvips-linux-arm64': 1.0.4 - optional: true - - '@img/sharp-linux-arm@0.33.5': - optionalDependencies: - '@img/sharp-libvips-linux-arm': 1.0.5 - optional: true - - '@img/sharp-linux-s390x@0.33.5': - optionalDependencies: - '@img/sharp-libvips-linux-s390x': 1.0.4 - optional: true - - '@img/sharp-linux-x64@0.33.5': - optionalDependencies: - '@img/sharp-libvips-linux-x64': 1.0.4 - optional: true - - '@img/sharp-linuxmusl-arm64@0.33.5': - optionalDependencies: - '@img/sharp-libvips-linuxmusl-arm64': 1.0.4 - optional: true - - '@img/sharp-linuxmusl-x64@0.33.5': - optionalDependencies: - '@img/sharp-libvips-linuxmusl-x64': 1.0.4 - optional: true - - '@img/sharp-wasm32@0.33.5': - dependencies: - '@emnapi/runtime': 1.2.0 - optional: true - - '@img/sharp-win32-ia32@0.33.5': - optional: true - - '@img/sharp-win32-x64@0.33.5': - optional: true - - '@isaacs/cliui@8.0.2': - dependencies: - string-width: 5.1.2 - string-width-cjs: string-width@4.2.3 - strip-ansi: 7.1.0 - strip-ansi-cjs: strip-ansi@6.0.1 - wrap-ansi: 8.1.0 - wrap-ansi-cjs: wrap-ansi@7.0.0 - - '@jridgewell/gen-mapping@0.3.5': - dependencies: - '@jridgewell/set-array': 1.2.1 - '@jridgewell/sourcemap-codec': 1.5.0 - '@jridgewell/trace-mapping': 0.3.25 - - '@jridgewell/resolve-uri@3.1.2': {} - - '@jridgewell/set-array@1.2.1': {} - - '@jridgewell/sourcemap-codec@1.5.0': {} - - '@jridgewell/trace-mapping@0.3.25': - dependencies: - '@jridgewell/resolve-uri': 3.1.2 - '@jridgewell/sourcemap-codec': 1.5.0 - - '@mapbox/hast-util-table-cell-style@0.2.1': - dependencies: - unist-util-visit: 1.4.1 - - '@mdx-js/mdx@2.3.0': - dependencies: - '@types/estree-jsx': 1.0.5 - '@types/mdx': 2.0.13 - estree-util-build-jsx: 2.2.2 - estree-util-is-identifier-name: 2.1.0 - estree-util-to-js: 1.2.0 - estree-walker: 3.0.3 - hast-util-to-estree: 2.3.3 - markdown-extensions: 1.1.1 - periscopic: 3.1.0 - remark-mdx: 2.3.0 - remark-parse: 10.0.2 - remark-rehype: 10.1.0 - unified: 10.1.2 - unist-util-position-from-estree: 1.1.2 - unist-util-stringify-position: 3.0.3 - unist-util-visit: 4.1.2 - vfile: 5.3.7 - transitivePeerDependencies: - - supports-color - - '@mdx-js/react@2.3.0(react@18.3.1)': - dependencies: - '@types/mdx': 2.0.13 - '@types/react': 18.3.4 - react: 18.3.1 - - '@napi-rs/simple-git-android-arm-eabi@0.1.19': - optional: true - - '@napi-rs/simple-git-android-arm64@0.1.19': - optional: true - - '@napi-rs/simple-git-darwin-arm64@0.1.19': - optional: true - - '@napi-rs/simple-git-darwin-x64@0.1.19': - optional: true - - '@napi-rs/simple-git-freebsd-x64@0.1.19': - optional: true - - '@napi-rs/simple-git-linux-arm-gnueabihf@0.1.19': - optional: true - - '@napi-rs/simple-git-linux-arm64-gnu@0.1.19': - optional: true - - '@napi-rs/simple-git-linux-arm64-musl@0.1.19': - optional: true - - '@napi-rs/simple-git-linux-powerpc64le-gnu@0.1.19': - optional: true - - '@napi-rs/simple-git-linux-s390x-gnu@0.1.19': - optional: true - - '@napi-rs/simple-git-linux-x64-gnu@0.1.19': - optional: true - - '@napi-rs/simple-git-linux-x64-musl@0.1.19': - optional: true - - '@napi-rs/simple-git-win32-arm64-msvc@0.1.19': - optional: true - - '@napi-rs/simple-git-win32-x64-msvc@0.1.19': - optional: true - - '@napi-rs/simple-git@0.1.19': - optionalDependencies: - '@napi-rs/simple-git-android-arm-eabi': 0.1.19 - '@napi-rs/simple-git-android-arm64': 0.1.19 - '@napi-rs/simple-git-darwin-arm64': 0.1.19 - '@napi-rs/simple-git-darwin-x64': 0.1.19 - '@napi-rs/simple-git-freebsd-x64': 0.1.19 - '@napi-rs/simple-git-linux-arm-gnueabihf': 0.1.19 - '@napi-rs/simple-git-linux-arm64-gnu': 0.1.19 - '@napi-rs/simple-git-linux-arm64-musl': 0.1.19 - '@napi-rs/simple-git-linux-powerpc64le-gnu': 0.1.19 - '@napi-rs/simple-git-linux-s390x-gnu': 0.1.19 - '@napi-rs/simple-git-linux-x64-gnu': 0.1.19 - '@napi-rs/simple-git-linux-x64-musl': 0.1.19 - '@napi-rs/simple-git-win32-arm64-msvc': 0.1.19 - '@napi-rs/simple-git-win32-x64-msvc': 0.1.19 - - '@next/env@14.2.7': {} - - '@next/swc-darwin-arm64@14.2.7': - optional: true - - '@next/swc-darwin-x64@14.2.7': - optional: true - - '@next/swc-linux-arm64-gnu@14.2.7': - optional: true - - '@next/swc-linux-arm64-musl@14.2.7': - optional: true - - '@next/swc-linux-x64-gnu@14.2.7': - optional: true - - '@next/swc-linux-x64-musl@14.2.7': - optional: true - - '@next/swc-win32-arm64-msvc@14.2.7': - optional: true - - '@next/swc-win32-ia32-msvc@14.2.7': - optional: true - - '@next/swc-win32-x64-msvc@14.2.7': - optional: true - - '@nodelib/fs.scandir@2.1.5': - dependencies: - '@nodelib/fs.stat': 2.0.5 - run-parallel: 1.2.0 - - '@nodelib/fs.stat@2.0.5': {} - - '@nodelib/fs.walk@1.2.8': - dependencies: - '@nodelib/fs.scandir': 2.1.5 - fastq: 1.17.1 - - '@pkgjs/parseargs@0.11.0': - optional: true - - '@popperjs/core@2.11.8': {} - - '@swc/counter@0.1.3': {} - - '@swc/helpers@0.5.5': - dependencies: - '@swc/counter': 0.1.3 - tslib: 2.7.0 - - '@tanstack/query-core@5.52.2': {} - - '@tanstack/react-query@5.52.2(react@18.3.1)': - dependencies: - '@tanstack/query-core': 5.52.2 - react: 18.3.1 - - '@tanstack/react-virtual@3.10.5(react-dom@18.3.1(react@18.3.1))(react@18.3.1)': - dependencies: - '@tanstack/virtual-core': 3.10.5 - react: 18.3.1 - react-dom: 18.3.1(react@18.3.1) - - '@tanstack/virtual-core@3.10.5': {} - - '@theguild/remark-mermaid@0.0.5(react@18.3.1)': - dependencies: - mermaid: 10.9.1 - react: 18.3.1 - unist-util-visit: 5.0.0 - transitivePeerDependencies: - - supports-color - - '@theguild/remark-npm2yarn@0.2.1': - dependencies: - npm-to-yarn: 2.2.1 - unist-util-visit: 5.0.0 - - '@types/acorn@4.0.6': - dependencies: - '@types/estree': 1.0.5 - - '@types/d3-scale-chromatic@3.0.3': {} - - '@types/d3-scale@4.0.8': - dependencies: - '@types/d3-time': 3.0.3 - - '@types/d3-time@3.0.3': {} - - '@types/debug@4.1.12': - dependencies: - '@types/ms': 0.7.34 - - '@types/estree-jsx@1.0.5': - dependencies: - '@types/estree': 1.0.5 - - '@types/estree@1.0.5': {} - - '@types/hast@2.3.10': - dependencies: - '@types/unist': 2.0.11 - - '@types/hast@3.0.4': - dependencies: - '@types/unist': 3.0.3 - - '@types/hoist-non-react-statics@3.3.5': - dependencies: - '@types/react': 18.3.4 - hoist-non-react-statics: 3.3.2 - - '@types/js-yaml@4.0.9': {} - - '@types/katex@0.16.7': {} - - '@types/lodash@4.17.7': {} - - '@types/mdast@3.0.15': - dependencies: - '@types/unist': 2.0.11 - - '@types/mdast@4.0.4': - dependencies: - '@types/unist': 3.0.3 - - '@types/mdx@2.0.13': {} - - '@types/ms@0.7.34': {} - - '@types/node@22.1.0': - dependencies: - undici-types: 6.13.0 - - '@types/numeral@2.0.5': {} - - '@types/parse-json@4.0.2': {} - - '@types/parse5@5.0.3': {} - - '@types/prismjs@1.26.4': {} - - '@types/prop-types@15.7.12': {} - - '@types/react-dom@18.3.0': - dependencies: - '@types/react': 18.3.4 - - '@types/react-window@1.8.8': - dependencies: - '@types/react': 18.3.4 - - '@types/react@18.3.4': - dependencies: - '@types/prop-types': 15.7.12 - csstype: 3.1.3 - - '@types/refractor@3.4.1': - dependencies: - '@types/prismjs': 1.26.4 - - '@types/unist@2.0.11': {} - - '@types/unist@3.0.3': {} - - '@types/use-sync-external-store@0.0.3': {} - - '@ungap/structured-clone@1.2.0': {} - - '@vercel/analytics@1.3.1(next@14.2.7(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(react@18.3.1)': - dependencies: - server-only: 0.0.1 - optionalDependencies: - next: 14.2.7(react-dom@18.3.1(react@18.3.1))(react@18.3.1) - react: 18.3.1 - - acorn-jsx@5.3.2(acorn@8.12.1): - dependencies: - acorn: 8.12.1 - - acorn@8.12.1: {} - - ansi-regex@5.0.1: {} - - ansi-regex@6.0.1: {} - - ansi-sequence-parser@1.1.1: {} - - ansi-styles@3.2.1: - dependencies: - color-convert: 1.9.3 - - ansi-styles@4.3.0: - dependencies: - color-convert: 2.0.1 - - ansi-styles@6.2.1: {} - - any-promise@1.3.0: {} - - anymatch@3.1.3: - dependencies: - normalize-path: 3.0.0 - picomatch: 2.3.1 - - arch@2.2.0: {} - - arg@1.0.0: {} - - arg@5.0.2: {} - - argparse@1.0.10: - dependencies: - sprintf-js: 1.0.3 - - argparse@2.0.1: {} - - aria-hidden@1.2.4: - dependencies: - tslib: 2.7.0 - - astring@1.9.0: {} - - asynckit@0.4.0: {} - - attr-accept@2.2.2: {} - - autoprefixer@10.4.20(postcss@8.4.41): - dependencies: - browserslist: 4.23.3 - caniuse-lite: 1.0.30001653 - fraction.js: 4.3.7 - normalize-range: 0.1.2 - picocolors: 1.0.1 - postcss: 8.4.41 - postcss-value-parser: 4.2.0 - - axios@1.7.5: - dependencies: - follow-redirects: 1.15.6 - form-data: 4.0.0 - proxy-from-env: 1.1.0 - transitivePeerDependencies: - - debug - - babel-plugin-macros@3.1.0: - dependencies: - '@babel/runtime': 7.25.4 - cosmiconfig: 7.1.0 - resolve: 1.22.8 - - bail@1.0.5: {} - - bail@2.0.2: {} - - balanced-match@1.0.2: {} - - binary-extensions@2.3.0: {} - - brace-expansion@2.0.1: - dependencies: - balanced-match: 1.0.2 - - braces@3.0.3: - dependencies: - fill-range: 7.1.1 - - browserslist@4.23.3: - dependencies: - caniuse-lite: 1.0.30001653 - electron-to-chromium: 1.5.13 - node-releases: 2.0.18 - update-browserslist-db: 1.1.0(browserslist@4.23.3) - - busboy@1.6.0: - dependencies: - streamsearch: 1.1.0 - - callsites@3.1.0: {} - - camelcase-css@2.0.1: {} - - caniuse-lite@1.0.30001653: {} - - ccount@1.1.0: {} - - ccount@2.0.1: {} - - chalk@2.3.0: - dependencies: - ansi-styles: 3.2.1 - escape-string-regexp: 1.0.5 - supports-color: 4.5.0 - - chalk@2.4.2: - dependencies: - ansi-styles: 3.2.1 - escape-string-regexp: 1.0.5 - supports-color: 5.5.0 - - character-entities-html4@1.1.4: {} - - character-entities-html4@2.1.0: {} - - character-entities-legacy@1.1.4: {} - - character-entities-legacy@3.0.0: {} - - character-entities@1.2.4: {} - - character-entities@2.0.2: {} - - character-reference-invalid@1.1.4: {} - - character-reference-invalid@2.0.1: {} - - chokidar@3.6.0: - dependencies: - anymatch: 3.1.3 - braces: 3.0.3 - glob-parent: 5.1.2 - is-binary-path: 2.1.0 - is-glob: 4.0.3 - normalize-path: 3.0.0 - readdirp: 3.6.0 - optionalDependencies: - fsevents: 2.3.3 - - chroma-js@2.6.0: {} - - classnames@2.5.1: {} - - client-only@0.0.1: {} - - clipboardy@1.2.2: - dependencies: - arch: 2.2.0 - execa: 0.8.0 - - clsx@2.1.1: {} - - collapse-white-space@1.0.6: {} - - color-convert@1.9.3: - dependencies: - color-name: 1.1.3 - - color-convert@2.0.1: - dependencies: - color-name: 1.1.4 - - color-name@1.1.3: {} - - color-name@1.1.4: {} - - color-string@1.9.1: - dependencies: - color-name: 1.1.4 - simple-swizzle: 0.2.2 - - color@4.2.3: - dependencies: - color-convert: 2.0.1 - color-string: 1.9.1 - - combined-stream@1.0.8: - dependencies: - delayed-stream: 1.0.0 - - comma-separated-tokens@1.0.8: {} - - comma-separated-tokens@2.0.3: {} - - commander@4.1.1: {} - - commander@7.2.0: {} - - commander@8.3.0: {} - - compute-scroll-into-view@3.1.0: {} - - convert-source-map@1.9.0: {} - - cose-base@1.0.3: - dependencies: - layout-base: 1.0.2 - - cosmiconfig@7.1.0: - dependencies: - '@types/parse-json': 4.0.2 - import-fresh: 3.3.0 - parse-json: 5.2.0 - path-type: 4.0.0 - yaml: 1.10.2 - - cross-spawn@5.1.0: - dependencies: - lru-cache: 4.1.5 - shebang-command: 1.2.0 - which: 1.3.1 - - cross-spawn@7.0.3: - dependencies: - path-key: 3.1.1 - shebang-command: 2.0.0 - which: 2.0.2 - - css-box-model@1.2.1: - dependencies: - tiny-invariant: 1.3.3 - - cssesc@3.0.0: {} - - csstype@3.1.3: {} - - cytoscape-cose-bilkent@4.1.0(cytoscape@3.30.2): - dependencies: - cose-base: 1.0.3 - cytoscape: 3.30.2 - - cytoscape@3.30.2: {} - - d3-array@2.12.1: - dependencies: - internmap: 1.0.1 - - d3-array@3.2.4: - dependencies: - internmap: 2.0.3 - - d3-axis@3.0.0: {} - - d3-brush@3.0.0: - dependencies: - d3-dispatch: 3.0.1 - d3-drag: 3.0.0 - d3-interpolate: 3.0.1 - d3-selection: 3.0.0 - d3-transition: 3.0.1(d3-selection@3.0.0) - - d3-chord@3.0.1: - dependencies: - d3-path: 3.1.0 - - d3-color@3.1.0: {} - - d3-contour@4.0.2: - dependencies: - d3-array: 3.2.4 - - d3-delaunay@6.0.4: - dependencies: - delaunator: 5.0.1 - - d3-dispatch@3.0.1: {} - - d3-drag@3.0.0: - dependencies: - d3-dispatch: 3.0.1 - d3-selection: 3.0.0 - - d3-dsv@3.0.1: - dependencies: - commander: 7.2.0 - iconv-lite: 0.6.3 - rw: 1.3.3 - - d3-ease@3.0.1: {} - - d3-fetch@3.0.1: - dependencies: - d3-dsv: 3.0.1 - - d3-force@3.0.0: - dependencies: - d3-dispatch: 3.0.1 - d3-quadtree: 3.0.1 - d3-timer: 3.0.1 - - d3-format@3.1.0: {} - - d3-geo@3.1.1: - dependencies: - d3-array: 3.2.4 - - d3-hierarchy@3.1.2: {} - - d3-interpolate@3.0.1: - dependencies: - d3-color: 3.1.0 - - d3-path@1.0.9: {} - - d3-path@3.1.0: {} - - d3-polygon@3.0.1: {} - - d3-quadtree@3.0.1: {} - - d3-random@3.0.1: {} - - d3-sankey@0.12.3: - dependencies: - d3-array: 2.12.1 - d3-shape: 1.3.7 - - d3-scale-chromatic@3.1.0: - dependencies: - d3-color: 3.1.0 - d3-interpolate: 3.0.1 - - d3-scale@4.0.2: - dependencies: - d3-array: 3.2.4 - d3-format: 3.1.0 - d3-interpolate: 3.0.1 - d3-time: 3.1.0 - d3-time-format: 4.1.0 - - d3-selection@3.0.0: {} - - d3-shape@1.3.7: - dependencies: - d3-path: 1.0.9 - - d3-shape@3.2.0: - dependencies: - d3-path: 3.1.0 - - d3-time-format@4.1.0: - dependencies: - d3-time: 3.1.0 - - d3-time@3.1.0: - dependencies: - d3-array: 3.2.4 - - d3-timer@3.0.1: {} - - d3-transition@3.0.1(d3-selection@3.0.0): - dependencies: - d3-color: 3.1.0 - d3-dispatch: 3.0.1 - d3-ease: 3.0.1 - d3-interpolate: 3.0.1 - d3-selection: 3.0.0 - d3-timer: 3.0.1 - - d3-zoom@3.0.0: - dependencies: - d3-dispatch: 3.0.1 - d3-drag: 3.0.0 - d3-interpolate: 3.0.1 - d3-selection: 3.0.0 - d3-transition: 3.0.1(d3-selection@3.0.0) - - d3@7.9.0: - dependencies: - d3-array: 3.2.4 - d3-axis: 3.0.0 - d3-brush: 3.0.0 - d3-chord: 3.0.1 - d3-color: 3.1.0 - d3-contour: 4.0.2 - d3-delaunay: 6.0.4 - d3-dispatch: 3.0.1 - d3-drag: 3.0.0 - d3-dsv: 3.0.1 - d3-ease: 3.0.1 - d3-fetch: 3.0.1 - d3-force: 3.0.0 - d3-format: 3.1.0 - d3-geo: 3.1.1 - d3-hierarchy: 3.1.2 - d3-interpolate: 3.0.1 - d3-path: 3.1.0 - d3-polygon: 3.0.1 - d3-quadtree: 3.0.1 - d3-random: 3.0.1 - d3-scale: 4.0.2 - d3-scale-chromatic: 3.1.0 - d3-selection: 3.0.0 - d3-shape: 3.2.0 - d3-time: 3.1.0 - d3-time-format: 4.1.0 - d3-timer: 3.0.1 - d3-transition: 3.0.1(d3-selection@3.0.0) - d3-zoom: 3.0.0 - - dagre-d3-es@7.0.10: - dependencies: - d3: 7.9.0 - lodash-es: 4.17.21 - - dayjs@1.11.13: {} - - debug@4.3.6: - dependencies: - ms: 2.1.2 - - decode-named-character-reference@1.0.2: - dependencies: - character-entities: 2.0.2 - - delaunator@5.0.1: - dependencies: - robust-predicates: 3.0.2 - - delayed-stream@1.0.0: {} - - dequal@2.0.3: {} - - detect-libc@2.0.3: {} - - detect-node-es@1.1.0: {} - - devlop@1.1.0: - dependencies: - dequal: 2.0.3 - - didyoumean@1.2.2: {} - - diff@5.2.0: {} - - dlv@1.1.3: {} - - dompurify@3.1.6: {} - - eastasianwidth@0.2.0: {} - - electron-to-chromium@1.5.13: {} - - elkjs@0.9.3: {} - - emoji-regex@8.0.0: {} - - emoji-regex@9.2.2: {} - - emoticon@3.2.0: {} - - entities@4.5.0: {} - - error-ex@1.3.2: - dependencies: - is-arrayish: 0.2.1 - - escalade@3.1.2: {} - - escape-string-regexp@1.0.5: {} - - escape-string-regexp@4.0.0: {} - - escape-string-regexp@5.0.0: {} - - esprima@4.0.1: {} - - estree-util-attach-comments@2.1.1: - dependencies: - '@types/estree': 1.0.5 - - estree-util-build-jsx@2.2.2: - dependencies: - '@types/estree-jsx': 1.0.5 - estree-util-is-identifier-name: 2.1.0 - estree-walker: 3.0.3 - - estree-util-is-identifier-name@2.1.0: {} - - estree-util-to-js@1.2.0: - dependencies: - '@types/estree-jsx': 1.0.5 - astring: 1.9.0 - source-map: 0.7.4 - - estree-util-value-to-estree@1.3.0: - dependencies: - is-plain-obj: 3.0.0 - - estree-util-visit@1.2.1: - dependencies: - '@types/estree-jsx': 1.0.5 - '@types/unist': 2.0.11 - - estree-walker@3.0.3: - dependencies: - '@types/estree': 1.0.5 - - execa@0.8.0: - dependencies: - cross-spawn: 5.1.0 - get-stream: 3.0.0 - is-stream: 1.1.0 - npm-run-path: 2.0.2 - p-finally: 1.0.0 - signal-exit: 3.0.7 - strip-eof: 1.0.0 - - extend-shallow@2.0.1: - dependencies: - is-extendable: 0.1.1 - - extend@3.0.2: {} - - fast-glob@3.3.2: - dependencies: - '@nodelib/fs.stat': 2.0.5 - '@nodelib/fs.walk': 1.2.8 - glob-parent: 5.1.2 - merge2: 1.4.1 - micromatch: 4.0.8 - - fastq@1.17.1: - dependencies: - reusify: 1.0.4 - - file-selector@0.4.0: - dependencies: - tslib: 2.7.0 - - fill-range@7.1.1: - dependencies: - to-regex-range: 5.0.1 - - find-root@1.1.0: {} - - flexsearch@0.7.43: {} - - focus-lock@1.3.5: - dependencies: - tslib: 2.7.0 - - focus-visible@5.2.1: {} - - follow-redirects@1.15.6: {} - - foreground-child@3.3.0: - dependencies: - cross-spawn: 7.0.3 - signal-exit: 4.1.0 - - form-data@4.0.0: - dependencies: - asynckit: 0.4.0 - combined-stream: 1.0.8 - mime-types: 2.1.35 - - fraction.js@4.3.7: {} - - fsevents@2.3.3: - optional: true - - function-bind@1.1.2: {} - - get-nonce@1.0.1: {} - - get-stream@3.0.0: {} - - git-up@7.0.0: - dependencies: - is-ssh: 1.4.0 - parse-url: 8.1.0 - - git-url-parse@13.1.1: - dependencies: - git-up: 7.0.0 - - github-slugger@2.0.0: {} - - glob-parent@5.1.2: - dependencies: - is-glob: 4.0.3 - - glob-parent@6.0.2: - dependencies: - is-glob: 4.0.3 - - glob@10.4.5: - dependencies: - foreground-child: 3.3.0 - jackspeak: 3.4.3 - minimatch: 9.0.5 - minipass: 7.1.2 - package-json-from-dist: 1.0.0 - path-scurry: 1.11.1 - - globals@11.12.0: {} - - graceful-fs@4.2.11: {} - - gray-matter@4.0.3: - dependencies: - js-yaml: 3.14.1 - kind-of: 6.0.3 - section-matter: 1.0.0 - strip-bom-string: 1.0.0 - - has-flag@2.0.0: {} - - has-flag@3.0.0: {} - - hash-obj@4.0.0: - dependencies: - is-obj: 3.0.0 - sort-keys: 5.0.0 - type-fest: 1.4.0 - - hasown@2.0.2: - dependencies: - function-bind: 1.1.2 - - hast-to-hyperscript@9.0.1: - dependencies: - '@types/unist': 2.0.11 - comma-separated-tokens: 1.0.8 - property-information: 5.6.0 - space-separated-tokens: 1.1.5 - style-to-object: 0.3.0 - unist-util-is: 4.1.0 - web-namespaces: 1.1.4 - - hast-util-from-dom@5.0.0: - dependencies: - '@types/hast': 3.0.4 - hastscript: 8.0.0 - web-namespaces: 2.0.1 - - hast-util-from-html-isomorphic@2.0.0: - dependencies: - '@types/hast': 3.0.4 - hast-util-from-dom: 5.0.0 - hast-util-from-html: 2.0.2 - unist-util-remove-position: 5.0.0 - - hast-util-from-html@2.0.2: - dependencies: - '@types/hast': 3.0.4 - devlop: 1.1.0 - hast-util-from-parse5: 8.0.1 - parse5: 7.1.2 - vfile: 6.0.3 - vfile-message: 4.0.2 - - hast-util-from-parse5@6.0.1: - dependencies: - '@types/parse5': 5.0.3 - hastscript: 6.0.0 - property-information: 5.6.0 - vfile: 4.2.1 - vfile-location: 3.2.0 - web-namespaces: 1.1.4 - - hast-util-from-parse5@8.0.1: - dependencies: - '@types/hast': 3.0.4 - '@types/unist': 3.0.3 - devlop: 1.1.0 - hastscript: 8.0.0 - property-information: 6.5.0 - vfile: 6.0.3 - vfile-location: 5.0.3 - web-namespaces: 2.0.1 - - hast-util-is-element@1.1.0: {} - - hast-util-is-element@3.0.0: - dependencies: - '@types/hast': 3.0.4 - - hast-util-parse-selector@2.2.5: {} - - hast-util-parse-selector@4.0.0: - dependencies: - '@types/hast': 3.0.4 - - hast-util-raw@6.1.0: - dependencies: - '@types/hast': 2.3.10 - hast-util-from-parse5: 6.0.1 - hast-util-to-parse5: 6.0.0 - html-void-elements: 1.0.5 - parse5: 6.0.1 - unist-util-position: 3.1.0 - unist-util-visit: 2.0.3 - vfile: 4.2.1 - web-namespaces: 1.1.4 - xtend: 4.0.2 - zwitch: 1.0.5 - - hast-util-raw@9.0.4: - dependencies: - '@types/hast': 3.0.4 - '@types/unist': 3.0.3 - '@ungap/structured-clone': 1.2.0 - hast-util-from-parse5: 8.0.1 - hast-util-to-parse5: 8.0.0 - html-void-elements: 3.0.0 - mdast-util-to-hast: 13.2.0 - parse5: 7.1.2 - unist-util-position: 5.0.0 - unist-util-visit: 5.0.0 - vfile: 6.0.3 - web-namespaces: 2.0.1 - zwitch: 2.0.4 - - hast-util-to-estree@2.3.3: - dependencies: - '@types/estree': 1.0.5 - '@types/estree-jsx': 1.0.5 - '@types/hast': 2.3.10 - '@types/unist': 2.0.11 - comma-separated-tokens: 2.0.3 - estree-util-attach-comments: 2.1.1 - estree-util-is-identifier-name: 2.1.0 - hast-util-whitespace: 2.0.1 - mdast-util-mdx-expression: 1.3.2 - mdast-util-mdxjs-esm: 1.3.1 - property-information: 6.5.0 - space-separated-tokens: 2.0.2 - style-to-object: 0.4.4 - unist-util-position: 4.0.4 - zwitch: 2.0.4 - transitivePeerDependencies: - - supports-color - - hast-util-to-html@7.1.3: - dependencies: - ccount: 1.1.0 - comma-separated-tokens: 1.0.8 - hast-util-is-element: 1.1.0 - hast-util-whitespace: 1.0.4 - html-void-elements: 1.0.5 - property-information: 5.6.0 - space-separated-tokens: 1.1.5 - stringify-entities: 3.1.0 - unist-util-is: 4.1.0 - xtend: 4.0.2 - - hast-util-to-parse5@6.0.0: - dependencies: - hast-to-hyperscript: 9.0.1 - property-information: 5.6.0 - web-namespaces: 1.1.4 - xtend: 4.0.2 - zwitch: 1.0.5 - - hast-util-to-parse5@8.0.0: - dependencies: - '@types/hast': 3.0.4 - comma-separated-tokens: 2.0.3 - devlop: 1.1.0 - property-information: 6.5.0 - space-separated-tokens: 2.0.2 - web-namespaces: 2.0.1 - zwitch: 2.0.4 - - hast-util-to-text@4.0.2: - dependencies: - '@types/hast': 3.0.4 - '@types/unist': 3.0.3 - hast-util-is-element: 3.0.0 - unist-util-find-after: 5.0.0 - - hast-util-whitespace@1.0.4: {} - - hast-util-whitespace@2.0.1: {} - - hastscript@6.0.0: - dependencies: - '@types/hast': 2.3.10 - comma-separated-tokens: 1.0.8 - hast-util-parse-selector: 2.2.5 - property-information: 5.6.0 - space-separated-tokens: 1.1.5 - - hastscript@8.0.0: - dependencies: - '@types/hast': 3.0.4 - comma-separated-tokens: 2.0.3 - hast-util-parse-selector: 4.0.0 - property-information: 6.5.0 - space-separated-tokens: 2.0.2 - - hoist-non-react-statics@3.3.2: - dependencies: - react-is: 16.13.1 - - html-void-elements@1.0.5: {} - - html-void-elements@3.0.0: {} - - iconv-lite@0.6.3: - dependencies: - safer-buffer: 2.1.2 - - import-fresh@3.3.0: - dependencies: - parent-module: 1.0.1 - resolve-from: 4.0.0 - - inherits@2.0.4: {} - - inline-style-parser@0.1.1: {} - - internmap@1.0.1: {} - - internmap@2.0.3: {} - - intersection-observer@0.12.2: {} - - invariant@2.2.4: - dependencies: - loose-envify: 1.4.0 - - is-alphabetical@1.0.4: {} - - is-alphabetical@2.0.1: {} - - is-alphanumerical@1.0.4: - dependencies: - is-alphabetical: 1.0.4 - is-decimal: 1.0.4 - - is-alphanumerical@2.0.1: - dependencies: - is-alphabetical: 2.0.1 - is-decimal: 2.0.1 - - is-arrayish@0.2.1: {} - - is-arrayish@0.3.2: {} - - is-binary-path@2.1.0: - dependencies: - binary-extensions: 2.3.0 - - is-buffer@2.0.5: {} - - is-core-module@2.15.1: - dependencies: - hasown: 2.0.2 - - is-decimal@1.0.4: {} - - is-decimal@2.0.1: {} - - is-extendable@0.1.1: {} - - is-extglob@2.1.1: {} - - is-fullwidth-code-point@3.0.0: {} - - is-glob@4.0.3: - dependencies: - is-extglob: 2.1.1 - - is-hexadecimal@1.0.4: {} - - is-hexadecimal@2.0.1: {} - - is-number@7.0.0: {} - - is-obj@3.0.0: {} - - is-plain-obj@2.1.0: {} - - is-plain-obj@3.0.0: {} - - is-plain-obj@4.1.0: {} - - is-plain-object@5.0.0: {} - - is-reference@3.0.2: - dependencies: - '@types/estree': 1.0.5 - - is-ssh@1.4.0: - dependencies: - protocols: 2.0.1 - - is-stream@1.1.0: {} - - is-whitespace-character@1.0.4: {} - - is-word-character@1.0.4: {} - - isexe@2.0.0: {} - - jackspeak@3.4.3: - dependencies: - '@isaacs/cliui': 8.0.2 - optionalDependencies: - '@pkgjs/parseargs': 0.11.0 - - jiti@1.21.6: {} - - js-tokens@4.0.0: {} - - js-yaml@3.14.1: - dependencies: - argparse: 1.0.10 - esprima: 4.0.1 - - js-yaml@4.1.0: - dependencies: - argparse: 2.0.1 - - jsesc@2.5.2: {} - - json-parse-even-better-errors@2.3.1: {} - - jsonc-parser@3.3.1: {} - - katex@0.16.11: - dependencies: - commander: 8.3.0 - - khroma@2.1.0: {} - - kind-of@6.0.3: {} - - kleur@4.1.5: {} - - layout-base@1.0.2: {} - - lilconfig@2.1.0: {} - - lilconfig@3.1.2: {} - - lines-and-columns@1.2.4: {} - - lodash-es@4.17.21: {} - - lodash.get@4.4.2: {} - - lodash@4.17.21: {} - - longest-streak@3.1.0: {} - - loose-envify@1.4.0: - dependencies: - js-tokens: 4.0.0 - - lru-cache@10.4.3: {} - - lru-cache@4.1.5: - dependencies: - pseudomap: 1.0.2 - yallist: 2.1.2 - - markdown-escapes@1.0.4: {} - - markdown-extensions@1.1.1: {} - - markdown-table@3.0.3: {} - - match-sorter@6.3.4: - dependencies: - '@babel/runtime': 7.25.4 - remove-accents: 0.5.0 - - mdast-util-definitions@4.0.0: - dependencies: - unist-util-visit: 2.0.3 - - mdast-util-definitions@5.1.2: - dependencies: - '@types/mdast': 3.0.15 - '@types/unist': 2.0.11 - unist-util-visit: 4.1.2 - - mdast-util-find-and-replace@2.2.2: - dependencies: - '@types/mdast': 3.0.15 - escape-string-regexp: 5.0.0 - unist-util-is: 5.2.1 - unist-util-visit-parents: 5.1.3 - - mdast-util-from-markdown@1.3.1: - dependencies: - '@types/mdast': 3.0.15 - '@types/unist': 2.0.11 - decode-named-character-reference: 1.0.2 - mdast-util-to-string: 3.2.0 - micromark: 3.2.0 - micromark-util-decode-numeric-character-reference: 1.1.0 - micromark-util-decode-string: 1.1.0 - micromark-util-normalize-identifier: 1.1.0 - micromark-util-symbol: 1.1.0 - micromark-util-types: 1.1.0 - unist-util-stringify-position: 3.0.3 - uvu: 0.5.6 - transitivePeerDependencies: - - supports-color - - mdast-util-gfm-autolink-literal@1.0.3: - dependencies: - '@types/mdast': 3.0.15 - ccount: 2.0.1 - mdast-util-find-and-replace: 2.2.2 - micromark-util-character: 1.2.0 - - mdast-util-gfm-footnote@1.0.2: - dependencies: - '@types/mdast': 3.0.15 - mdast-util-to-markdown: 1.5.0 - micromark-util-normalize-identifier: 1.1.0 - - mdast-util-gfm-strikethrough@1.0.3: - dependencies: - '@types/mdast': 3.0.15 - mdast-util-to-markdown: 1.5.0 - - mdast-util-gfm-table@1.0.7: - dependencies: - '@types/mdast': 3.0.15 - markdown-table: 3.0.3 - mdast-util-from-markdown: 1.3.1 - mdast-util-to-markdown: 1.5.0 - transitivePeerDependencies: - - supports-color - - mdast-util-gfm-task-list-item@1.0.2: - dependencies: - '@types/mdast': 3.0.15 - mdast-util-to-markdown: 1.5.0 - - mdast-util-gfm@2.0.2: - dependencies: - mdast-util-from-markdown: 1.3.1 - mdast-util-gfm-autolink-literal: 1.0.3 - mdast-util-gfm-footnote: 1.0.2 - mdast-util-gfm-strikethrough: 1.0.3 - mdast-util-gfm-table: 1.0.7 - mdast-util-gfm-task-list-item: 1.0.2 - mdast-util-to-markdown: 1.5.0 - transitivePeerDependencies: - - supports-color - - mdast-util-math@2.0.2: - dependencies: - '@types/mdast': 3.0.15 - longest-streak: 3.1.0 - mdast-util-to-markdown: 1.5.0 - - mdast-util-mdx-expression@1.3.2: - dependencies: - '@types/estree-jsx': 1.0.5 - '@types/hast': 2.3.10 - '@types/mdast': 3.0.15 - mdast-util-from-markdown: 1.3.1 - mdast-util-to-markdown: 1.5.0 - transitivePeerDependencies: - - supports-color - - mdast-util-mdx-jsx@2.1.4: - dependencies: - '@types/estree-jsx': 1.0.5 - '@types/hast': 2.3.10 - '@types/mdast': 3.0.15 - '@types/unist': 2.0.11 - ccount: 2.0.1 - mdast-util-from-markdown: 1.3.1 - mdast-util-to-markdown: 1.5.0 - parse-entities: 4.0.1 - stringify-entities: 4.0.4 - unist-util-remove-position: 4.0.2 - unist-util-stringify-position: 3.0.3 - vfile-message: 3.1.4 - transitivePeerDependencies: - - supports-color - - mdast-util-mdx@2.0.1: - dependencies: - mdast-util-from-markdown: 1.3.1 - mdast-util-mdx-expression: 1.3.2 - mdast-util-mdx-jsx: 2.1.4 - mdast-util-mdxjs-esm: 1.3.1 - mdast-util-to-markdown: 1.5.0 - transitivePeerDependencies: - - supports-color - - mdast-util-mdxjs-esm@1.3.1: - dependencies: - '@types/estree-jsx': 1.0.5 - '@types/hast': 2.3.10 - '@types/mdast': 3.0.15 - mdast-util-from-markdown: 1.3.1 - mdast-util-to-markdown: 1.5.0 - transitivePeerDependencies: - - supports-color - - mdast-util-phrasing@3.0.1: - dependencies: - '@types/mdast': 3.0.15 - unist-util-is: 5.2.1 - - mdast-util-to-hast@10.2.0: - dependencies: - '@types/mdast': 3.0.15 - '@types/unist': 2.0.11 - mdast-util-definitions: 4.0.0 - mdurl: 1.0.1 - unist-builder: 2.0.3 - unist-util-generated: 1.1.6 - unist-util-position: 3.1.0 - unist-util-visit: 2.0.3 - - mdast-util-to-hast@12.3.0: - dependencies: - '@types/hast': 2.3.10 - '@types/mdast': 3.0.15 - mdast-util-definitions: 5.1.2 - micromark-util-sanitize-uri: 1.2.0 - trim-lines: 3.0.1 - unist-util-generated: 2.0.1 - unist-util-position: 4.0.4 - unist-util-visit: 4.1.2 - - mdast-util-to-hast@13.2.0: - dependencies: - '@types/hast': 3.0.4 - '@types/mdast': 4.0.4 - '@ungap/structured-clone': 1.2.0 - devlop: 1.1.0 - micromark-util-sanitize-uri: 2.0.0 - trim-lines: 3.0.1 - unist-util-position: 5.0.0 - unist-util-visit: 5.0.0 - vfile: 6.0.3 - - mdast-util-to-markdown@1.5.0: - dependencies: - '@types/mdast': 3.0.15 - '@types/unist': 2.0.11 - longest-streak: 3.1.0 - mdast-util-phrasing: 3.0.1 - mdast-util-to-string: 3.2.0 - micromark-util-decode-string: 1.1.0 - unist-util-visit: 4.1.2 - zwitch: 2.0.4 - - mdast-util-to-string@3.2.0: - dependencies: - '@types/mdast': 3.0.15 - - mdurl@1.0.1: {} - - memoize-one@5.2.1: {} - - memoize-one@6.0.0: {} - - merge2@1.4.1: {} - - mermaid@10.9.1: - dependencies: - '@braintree/sanitize-url': 6.0.4 - '@types/d3-scale': 4.0.8 - '@types/d3-scale-chromatic': 3.0.3 - cytoscape: 3.30.2 - cytoscape-cose-bilkent: 4.1.0(cytoscape@3.30.2) - d3: 7.9.0 - d3-sankey: 0.12.3 - dagre-d3-es: 7.0.10 - dayjs: 1.11.13 - dompurify: 3.1.6 - elkjs: 0.9.3 - katex: 0.16.11 - khroma: 2.1.0 - lodash-es: 4.17.21 - mdast-util-from-markdown: 1.3.1 - non-layered-tidy-tree-layout: 2.0.2 - stylis: 4.3.4 - ts-dedent: 2.2.0 - uuid: 9.0.1 - web-worker: 1.3.0 - transitivePeerDependencies: - - supports-color - - micromark-core-commonmark@1.1.0: - dependencies: - decode-named-character-reference: 1.0.2 - micromark-factory-destination: 1.1.0 - micromark-factory-label: 1.1.0 - micromark-factory-space: 1.1.0 - micromark-factory-title: 1.1.0 - micromark-factory-whitespace: 1.1.0 - micromark-util-character: 1.2.0 - micromark-util-chunked: 1.1.0 - micromark-util-classify-character: 1.1.0 - micromark-util-html-tag-name: 1.2.0 - micromark-util-normalize-identifier: 1.1.0 - micromark-util-resolve-all: 1.1.0 - micromark-util-subtokenize: 1.1.0 - micromark-util-symbol: 1.1.0 - micromark-util-types: 1.1.0 - uvu: 0.5.6 - - micromark-extension-gfm-autolink-literal@1.0.5: - dependencies: - micromark-util-character: 1.2.0 - micromark-util-sanitize-uri: 1.2.0 - micromark-util-symbol: 1.1.0 - micromark-util-types: 1.1.0 - - micromark-extension-gfm-footnote@1.1.2: - dependencies: - micromark-core-commonmark: 1.1.0 - micromark-factory-space: 1.1.0 - micromark-util-character: 1.2.0 - micromark-util-normalize-identifier: 1.1.0 - micromark-util-sanitize-uri: 1.2.0 - micromark-util-symbol: 1.1.0 - micromark-util-types: 1.1.0 - uvu: 0.5.6 - - micromark-extension-gfm-strikethrough@1.0.7: - dependencies: - micromark-util-chunked: 1.1.0 - micromark-util-classify-character: 1.1.0 - micromark-util-resolve-all: 1.1.0 - micromark-util-symbol: 1.1.0 - micromark-util-types: 1.1.0 - uvu: 0.5.6 - - micromark-extension-gfm-table@1.0.7: - dependencies: - micromark-factory-space: 1.1.0 - micromark-util-character: 1.2.0 - micromark-util-symbol: 1.1.0 - micromark-util-types: 1.1.0 - uvu: 0.5.6 - - micromark-extension-gfm-tagfilter@1.0.2: - dependencies: - micromark-util-types: 1.1.0 - - micromark-extension-gfm-task-list-item@1.0.5: - dependencies: - micromark-factory-space: 1.1.0 - micromark-util-character: 1.2.0 - micromark-util-symbol: 1.1.0 - micromark-util-types: 1.1.0 - uvu: 0.5.6 - - micromark-extension-gfm@2.0.3: - dependencies: - micromark-extension-gfm-autolink-literal: 1.0.5 - micromark-extension-gfm-footnote: 1.1.2 - micromark-extension-gfm-strikethrough: 1.0.7 - micromark-extension-gfm-table: 1.0.7 - micromark-extension-gfm-tagfilter: 1.0.2 - micromark-extension-gfm-task-list-item: 1.0.5 - micromark-util-combine-extensions: 1.1.0 - micromark-util-types: 1.1.0 - - micromark-extension-math@2.1.2: - dependencies: - '@types/katex': 0.16.7 - katex: 0.16.11 - micromark-factory-space: 1.1.0 - micromark-util-character: 1.2.0 - micromark-util-symbol: 1.1.0 - micromark-util-types: 1.1.0 - uvu: 0.5.6 - - micromark-extension-mdx-expression@1.0.8: - dependencies: - '@types/estree': 1.0.5 - micromark-factory-mdx-expression: 1.0.9 - micromark-factory-space: 1.1.0 - micromark-util-character: 1.2.0 - micromark-util-events-to-acorn: 1.2.3 - micromark-util-symbol: 1.1.0 - micromark-util-types: 1.1.0 - uvu: 0.5.6 - - micromark-extension-mdx-jsx@1.0.5: - dependencies: - '@types/acorn': 4.0.6 - '@types/estree': 1.0.5 - estree-util-is-identifier-name: 2.1.0 - micromark-factory-mdx-expression: 1.0.9 - micromark-factory-space: 1.1.0 - micromark-util-character: 1.2.0 - micromark-util-symbol: 1.1.0 - micromark-util-types: 1.1.0 - uvu: 0.5.6 - vfile-message: 3.1.4 - - micromark-extension-mdx-md@1.0.1: - dependencies: - micromark-util-types: 1.1.0 - - micromark-extension-mdxjs-esm@1.0.5: - dependencies: - '@types/estree': 1.0.5 - micromark-core-commonmark: 1.1.0 - micromark-util-character: 1.2.0 - micromark-util-events-to-acorn: 1.2.3 - micromark-util-symbol: 1.1.0 - micromark-util-types: 1.1.0 - unist-util-position-from-estree: 1.1.2 - uvu: 0.5.6 - vfile-message: 3.1.4 - - micromark-extension-mdxjs@1.0.1: - dependencies: - acorn: 8.12.1 - acorn-jsx: 5.3.2(acorn@8.12.1) - micromark-extension-mdx-expression: 1.0.8 - micromark-extension-mdx-jsx: 1.0.5 - micromark-extension-mdx-md: 1.0.1 - micromark-extension-mdxjs-esm: 1.0.5 - micromark-util-combine-extensions: 1.1.0 - micromark-util-types: 1.1.0 - - micromark-factory-destination@1.1.0: - dependencies: - micromark-util-character: 1.2.0 - micromark-util-symbol: 1.1.0 - micromark-util-types: 1.1.0 - - micromark-factory-label@1.1.0: - dependencies: - micromark-util-character: 1.2.0 - micromark-util-symbol: 1.1.0 - micromark-util-types: 1.1.0 - uvu: 0.5.6 - - micromark-factory-mdx-expression@1.0.9: - dependencies: - '@types/estree': 1.0.5 - micromark-util-character: 1.2.0 - micromark-util-events-to-acorn: 1.2.3 - micromark-util-symbol: 1.1.0 - micromark-util-types: 1.1.0 - unist-util-position-from-estree: 1.1.2 - uvu: 0.5.6 - vfile-message: 3.1.4 - - micromark-factory-space@1.1.0: - dependencies: - micromark-util-character: 1.2.0 - micromark-util-types: 1.1.0 - - micromark-factory-title@1.1.0: - dependencies: - micromark-factory-space: 1.1.0 - micromark-util-character: 1.2.0 - micromark-util-symbol: 1.1.0 - micromark-util-types: 1.1.0 - - micromark-factory-whitespace@1.1.0: - dependencies: - micromark-factory-space: 1.1.0 - micromark-util-character: 1.2.0 - micromark-util-symbol: 1.1.0 - micromark-util-types: 1.1.0 - - micromark-util-character@1.2.0: - dependencies: - micromark-util-symbol: 1.1.0 - micromark-util-types: 1.1.0 - - micromark-util-character@2.1.0: - dependencies: - micromark-util-symbol: 2.0.0 - micromark-util-types: 2.0.0 - - micromark-util-chunked@1.1.0: - dependencies: - micromark-util-symbol: 1.1.0 - - micromark-util-classify-character@1.1.0: - dependencies: - micromark-util-character: 1.2.0 - micromark-util-symbol: 1.1.0 - micromark-util-types: 1.1.0 - - micromark-util-combine-extensions@1.1.0: - dependencies: - micromark-util-chunked: 1.1.0 - micromark-util-types: 1.1.0 - - micromark-util-decode-numeric-character-reference@1.1.0: - dependencies: - micromark-util-symbol: 1.1.0 - - micromark-util-decode-string@1.1.0: - dependencies: - decode-named-character-reference: 1.0.2 - micromark-util-character: 1.2.0 - micromark-util-decode-numeric-character-reference: 1.1.0 - micromark-util-symbol: 1.1.0 - - micromark-util-encode@1.1.0: {} - - micromark-util-encode@2.0.0: {} - - micromark-util-events-to-acorn@1.2.3: - dependencies: - '@types/acorn': 4.0.6 - '@types/estree': 1.0.5 - '@types/unist': 2.0.11 - estree-util-visit: 1.2.1 - micromark-util-symbol: 1.1.0 - micromark-util-types: 1.1.0 - uvu: 0.5.6 - vfile-message: 3.1.4 - - micromark-util-html-tag-name@1.2.0: {} - - micromark-util-normalize-identifier@1.1.0: - dependencies: - micromark-util-symbol: 1.1.0 - - micromark-util-resolve-all@1.1.0: - dependencies: - micromark-util-types: 1.1.0 - - micromark-util-sanitize-uri@1.2.0: - dependencies: - micromark-util-character: 1.2.0 - micromark-util-encode: 1.1.0 - micromark-util-symbol: 1.1.0 - - micromark-util-sanitize-uri@2.0.0: - dependencies: - micromark-util-character: 2.1.0 - micromark-util-encode: 2.0.0 - micromark-util-symbol: 2.0.0 - - micromark-util-subtokenize@1.1.0: - dependencies: - micromark-util-chunked: 1.1.0 - micromark-util-symbol: 1.1.0 - micromark-util-types: 1.1.0 - uvu: 0.5.6 - - micromark-util-symbol@1.1.0: {} - - micromark-util-symbol@2.0.0: {} - - micromark-util-types@1.1.0: {} - - micromark-util-types@2.0.0: {} - - micromark@3.2.0: - dependencies: - '@types/debug': 4.1.12 - debug: 4.3.6 - decode-named-character-reference: 1.0.2 - micromark-core-commonmark: 1.1.0 - micromark-factory-space: 1.1.0 - micromark-util-character: 1.2.0 - micromark-util-chunked: 1.1.0 - micromark-util-combine-extensions: 1.1.0 - micromark-util-decode-numeric-character-reference: 1.1.0 - micromark-util-encode: 1.1.0 - micromark-util-normalize-identifier: 1.1.0 - micromark-util-resolve-all: 1.1.0 - micromark-util-sanitize-uri: 1.2.0 - micromark-util-subtokenize: 1.1.0 - micromark-util-symbol: 1.1.0 - micromark-util-types: 1.1.0 - uvu: 0.5.6 - transitivePeerDependencies: - - supports-color - - micromatch@4.0.8: - dependencies: - braces: 3.0.3 - picomatch: 2.3.1 - - mime-db@1.52.0: {} - - mime-types@2.1.35: - dependencies: - mime-db: 1.52.0 - - minimatch@9.0.5: - dependencies: - brace-expansion: 2.0.1 - - minipass@7.1.2: {} - - moment@2.30.1: {} - - mri@1.2.0: {} - - ms@2.1.2: {} - - mz@2.7.0: - dependencies: - any-promise: 1.3.0 - object-assign: 4.1.1 - thenify-all: 1.6.0 - - nanoid@3.3.7: {} - - next-mdx-remote@4.4.1(react-dom@18.3.1(react@18.3.1))(react@18.3.1): - dependencies: - '@mdx-js/mdx': 2.3.0 - '@mdx-js/react': 2.3.0(react@18.3.1) - react: 18.3.1 - react-dom: 18.3.1(react@18.3.1) - vfile: 5.3.7 - vfile-matter: 3.0.1 - transitivePeerDependencies: - - supports-color - - next-seo@6.5.0(next@14.2.7(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(react-dom@18.3.1(react@18.3.1))(react@18.3.1): - dependencies: - next: 14.2.7(react-dom@18.3.1(react@18.3.1))(react@18.3.1) - react: 18.3.1 - react-dom: 18.3.1(react@18.3.1) - - next-themes@0.2.1(next@14.2.7(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(react-dom@18.3.1(react@18.3.1))(react@18.3.1): - dependencies: - next: 14.2.7(react-dom@18.3.1(react@18.3.1))(react@18.3.1) - react: 18.3.1 - react-dom: 18.3.1(react@18.3.1) - - next@14.2.7(react-dom@18.3.1(react@18.3.1))(react@18.3.1): - dependencies: - '@next/env': 14.2.7 - '@swc/helpers': 0.5.5 - busboy: 1.6.0 - caniuse-lite: 1.0.30001653 - graceful-fs: 4.2.11 - postcss: 8.4.31 - react: 18.3.1 - react-dom: 18.3.1(react@18.3.1) - styled-jsx: 5.1.1(react@18.3.1) - optionalDependencies: - '@next/swc-darwin-arm64': 14.2.7 - '@next/swc-darwin-x64': 14.2.7 - '@next/swc-linux-arm64-gnu': 14.2.7 - '@next/swc-linux-arm64-musl': 14.2.7 - '@next/swc-linux-x64-gnu': 14.2.7 - '@next/swc-linux-x64-musl': 14.2.7 - '@next/swc-win32-arm64-msvc': 14.2.7 - '@next/swc-win32-ia32-msvc': 14.2.7 - '@next/swc-win32-x64-msvc': 14.2.7 - transitivePeerDependencies: - - '@babel/core' - - babel-plugin-macros - - nextra-theme-docs@2.13.4(next@14.2.7(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(nextra@2.13.4(next@14.2.7(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(react-dom@18.3.1(react@18.3.1))(react@18.3.1): - dependencies: - '@headlessui/react': 1.7.19(react-dom@18.3.1(react@18.3.1))(react@18.3.1) - '@popperjs/core': 2.11.8 - clsx: 2.1.1 - escape-string-regexp: 5.0.0 - flexsearch: 0.7.43 - focus-visible: 5.2.1 - git-url-parse: 13.1.1 - intersection-observer: 0.12.2 - match-sorter: 6.3.4 - next: 14.2.7(react-dom@18.3.1(react@18.3.1))(react@18.3.1) - next-seo: 6.5.0(next@14.2.7(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(react-dom@18.3.1(react@18.3.1))(react@18.3.1) - next-themes: 0.2.1(next@14.2.7(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(react-dom@18.3.1(react@18.3.1))(react@18.3.1) - nextra: 2.13.4(next@14.2.7(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(react-dom@18.3.1(react@18.3.1))(react@18.3.1) - react: 18.3.1 - react-dom: 18.3.1(react@18.3.1) - scroll-into-view-if-needed: 3.1.0 - zod: 3.23.8 - - nextra@2.13.4(next@14.2.7(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(react-dom@18.3.1(react@18.3.1))(react@18.3.1): - dependencies: - '@headlessui/react': 1.7.19(react-dom@18.3.1(react@18.3.1))(react@18.3.1) - '@mdx-js/mdx': 2.3.0 - '@mdx-js/react': 2.3.0(react@18.3.1) - '@napi-rs/simple-git': 0.1.19 - '@theguild/remark-mermaid': 0.0.5(react@18.3.1) - '@theguild/remark-npm2yarn': 0.2.1 - clsx: 2.1.1 - github-slugger: 2.0.0 - graceful-fs: 4.2.11 - gray-matter: 4.0.3 - katex: 0.16.11 - lodash.get: 4.4.2 - next: 14.2.7(react-dom@18.3.1(react@18.3.1))(react@18.3.1) - next-mdx-remote: 4.4.1(react-dom@18.3.1(react@18.3.1))(react@18.3.1) - p-limit: 3.1.0 - react: 18.3.1 - react-dom: 18.3.1(react@18.3.1) - rehype-katex: 7.0.1 - rehype-pretty-code: 0.9.11(shiki@0.14.7) - rehype-raw: 7.0.0 - remark-gfm: 3.0.1 - remark-math: 5.1.1 - remark-reading-time: 2.0.1 - shiki: 0.14.7 - slash: 3.0.0 - title: 3.5.3 - unist-util-remove: 4.0.0 - unist-util-visit: 5.0.0 - zod: 3.23.8 - transitivePeerDependencies: - - supports-color - - node-emoji@1.11.0: - dependencies: - lodash: 4.17.21 - - node-releases@2.0.18: {} - - non-layered-tidy-tree-layout@2.0.2: {} - - normalize-path@3.0.0: {} - - normalize-range@0.1.2: {} - - npm-run-path@2.0.2: - dependencies: - path-key: 2.0.1 - - npm-to-yarn@2.2.1: {} - - numeral@2.0.6: {} - - object-assign@4.1.1: {} - - object-hash@3.0.0: {} - - p-finally@1.0.0: {} - - p-limit@3.1.0: - dependencies: - yocto-queue: 0.1.0 - - package-json-from-dist@1.0.0: {} - - papaparse@5.4.1: {} - - parent-module@1.0.1: - dependencies: - callsites: 3.1.0 - - parse-entities@2.0.0: - dependencies: - character-entities: 1.2.4 - character-entities-legacy: 1.1.4 - character-reference-invalid: 1.1.4 - is-alphanumerical: 1.0.4 - is-decimal: 1.0.4 - is-hexadecimal: 1.0.4 - - parse-entities@4.0.1: - dependencies: - '@types/unist': 2.0.11 - character-entities: 2.0.2 - character-entities-legacy: 3.0.0 - character-reference-invalid: 2.0.1 - decode-named-character-reference: 1.0.2 - is-alphanumerical: 2.0.1 - is-decimal: 2.0.1 - is-hexadecimal: 2.0.1 - - parse-json@5.2.0: - dependencies: - '@babel/code-frame': 7.24.7 - error-ex: 1.3.2 - json-parse-even-better-errors: 2.3.1 - lines-and-columns: 1.2.4 - - parse-numeric-range@1.3.0: {} - - parse-path@7.0.0: - dependencies: - protocols: 2.0.1 - - parse-url@8.1.0: - dependencies: - parse-path: 7.0.0 - - parse5@6.0.1: {} - - parse5@7.1.2: - dependencies: - entities: 4.5.0 - - path-key@2.0.1: {} - - path-key@3.1.1: {} - - path-parse@1.0.7: {} - - path-scurry@1.11.1: - dependencies: - lru-cache: 10.4.3 - minipass: 7.1.2 - - path-type@4.0.0: {} - - periscopic@3.1.0: - dependencies: - '@types/estree': 1.0.5 - estree-walker: 3.0.3 - is-reference: 3.0.2 - - picocolors@1.0.1: {} - - picomatch@2.3.1: {} - - pify@2.3.0: {} - - pirates@4.0.6: {} - - postcss-import@15.1.0(postcss@8.4.41): - dependencies: - postcss: 8.4.41 - postcss-value-parser: 4.2.0 - read-cache: 1.0.0 - resolve: 1.22.8 - - postcss-js@4.0.1(postcss@8.4.41): - dependencies: - camelcase-css: 2.0.1 - postcss: 8.4.41 - - postcss-load-config@4.0.2(postcss@8.4.41): - dependencies: - lilconfig: 3.1.2 - yaml: 2.5.0 - optionalDependencies: - postcss: 8.4.41 - - postcss-nested@6.2.0(postcss@8.4.41): - dependencies: - postcss: 8.4.41 - postcss-selector-parser: 6.1.2 - - postcss-selector-parser@6.1.2: - dependencies: - cssesc: 3.0.0 - util-deprecate: 1.0.2 - - postcss-value-parser@4.2.0: {} - - postcss@8.4.31: - dependencies: - nanoid: 3.3.7 - picocolors: 1.0.1 - source-map-js: 1.2.0 - - postcss@8.4.41: - dependencies: - nanoid: 3.3.7 - picocolors: 1.0.1 - source-map-js: 1.2.0 - - prismjs@1.27.0: {} - - prop-types@15.8.1: - dependencies: - loose-envify: 1.4.0 - object-assign: 4.1.1 - react-is: 16.13.1 - - property-information@5.6.0: - dependencies: - xtend: 4.0.2 - - property-information@6.5.0: {} - - protocols@2.0.1: {} - - proxy-from-env@1.1.0: {} - - pseudomap@1.0.2: {} - - querystringify@2.2.0: {} - - queue-microtask@1.2.3: {} - - raf-schd@4.0.3: {} - - react-clientside-effect@1.2.6(react@18.3.1): - dependencies: - '@babel/runtime': 7.25.4 - react: 18.3.1 - - react-dom@18.3.1(react@18.3.1): - dependencies: - loose-envify: 1.4.0 - react: 18.3.1 - scheduler: 0.23.2 - - react-dropzone@11.7.1(react@18.3.1): - dependencies: - attr-accept: 2.2.2 - file-selector: 0.4.0 - prop-types: 15.8.1 - react: 18.3.1 - - react-element-to-jsx-string@15.0.0(react-dom@18.3.1(react@18.3.1))(react@18.3.1): - dependencies: - '@base2/pretty-print-object': 1.0.1 - is-plain-object: 5.0.0 - react: 18.3.1 - react-dom: 18.3.1(react@18.3.1) - react-is: 18.1.0 - - react-focus-lock@2.13.2(@types/react@18.3.4)(react@18.3.1): - dependencies: - '@babel/runtime': 7.25.4 - focus-lock: 1.3.5 - prop-types: 15.8.1 - react: 18.3.1 - react-clientside-effect: 1.2.6(react@18.3.1) - use-callback-ref: 1.3.2(@types/react@18.3.4)(react@18.3.1) - use-sidecar: 1.1.2(@types/react@18.3.4)(react@18.3.1) - optionalDependencies: - '@types/react': 18.3.4 - - react-focus-on@3.9.3(@types/react@18.3.4)(react@18.3.1): - dependencies: - aria-hidden: 1.2.4 - react: 18.3.1 - react-focus-lock: 2.13.2(@types/react@18.3.4)(react@18.3.1) - react-remove-scroll: 2.5.10(@types/react@18.3.4)(react@18.3.1) - react-style-singleton: 2.2.1(@types/react@18.3.4)(react@18.3.1) - tslib: 2.7.0 - use-sidecar: 1.1.2(@types/react@18.3.4)(react@18.3.1) - optionalDependencies: - '@types/react': 18.3.4 - - react-is@16.13.1: {} - - react-is@17.0.2: {} - - react-is@18.1.0: {} - - react-is@18.3.1: {} - - react-redux@8.1.3(@types/react-dom@18.3.0)(@types/react@18.3.4)(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(redux@4.2.1): - dependencies: - '@babel/runtime': 7.25.4 - '@types/hoist-non-react-statics': 3.3.5 - '@types/use-sync-external-store': 0.0.3 - hoist-non-react-statics: 3.3.2 - react: 18.3.1 - react-is: 18.3.1 - use-sync-external-store: 1.2.2(react@18.3.1) - optionalDependencies: - '@types/react': 18.3.4 - '@types/react-dom': 18.3.0 - react-dom: 18.3.1(react@18.3.1) - redux: 4.2.1 - - react-remove-scroll-bar@2.3.6(@types/react@18.3.4)(react@18.3.1): - dependencies: - react: 18.3.1 - react-style-singleton: 2.2.1(@types/react@18.3.4)(react@18.3.1) - tslib: 2.7.0 - optionalDependencies: - '@types/react': 18.3.4 - - react-remove-scroll@2.5.10(@types/react@18.3.4)(react@18.3.1): - dependencies: - react: 18.3.1 - react-remove-scroll-bar: 2.3.6(@types/react@18.3.4)(react@18.3.1) - react-style-singleton: 2.2.1(@types/react@18.3.4)(react@18.3.1) - tslib: 2.7.0 - use-callback-ref: 1.3.2(@types/react@18.3.4)(react@18.3.1) - use-sidecar: 1.1.2(@types/react@18.3.4)(react@18.3.1) - optionalDependencies: - '@types/react': 18.3.4 - - react-style-singleton@2.2.1(@types/react@18.3.4)(react@18.3.1): - dependencies: - get-nonce: 1.0.1 - invariant: 2.2.4 - react: 18.3.1 - tslib: 2.7.0 - optionalDependencies: - '@types/react': 18.3.4 - - react-virtualized-auto-sizer@1.0.24(react-dom@18.3.1(react@18.3.1))(react@18.3.1): - dependencies: - react: 18.3.1 - react-dom: 18.3.1(react@18.3.1) - - react-window@1.8.10(react-dom@18.3.1(react@18.3.1))(react@18.3.1): - dependencies: - '@babel/runtime': 7.25.4 - memoize-one: 5.2.1 - react: 18.3.1 - react-dom: 18.3.1(react@18.3.1) - - react@18.3.1: - dependencies: - loose-envify: 1.4.0 - - read-cache@1.0.0: - dependencies: - pify: 2.3.0 - - readdirp@3.6.0: - dependencies: - picomatch: 2.3.1 - - reading-time@1.5.0: {} - - redux@4.2.1: - dependencies: - '@babel/runtime': 7.25.4 - - refractor@3.6.0: - dependencies: - hastscript: 6.0.0 - parse-entities: 2.0.0 - prismjs: 1.27.0 - - regenerator-runtime@0.14.1: {} - - rehype-katex@7.0.1: - dependencies: - '@types/hast': 3.0.4 - '@types/katex': 0.16.7 - hast-util-from-html-isomorphic: 2.0.0 - hast-util-to-text: 4.0.2 - katex: 0.16.11 - unist-util-visit-parents: 6.0.1 - vfile: 6.0.3 - - rehype-pretty-code@0.9.11(shiki@0.14.7): - dependencies: - '@types/hast': 2.3.10 - hash-obj: 4.0.0 - parse-numeric-range: 1.3.0 - shiki: 0.14.7 - - rehype-raw@5.1.0: - dependencies: - hast-util-raw: 6.1.0 - - rehype-raw@7.0.0: - dependencies: - '@types/hast': 3.0.4 - hast-util-raw: 9.0.4 - vfile: 6.0.3 - - rehype-react@6.2.1: - dependencies: - '@mapbox/hast-util-table-cell-style': 0.2.1 - hast-to-hyperscript: 9.0.1 - - rehype-stringify@8.0.0: - dependencies: - hast-util-to-html: 7.1.3 - - remark-breaks@2.0.2: - dependencies: - unist-util-visit: 2.0.3 - - remark-emoji@2.2.0: - dependencies: - emoticon: 3.2.0 - node-emoji: 1.11.0 - unist-util-visit: 2.0.3 - - remark-gfm@3.0.1: - dependencies: - '@types/mdast': 3.0.15 - mdast-util-gfm: 2.0.2 - micromark-extension-gfm: 2.0.3 - unified: 10.1.2 - transitivePeerDependencies: - - supports-color - - remark-math@5.1.1: - dependencies: - '@types/mdast': 3.0.15 - mdast-util-math: 2.0.2 - micromark-extension-math: 2.1.2 - unified: 10.1.2 - - remark-mdx@2.3.0: - dependencies: - mdast-util-mdx: 2.0.1 - micromark-extension-mdxjs: 1.0.1 - transitivePeerDependencies: - - supports-color - - remark-parse-no-trim@8.0.4: - dependencies: - ccount: 1.1.0 - collapse-white-space: 1.0.6 - is-alphabetical: 1.0.4 - is-decimal: 1.0.4 - is-whitespace-character: 1.0.4 - is-word-character: 1.0.4 - markdown-escapes: 1.0.4 - parse-entities: 2.0.0 - repeat-string: 1.6.1 - state-toggle: 1.0.3 - trim-trailing-lines: 1.1.4 - unherit: 1.1.3 - unist-util-remove-position: 2.0.1 - vfile-location: 3.2.0 - xtend: 4.0.2 - - remark-parse@10.0.2: - dependencies: - '@types/mdast': 3.0.15 - mdast-util-from-markdown: 1.3.1 - unified: 10.1.2 - transitivePeerDependencies: - - supports-color - - remark-reading-time@2.0.1: - dependencies: - estree-util-is-identifier-name: 2.1.0 - estree-util-value-to-estree: 1.3.0 - reading-time: 1.5.0 - unist-util-visit: 3.1.0 - - remark-rehype@10.1.0: - dependencies: - '@types/hast': 2.3.10 - '@types/mdast': 3.0.15 - mdast-util-to-hast: 12.3.0 - unified: 10.1.2 - - remark-rehype@8.1.0: - dependencies: - mdast-util-to-hast: 10.2.0 - - remove-accents@0.5.0: {} - - repeat-string@1.6.1: {} - - requires-port@1.0.0: {} - - resolve-from@4.0.0: {} - - resolve@1.22.8: - dependencies: - is-core-module: 2.15.1 - path-parse: 1.0.7 - supports-preserve-symlinks-flag: 1.0.0 - - reusify@1.0.4: {} - - robust-predicates@3.0.2: {} - - run-parallel@1.2.0: - dependencies: - queue-microtask: 1.2.3 - - rw@1.3.3: {} - - sade@1.8.1: - dependencies: - mri: 1.2.0 - - safer-buffer@2.1.2: {} - - scheduler@0.23.2: - dependencies: - loose-envify: 1.4.0 - - scroll-into-view-if-needed@3.1.0: - dependencies: - compute-scroll-into-view: 3.1.0 - - section-matter@1.0.0: - dependencies: - extend-shallow: 2.0.1 - kind-of: 6.0.3 - - semver@7.6.3: {} - - server-only@0.0.1: {} - - sharp@0.33.5: - dependencies: - color: 4.2.3 - detect-libc: 2.0.3 - semver: 7.6.3 - optionalDependencies: - '@img/sharp-darwin-arm64': 0.33.5 - '@img/sharp-darwin-x64': 0.33.5 - '@img/sharp-libvips-darwin-arm64': 1.0.4 - '@img/sharp-libvips-darwin-x64': 1.0.4 - '@img/sharp-libvips-linux-arm': 1.0.5 - '@img/sharp-libvips-linux-arm64': 1.0.4 - '@img/sharp-libvips-linux-s390x': 1.0.4 - '@img/sharp-libvips-linux-x64': 1.0.4 - '@img/sharp-libvips-linuxmusl-arm64': 1.0.4 - '@img/sharp-libvips-linuxmusl-x64': 1.0.4 - '@img/sharp-linux-arm': 0.33.5 - '@img/sharp-linux-arm64': 0.33.5 - '@img/sharp-linux-s390x': 0.33.5 - '@img/sharp-linux-x64': 0.33.5 - '@img/sharp-linuxmusl-arm64': 0.33.5 - '@img/sharp-linuxmusl-x64': 0.33.5 - '@img/sharp-wasm32': 0.33.5 - '@img/sharp-win32-ia32': 0.33.5 - '@img/sharp-win32-x64': 0.33.5 - - shebang-command@1.2.0: - dependencies: - shebang-regex: 1.0.0 - - shebang-command@2.0.0: - dependencies: - shebang-regex: 3.0.0 - - shebang-regex@1.0.0: {} - - shebang-regex@3.0.0: {} - - shiki@0.14.7: - dependencies: - ansi-sequence-parser: 1.1.1 - jsonc-parser: 3.3.1 - vscode-oniguruma: 1.7.0 - vscode-textmate: 8.0.0 - - signal-exit@3.0.7: {} - - signal-exit@4.1.0: {} - - simple-swizzle@0.2.2: - dependencies: - is-arrayish: 0.3.2 - - slash@3.0.0: {} - - sort-keys@5.0.0: - dependencies: - is-plain-obj: 4.1.0 - - source-map-js@1.2.0: {} - - source-map@0.5.7: {} - - source-map@0.7.4: {} - - space-separated-tokens@1.1.5: {} - - space-separated-tokens@2.0.2: {} - - sprintf-js@1.0.3: {} - - state-toggle@1.0.3: {} - - streamsearch@1.1.0: {} - - string-width@4.2.3: - dependencies: - emoji-regex: 8.0.0 - is-fullwidth-code-point: 3.0.0 - strip-ansi: 6.0.1 - - string-width@5.1.2: - dependencies: - eastasianwidth: 0.2.0 - emoji-regex: 9.2.2 - strip-ansi: 7.1.0 - - stringify-entities@3.1.0: - dependencies: - character-entities-html4: 1.1.4 - character-entities-legacy: 1.1.4 - xtend: 4.0.2 - - stringify-entities@4.0.4: - dependencies: - character-entities-html4: 2.1.0 - character-entities-legacy: 3.0.0 - - strip-ansi@6.0.1: - dependencies: - ansi-regex: 5.0.1 - - strip-ansi@7.1.0: - dependencies: - ansi-regex: 6.0.1 - - strip-bom-string@1.0.0: {} - - strip-eof@1.0.0: {} - - style-to-object@0.3.0: - dependencies: - inline-style-parser: 0.1.1 - - style-to-object@0.4.4: - dependencies: - inline-style-parser: 0.1.1 - - styled-jsx@5.1.1(react@18.3.1): - dependencies: - client-only: 0.0.1 - react: 18.3.1 - - stylis@4.2.0: {} - - stylis@4.3.4: {} - - sucrase@3.35.0: - dependencies: - '@jridgewell/gen-mapping': 0.3.5 - commander: 4.1.1 - glob: 10.4.5 - lines-and-columns: 1.2.4 - mz: 2.7.0 - pirates: 4.0.6 - ts-interface-checker: 0.1.13 - - supports-color@4.5.0: - dependencies: - has-flag: 2.0.0 - - supports-color@5.5.0: - dependencies: - has-flag: 3.0.0 - - supports-preserve-symlinks-flag@1.0.0: {} - - tabbable@5.3.3: {} - - tailwindcss@3.4.10: - dependencies: - '@alloc/quick-lru': 5.2.0 - arg: 5.0.2 - chokidar: 3.6.0 - didyoumean: 1.2.2 - dlv: 1.1.3 - fast-glob: 3.3.2 - glob-parent: 6.0.2 - is-glob: 4.0.3 - jiti: 1.21.6 - lilconfig: 2.1.0 - micromatch: 4.0.8 - normalize-path: 3.0.0 - object-hash: 3.0.0 - picocolors: 1.0.1 - postcss: 8.4.41 - postcss-import: 15.1.0(postcss@8.4.41) - postcss-js: 4.0.1(postcss@8.4.41) - postcss-load-config: 4.0.2(postcss@8.4.41) - postcss-nested: 6.2.0(postcss@8.4.41) - postcss-selector-parser: 6.1.2 - resolve: 1.22.8 - sucrase: 3.35.0 - transitivePeerDependencies: - - ts-node - - text-diff@1.0.1: {} - - thenify-all@1.6.0: - dependencies: - thenify: 3.3.1 - - thenify@3.3.1: - dependencies: - any-promise: 1.3.0 - - tiny-invariant@1.3.3: {} - - title@3.5.3: - dependencies: - arg: 1.0.0 - chalk: 2.3.0 - clipboardy: 1.2.2 - titleize: 1.0.0 - - titleize@1.0.0: {} - - to-fast-properties@2.0.0: {} - - to-regex-range@5.0.1: - dependencies: - is-number: 7.0.0 - - trim-lines@3.0.1: {} - - trim-trailing-lines@1.1.4: {} - - trough@1.0.5: {} - - trough@2.2.0: {} - - ts-dedent@2.2.0: {} - - ts-interface-checker@0.1.13: {} - - tslib@1.14.1: {} - - tslib@2.7.0: {} - - type-fest@1.4.0: {} - - typescript@4.5.5: {} - - undici-types@6.13.0: {} - - unherit@1.1.3: - dependencies: - inherits: 2.0.4 - xtend: 4.0.2 - - unified@10.1.2: - dependencies: - '@types/unist': 2.0.11 - bail: 2.0.2 - extend: 3.0.2 - is-buffer: 2.0.5 - is-plain-obj: 4.1.0 - trough: 2.2.0 - vfile: 5.3.7 - - unified@9.2.2: - dependencies: - '@types/unist': 2.0.11 - bail: 1.0.5 - extend: 3.0.2 - is-buffer: 2.0.5 - is-plain-obj: 2.1.0 - trough: 1.0.5 - vfile: 4.2.1 - - unist-builder@2.0.3: {} - - unist-util-find-after@5.0.0: - dependencies: - '@types/unist': 3.0.3 - unist-util-is: 6.0.0 - - unist-util-generated@1.1.6: {} - - unist-util-generated@2.0.1: {} - - unist-util-is@3.0.0: {} - - unist-util-is@4.1.0: {} - - unist-util-is@5.2.1: - dependencies: - '@types/unist': 2.0.11 - - unist-util-is@6.0.0: - dependencies: - '@types/unist': 3.0.3 - - unist-util-position-from-estree@1.1.2: - dependencies: - '@types/unist': 2.0.11 - - unist-util-position@3.1.0: {} - - unist-util-position@4.0.4: - dependencies: - '@types/unist': 2.0.11 - - unist-util-position@5.0.0: - dependencies: - '@types/unist': 3.0.3 - - unist-util-remove-position@2.0.1: - dependencies: - unist-util-visit: 2.0.3 - - unist-util-remove-position@4.0.2: - dependencies: - '@types/unist': 2.0.11 - unist-util-visit: 4.1.2 - - unist-util-remove-position@5.0.0: - dependencies: - '@types/unist': 3.0.3 - unist-util-visit: 5.0.0 - - unist-util-remove@4.0.0: - dependencies: - '@types/unist': 3.0.3 - unist-util-is: 6.0.0 - unist-util-visit-parents: 6.0.1 - - unist-util-stringify-position@2.0.3: - dependencies: - '@types/unist': 2.0.11 - - unist-util-stringify-position@3.0.3: - dependencies: - '@types/unist': 2.0.11 - - unist-util-stringify-position@4.0.0: - dependencies: - '@types/unist': 3.0.3 - - unist-util-visit-parents@2.1.2: - dependencies: - unist-util-is: 3.0.0 - - unist-util-visit-parents@3.1.1: - dependencies: - '@types/unist': 2.0.11 - unist-util-is: 4.1.0 - - unist-util-visit-parents@4.1.1: - dependencies: - '@types/unist': 2.0.11 - unist-util-is: 5.2.1 - - unist-util-visit-parents@5.1.3: - dependencies: - '@types/unist': 2.0.11 - unist-util-is: 5.2.1 - - unist-util-visit-parents@6.0.1: - dependencies: - '@types/unist': 3.0.3 - unist-util-is: 6.0.0 - - unist-util-visit@1.4.1: - dependencies: - unist-util-visit-parents: 2.1.2 - - unist-util-visit@2.0.3: - dependencies: - '@types/unist': 2.0.11 - unist-util-is: 4.1.0 - unist-util-visit-parents: 3.1.1 - - unist-util-visit@3.1.0: - dependencies: - '@types/unist': 2.0.11 - unist-util-is: 5.2.1 - unist-util-visit-parents: 4.1.1 - - unist-util-visit@4.1.2: - dependencies: - '@types/unist': 2.0.11 - unist-util-is: 5.2.1 - unist-util-visit-parents: 5.1.3 - - unist-util-visit@5.0.0: - dependencies: - '@types/unist': 3.0.3 - unist-util-is: 6.0.0 - unist-util-visit-parents: 6.0.1 - - update-browserslist-db@1.1.0(browserslist@4.23.3): - dependencies: - browserslist: 4.23.3 - escalade: 3.1.2 - picocolors: 1.0.1 - - url-parse@1.5.10: - dependencies: - querystringify: 2.2.0 - requires-port: 1.0.0 - - use-callback-ref@1.3.2(@types/react@18.3.4)(react@18.3.1): - dependencies: - react: 18.3.1 - tslib: 2.7.0 - optionalDependencies: - '@types/react': 18.3.4 - - use-memo-one@1.1.3(react@18.3.1): - dependencies: - react: 18.3.1 - - use-sidecar@1.1.2(@types/react@18.3.4)(react@18.3.1): - dependencies: - detect-node-es: 1.1.0 - react: 18.3.1 - tslib: 2.7.0 - optionalDependencies: - '@types/react': 18.3.4 - - use-sync-external-store@1.2.2(react@18.3.1): - dependencies: - react: 18.3.1 - - util-deprecate@1.0.2: {} - - uuid@8.3.2: {} - - uuid@9.0.1: {} - - uvu@0.5.6: - dependencies: - dequal: 2.0.3 - diff: 5.2.0 - kleur: 4.1.5 - sade: 1.8.1 - - vfile-location@3.2.0: {} - - vfile-location@5.0.3: - dependencies: - '@types/unist': 3.0.3 - vfile: 6.0.3 - - vfile-matter@3.0.1: - dependencies: - '@types/js-yaml': 4.0.9 - is-buffer: 2.0.5 - js-yaml: 4.1.0 - - vfile-message@2.0.4: - dependencies: - '@types/unist': 2.0.11 - unist-util-stringify-position: 2.0.3 - - vfile-message@3.1.4: - dependencies: - '@types/unist': 2.0.11 - unist-util-stringify-position: 3.0.3 - - vfile-message@4.0.2: - dependencies: - '@types/unist': 3.0.3 - unist-util-stringify-position: 4.0.0 - - vfile@4.2.1: - dependencies: - '@types/unist': 2.0.11 - is-buffer: 2.0.5 - unist-util-stringify-position: 2.0.3 - vfile-message: 2.0.4 - - vfile@5.3.7: - dependencies: - '@types/unist': 2.0.11 - is-buffer: 2.0.5 - unist-util-stringify-position: 3.0.3 - vfile-message: 3.1.4 - - vfile@6.0.3: - dependencies: - '@types/unist': 3.0.3 - vfile-message: 4.0.2 - - vscode-oniguruma@1.7.0: {} - - vscode-textmate@8.0.0: {} - - web-namespaces@1.1.4: {} - - web-namespaces@2.0.1: {} - - web-worker@1.3.0: {} - - which@1.3.1: - dependencies: - isexe: 2.0.0 - - which@2.0.2: - dependencies: - isexe: 2.0.0 - - wrap-ansi@7.0.0: - dependencies: - ansi-styles: 4.3.0 - string-width: 4.2.3 - strip-ansi: 6.0.1 - - wrap-ansi@8.1.0: - dependencies: - ansi-styles: 6.2.1 - string-width: 5.1.2 - strip-ansi: 7.1.0 - - xtend@4.0.2: {} - - yallist@2.1.2: {} - - yaml@1.10.2: {} - - yaml@2.5.0: {} - - yocto-queue@0.1.0: {} - - zod@3.23.8: {} - - zwitch@1.0.5: {} - - zwitch@2.0.4: {} diff --git a/website/public/api/rmm_tools.json b/website/public/api/rmm_tools.json index 1a3b8bc4..6f14e0f3 100644 --- a/website/public/api/rmm_tools.json +++ b/website/public/api/rmm_tools.json @@ -1,16274 +1,17394 @@ [ - { - "Name": "Rapid7", - "Description": "Rapid7 is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/14/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "ir_agent.exe", - "rapid7_agent_core.exe", - "rapid7_endpoint_broker.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "*.analytics.insight.rapid7.com", - "*.endpoint.ingress.rapid7.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rapid7_network_sigma.yml", - "Description": "Detects potential network activity of Rapid7 RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rapid7_processes_sigma.yml", - "Description": "Detects potential processes activity of Rapid7 RMM tool" - } - ], - "References": [ - "https://docs.rapid7.com/insightvm/configure-communications-with-the-insight-platform/" - ], - "Acknowledgement": [] - }, - { - "Name": "SunLogin", - "Description": "SunLogin is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/26/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "OrayRemoteShell.exe", - "OrayRemoteService.exe", - "sunlogin*.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["sunlogin.oray.com", "client.oray.net"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/sunlogin_network_sigma.yml", - "Description": "Detects potential network activity of SunLogin RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/sunlogin_processes_sigma.yml", - "Description": "Detects potential processes activity of SunLogin RMM tool" - } - ], - "References": ["https://sunlogin.oray.com/en/embed/software.html"], - "Acknowledgement": [] - }, - { - "Name": "CloudFuze", - "Description": "CloudFuze is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Box", - "Description": "Box is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files\\Box\\Box\\*", - "*\\Box\\Box\\*", - "*\\Box.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/box_processes_sigma.yml", - "Description": "Detects potential processes activity of Box RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "GoToAssist Agent Desktop Console", - "Description": "GoToAssist Agent Desktop Console is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\*\\G2RDesktopConsole-x64.msi", - "*\\G2RDesktopConsole-x64.msi" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Kaseya (VSA)", - "Description": "Kaseya (VSA) aka Unigma is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.\n", - "Author": "Nasreddine Bencherchali", - "Created": "2024-08-05", - "LastModified": "2024-08-05", - "Details": { - "Website": "", - "PEMetadata": [ - { - "Filename": "agentmon.exe" - }, - { - "Filename": "KaUpdHlp.exe" - }, - { - "Filename": "KaUsrTsk.exe", - "OriginalFileName": "", - "Description": "" - } - ], - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files (x86)\\Kaseya\\", - "C:\\ProgramData\\Kaseya\\" - ] - }, - "Artifacts": { - "Disk": [ - { - "File": "%localappdata%\\Kaseya\\Log\\KaseyaLiveConnect\\*", - "Description": "Kaseya Live Connect logs", - "OS": "Windows" - }, - { - "File": "~/Library/Logs/com.kaseya/KaseyaLiveConnect/*", - "Description": "Kaseya Live Connect logs", - "OS": "MacOS" - }, - { - "File": "C:\\ProgramData\\Kaseya\\Log\\Endpoint\\*", - "Description": "Kaseya Endpoint logs", - "OS": "Windows" - }, - { - "File": "C:\\Program Files*\\Kaseya\\*\\agentmon.log", - "Description": "Kaseya Agent Monitor log" - }, - { - "File": "/var/log/system.log", - "Description": "Kaseya Agent Monitor log", - "OS": "MacOS 32bit" - }, - { - "File": " ~/opt/kaseya/*/logs*", - "Description": "Kaseya Agent Monitor log", - "OS": "MacOS 64bit" - }, - { - "File": "C:\\Users\\*\\AppData\\Local\\Temp\\KASetup.log", - "Description": "Kaseya Setup log in user temp directory", - "OS": "Windows" - }, - { - "File": "C:\\Windows\\Temp\\KASetup.log", - "Description": "Kaseya Setup log in Windows temp directory", - "OS": "Windows" - }, - { - "File": "C:\\ProgramData\\Kaseya\\Log\\KaseyaEdgeServices\\*", - "Description": "Kaseya Edge Services logs", - "OS": "Windows" - }, - { - "File": "C:\\Kaseya\\api\\v1.0\\logs\\", - "Description": "Kaseya API logs", - "OS": "Windows" - }, - { - "File": "C:\\Kaseya\\api\\v1.5\\endpoint\\logs", - "Description": "Kaseya API logs", - "OS": "Windows" - }, - { - "File": "C:\\Kaseya\\api\\v1.5\\endpoints\\logs", - "Description": "Kaseya API logs", - "OS": "Windows" - }, - { - "File": "C:\\Windows\\System32\\config\\systemprofile\\AppData\\Local\\Kaseya\\Log\\MakeSelfSignedCert.exe\\", - "Description": "Certificate creation", - "OS": "Windows" - }, - { - "File": "C:\\Kaseya\\WebPages\\install\\makecert.txt", - "Description": "Certificate creation", - "OS": "Windows" - }, - { - "File": "C:\\ProgramData\\Kaseya\\Log\\Endpoint\\Instance_*\\KaseyaEndpoint*", - "Description": "Endpoint service logs", - "OS": "Windows" - }, - { - "File": "C:\\ProgramData\\Kaseya\\Log\\Endpoint\\Instance_*\\Session_*", - "Description": "Session logs", - "OS": "Windows" - } - ], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "deploy01.kaseya.com", - "*managedsupport.kaseya.net", - "*.kaseya.net", - "kaseya.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/kaseya__vsa__network_sigma.yml", - "Description": "Detects potential network activity of Kaseya (VSA) RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/kaseya__vsa__files_sigma.yml", - "Description": "Detects potential files activity of Kaseya (VSA) RMM tool" - } - ], - "References": [ - "https://helpdesk.kaseya.com/hc/en-gb/articles/229012608-Software-Deployment-URL-Port-Requirements", - "https://helpdesk.kaseya.com/hc/en-gb/articles/229009708-Live-Connect-Log-File-Locations", - "https://ruler-project.github.io/ruler-project/RULER/remote/Kaseya/", - "https://helpdesk.kaseya.com/hc/en-gb/articles/229009708-Live-Connect-Log-File-Locations" - ], - "Acknowledgement": [] - }, - { - "Name": "PuTTY Tray", - "Description": "PuTTY Tray is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["C:\\*\\puttytray.exe", "*\\puttytray.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/putty_tray_processes_sigma.yml", - "Description": "Detects potential processes activity of PuTTY Tray RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Azure Storage Explorer", - "Description": "Azure Storage Explorer is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files (x86)\\Microsoft Azure Storage Explorer\\*", - "*\\Microsoft Azure Storage Explorer\\*", - "*\\StorageExplorer.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/azure_storage_explorer_processes_sigma.yml", - "Description": "Detects potential processes activity of Azure Storage Explorer RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "SysAid", - "Description": "SysAid is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files\\SysAidServer\\*", - "*\\SysAidServer\\*", - "*\\SysAid\\*", - "*\\IliAS.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/sysaid_processes_sigma.yml", - "Description": "Detects potential processes activity of SysAid RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Domotz", - "Description": "Domotz is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "domotz.exe", - "Domotz Pro Desktop App.exe", - "domotz_bash.exe", - "domotz*.exe", - "Domotz Pro Desktop App Setup*.exe", - "domotz-windows*.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.domotz.co", "domotz.com", "*cell-1.domotz.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/domotz_network_sigma.yml", - "Description": "Detects potential network activity of Domotz RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/domotz_processes_sigma.yml", - "Description": "Detects potential processes activity of Domotz RMM tool" - } - ], - "References": [ - "https://help.domotz.com/tips-tricks/unblock-outgoing-connections-on-firewall/" - ], - "Acknowledgement": [] - }, - { - "Name": "BeyondTrust", - "Description": "BeyondTrust is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Netop Remote Control (aka Impero Connect)", - "Description": "Netop Remote Control (aka Impero Connect) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "nhostsvc.exe", - "nhstw32.exe", - "nldrw32.exe", - "rmserverconsolemediator.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["imperosoftware.com/impero-connect/"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/netop_remote_control__aka_impero_connect__network_sigma.yml", - "Description": "Detects potential network activity of Netop Remote Control (aka Impero Connect) RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/netop_remote_control__aka_impero_connect__processes_sigma.yml", - "Description": "Detects potential processes activity of Netop Remote Control (aka Impero Connect) RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Bomgar - Now BeyondTrust", - "Description": "Bomgar - Now BeyondTrust is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Microsoft TSC", - "Description": "Microsoft TSC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["termsrv.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/microsoft_tsc_processes_sigma.yml", - "Description": "Detects potential processes activity of Microsoft TSC RMM tool" - } - ], - "References": [ - "https://learn.microsoft.com/en-us/troubleshoot/windows-server/remote/terminal-server-startup-connection-application" - ], - "Acknowledgement": [] - }, - { - "Name": "Jump Desktop", - "Description": "Jump Desktop is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "jumpclient.exe", - "jumpdesktop.exe", - "jumpservice.exe", - "jumpconnect.exe", - "jumpupdater.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "*.jumpdesktop.com", - "jumpdesktop.com", - "jumpto.me", - "*.jumpto.me" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/jump_desktop_network_sigma.yml", - "Description": "Detects potential network activity of Jump Desktop RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/jump_desktop_processes_sigma.yml", - "Description": "Detects potential processes activity of Jump Desktop RMM tool" - } - ], - "References": [ - "https://support.jumpdesktop.com/hc/en-us/articles/360042490351-Administrators-Guide-For-Jump-Desktop-Connect" - ], - "Acknowledgement": [] - }, - { - "Name": "IntelliAdmin Remote Control", - "Description": "IntelliAdmin Remote Control is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "iadmin.exe", - "intelliadmin.exe", - "agent32.exe", - "agent64.exe", - "agent_setup_5.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "user_managed", - "*.intelliadmin.com", - "intelliadmin.com/remote-control" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/intelliadmin_remote_control_network_sigma.yml", - "Description": "Detects potential network activity of IntelliAdmin Remote Control RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/intelliadmin_remote_control_processes_sigma.yml", - "Description": "Detects potential processes activity of IntelliAdmin Remote Control RMM tool" - } - ], - "References": ["intelliadmin.com/remote-control"], - "Acknowledgement": [] - }, - { - "Name": "Chrome SSH Extension", - "Description": "Chrome SSH Extension is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Users\\*\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\iodihamcpbpeioajjeobimgagajmlibd*", - "*Users\\*\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\iodihamcpbpeioajjeobimgagajmlibd*" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "ZeroTier", - "Description": "ZeroTier is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/14/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "zerotier*.msi", - "zerotier*.exe", - "zero-powershell.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["zerotier.com", "*.zerotier.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/zerotier_network_sigma.yml", - "Description": "Detects potential network activity of ZeroTier RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/zerotier_processes_sigma.yml", - "Description": "Detects potential processes activity of ZeroTier RMM tool" - } - ], - "References": ["https://my.zerotier.com/"], - "Acknowledgement": [] - }, - { - "Name": "Ericom AccessNow", - "Description": "Ericom AccessNow is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["accessserver*.exe", "accessserver.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed", "ericom.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ericom_accessnow_network_sigma.yml", - "Description": "Detects potential network activity of Ericom AccessNow RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ericom_accessnow_processes_sigma.yml", - "Description": "Detects potential processes activity of Ericom AccessNow RMM tool" - } - ], - "References": ["https://www.ericom.com/connect-accessnow/"], - "Acknowledgement": [] - }, - { - "Name": "RealVNC", - "Description": "RealVNC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Pcnow", - "Description": "Pcnow is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["mwcliun.exe", "pcnmgr.exe", "webexpcnow.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["au.pcmag.com/utilities/21470/webex-pcnow"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pcnow_network_sigma.yml", - "Description": "Detects potential network activity of Pcnow RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pcnow_processes_sigma.yml", - "Description": "Detects potential processes activity of Pcnow RMM tool" - } - ], - "References": ["http://pcnow.webex.com/ - DOA as of 2024"], - "Acknowledgement": [] - }, - { - "Name": "DesktopNow", - "Description": "DesktopNow is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/26/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["desktopnow.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.nchuser.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/desktopnow_network_sigma.yml", - "Description": "Detects potential network activity of DesktopNow RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/desktopnow_processes_sigma.yml", - "Description": "Detects potential processes activity of DesktopNow RMM tool" - } - ], - "References": [ - "https://forums.ivanti.com/s/article/Network-Ports-used-by-Environment-Manager?language=en_US" - ], - "Acknowledgement": [] - }, - { - "Name": "Pocket Controller (Soti Xsight)", - "Description": "Pocket Controller (Soti Xsight) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "pocketcontroller.exe", - "wysebrowser.exe", - "XSightService.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*soti.net"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pocket_controller__soti_xsight__network_sigma.yml", - "Description": "Detects potential network activity of Pocket Controller (Soti Xsight) RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pocket_controller__soti_xsight__processes_sigma.yml", - "Description": "Detects potential processes activity of Pocket Controller (Soti Xsight) RMM tool" - } - ], - "References": ["https://pulse.soti.net/support/soti-xsight/help/"], - "Acknowledgement": [] - }, - { - "Name": "Instant Housecall", - "Description": "Instant Housecall is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "hsloader.exe", - "ihcserver.exe", - "instanthousecall.exe", - "instanthousecall.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "*.instanthousecall.com", - "*.instanthousecall.net", - "instanthousecall.com", - "secure.instanthousecall.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/instant_housecall_network_sigma.yml", - "Description": "Detects potential network activity of Instant Housecall RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/instant_housecall_processes_sigma.yml", - "Description": "Detects potential processes activity of Instant Housecall RMM tool" - } - ], - "References": ["https://instanthousecall.com/features/"], - "Acknowledgement": [] - }, - { - "Name": "CentraStage (Now Datto)", - "Description": "CentraStage (Now Datto) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["CagService.exe", "AEMAgent.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "*.rmm.datto.com", - "*cc.centrastage.net", - "datto.com/au/products/rmm/" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/centrastage__now_datto__network_sigma.yml", - "Description": "Detects potential network activity of CentraStage (Now Datto) RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/centrastage__now_datto__processes_sigma.yml", - "Description": "Detects potential processes activity of CentraStage (Now Datto) RMM tool" - } - ], - "References": [ - "https://rmm.datto.com/help/de/Content/1INTRODUCTION/Requirements/AllowListRequirements.htm" - ], - "Acknowledgement": [] - }, - { - "Name": "Core FTP", - "Description": "Core FTP is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["C:\\*\\coreftplite.exe", "*\\coreftplite.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/core_ftp_processes_sigma.yml", - "Description": "Detects potential processes activity of Core FTP RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Insync", - "Description": "Insync is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Users\\USERNAME\\AppData\\Roaming\\Insync\\App\\Insync.exe", - "*Users\\*\\AppData\\Roaming\\Insync\\App\\Insync.exe", - "*\\Insync.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/insync_processes_sigma.yml", - "Description": "Detects potential processes activity of Insync RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Microsoft TSC", - "Description": "Microsoft TSC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["termsrv.exe", "mstsc.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/microsoft_tsc_processes_sigma.yml", - "Description": "Detects potential processes activity of Microsoft TSC RMM tool" - } - ], - "References": [ - "https://learn.microsoft.com/en-us/troubleshoot/windows-server/remote/terminal-server-startup-connection-application" - ], - "Acknowledgement": [] - }, - { - "Name": "LogMeIn rescue", - "Description": "LogMeIn rescue is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "support-logmeinrescue*.exe", - "support-logmeinrescue.exe", - "lmi_rescue.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "*.logmeinrescue.com", - "*.logmeinrescue.eu", - "logmeinrescue.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/logmein_rescue_network_sigma.yml", - "Description": "Detects potential network activity of LogMeIn rescue RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/logmein_rescue_processes_sigma.yml", - "Description": "Detects potential processes activity of LogMeIn rescue RMM tool" - } - ], - "References": [ - "https://support.logmeinrescue.com/rescue/help/allowlisting-and-rescue" - ], - "Acknowledgement": [] - }, - { - "Name": "Electric AI (Kaseya)", - "Description": "Electric AI (Kaseya) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [ - "https://www.electric.ai/product/device-management-solutions - Usess Kaseya/jamf" - ], - "Acknowledgement": [] - }, - { - "Name": "Adobe Connect", - "Description": "Adobe Connect is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/27/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "ConnectAppSetup*.exe", - "ConnectShellSetup*.exe", - "Connect.exe", - "ConnectDetector.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.adobeconnect.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/adobe_connect_network_sigma.yml", - "Description": "Detects potential network activity of Adobe Connect RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/adobe_connect_processes_sigma.yml", - "Description": "Detects potential processes activity of Adobe Connect RMM tool" - } - ], - "References": [ - "https://helpx.adobe.com/adobe-connect/firewall-proxy-server-configuration-adobe-connect.html" - ], - "Acknowledgement": [] - }, - { - "Name": "CloudFlare Tunnel", - "Description": "CloudFlare Tunnel is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["cloudflared.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["cloudflare.com/products/tunnel/"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/cloudflare_tunnel_network_sigma.yml", - "Description": "Detects potential network activity of CloudFlare Tunnel RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/cloudflare_tunnel_processes_sigma.yml", - "Description": "Detects potential processes activity of CloudFlare Tunnel RMM tool" - } - ], - "References": ["cloudflare.com/products/tunnel/"], - "Acknowledgement": [] - }, - { - "Name": "DriveMaker", - "Description": "DriveMaker is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["C:\\*\\DriveMaker.exe", "*\\DriveMaker.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/drivemaker_processes_sigma.yml", - "Description": "Detects potential processes activity of DriveMaker RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "mstsc", - "Description": "mstsc is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Windows\\System32\\mstsc.exe", - "*Windows\\System32\\mstsc.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/mstsc_processes_sigma.yml", - "Description": "Detects potential processes activity of mstsc RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Parallels Access", - "Description": "Parallels Access is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "parallelsaccess-*.exe", - "TSClient.exe", - "prl_deskctl_agent.exe", - "prl_deskctl_wizard.exe", - "prl_pm_service.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.parallels.com", "parallels.com/products/ras/try"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/parallels_access_network_sigma.yml", - "Description": "Detects potential network activity of Parallels Access RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/parallels_access_processes_sigma.yml", - "Description": "Detects potential processes activity of Parallels Access RMM tool" - } - ], - "References": ["https://kb.parallels.com/en/129097"], - "Acknowledgement": [] - }, - { - "Name": "ConnectWise Control", - "Description": "ConnectWise Control is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "connectwisechat-customer.exe", - "connectwisecontrol.client.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["control.connectwise.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/connectwise_control_network_sigma.yml", - "Description": "Detects potential network activity of ConnectWise Control RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/connectwise_control_processes_sigma.yml", - "Description": "Detects potential processes activity of ConnectWise Control RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Devolutions Remote Desktop Manager", - "Description": "Devolutions Remote Desktop Manager is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "TigerVNC", - "Description": "TigerVNC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/26/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "tigervnc*.exe", - "winvnc4.exe", - "C:\\Program Files\\TightVNC\\*", - "*\\TightVNC\\*", - "*\\tvnserver.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/tigervnc_network_sigma.yml", - "Description": "Detects potential network activity of TigerVNC RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/tigervnc_processes_sigma.yml", - "Description": "Detects potential processes activity of TigerVNC RMM tool" - } - ], - "References": ["https://github.com/TigerVNC/tigervnc/releases"], - "Acknowledgement": [] - }, - { - "Name": "Rocket Remote Desktop", - "Description": "Rocket Remote Desktop is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["RDConsole.exe", "RocketRemoteDesktop_Setup.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rocket_remote_desktop_processes_sigma.yml", - "Description": "Detects potential processes activity of Rocket Remote Desktop RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "NoteOn-desktop sharing", - "Description": "NoteOn-desktop sharing is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["nateon*.exe", "nateon.exe", "nateonmain.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/noteon-desktop_sharing_processes_sigma.yml", - "Description": "Detects potential processes activity of NoteOn-desktop sharing RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Bomgar", - "Description": "Bomgar is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["bomgar-scc.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["beyondtrust.com/brand/bomgar"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/bomgar_network_sigma.yml", - "Description": "Detects potential network activity of Bomgar RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/bomgar_processes_sigma.yml", - "Description": "Detects potential processes activity of Bomgar RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "pCloud", - "Description": "pCloud is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files (x86)\\pCloud Drive\\", - "*\\pCloud Drive\\", - "*\\pCloud.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pcloud_processes_sigma.yml", - "Description": "Detects potential processes activity of pCloud RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "HelpU", - "Description": "HelpU is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "helpu_install.exe", - "HelpuUpdater.exe", - "HelpuManager.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["helpu.co.kr", "*.helpu.co.kr"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/helpu_network_sigma.yml", - "Description": "Detects potential network activity of HelpU RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/helpu_processes_sigma.yml", - "Description": "Detects potential processes activity of HelpU RMM tool" - } - ], - "References": ["https://helpu.co.kr/"], - "Acknowledgement": [] - }, - { - "Name": "Splashtop Remote", - "Description": "Splashtop Remote is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "strwinclt.exe", - "Splashtop_Streamer_Windows*.exe", - "SplashtopSOS.exe", - "sragent.exe", - "srmanager.exe", - "srserver.exe", - "srservice.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "splashtop.com", - "*.api.splashtop.com", - "*.relay.splashtop.com", - "*.api.splashtop.eu" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/splashtop_remote_network_sigma.yml", - "Description": "Detects potential network activity of Splashtop Remote RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/splashtop_remote_processes_sigma.yml", - "Description": "Detects potential processes activity of Splashtop Remote RMM tool" - } - ], - "References": [ - "https://support-splashtopbusiness.splashtop.com/hc/en-us/articles/115001811966-What-are-the-Firewall-Exceptions-and-IP-addresses-of-Splashtop-servers-Services" - ], - "Acknowledgement": [] - }, - { - "Name": "X2Go", - "Description": "X2Go is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Pocket Controller", - "Description": "Pocket Controller is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "pocketcontroller.exe", - "pocketcloudservice.exe", - "wysebrowser.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["soti.net/products/soti-pocket-controller"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pocket_controller_network_sigma.yml", - "Description": "Detects potential network activity of Pocket Controller RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pocket_controller_processes_sigma.yml", - "Description": "Detects potential processes activity of Pocket Controller RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Xshell", - "Description": "Xshell is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files (x86)\\NetSarang\\xShell\\*", - "*\\NetSarang\\xShell\\*", - "*\\xShell.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/xshell_processes_sigma.yml", - "Description": "Detects potential processes activity of Xshell RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Bitvise SSH Client", - "Description": "Bitvise SSH Client is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files (x86)\\Bitvise SSH Client\\*", - "*\\Bitvise SSH Client\\*", - "*\\BvSshClient-Inst.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/bitvise_ssh_client_processes_sigma.yml", - "Description": "Detects potential processes activity of Bitvise SSH Client RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Royal Server", - "Description": "Royal Server is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["royalapps.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/royal_server_network_sigma.yml", - "Description": "Detects potential network activity of Royal Server RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Remote Manipulator System", - "Description": "Remote Manipulator System is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["rfusclient.exe", "rutserv.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.internetid.ru", "rmansys.ru"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remote_manipulator_system_network_sigma.yml", - "Description": "Detects potential network activity of Remote Manipulator System RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remote_manipulator_system_processes_sigma.yml", - "Description": "Detects potential processes activity of Remote Manipulator System RMM tool" - } - ], - "References": ["https://rmansys.ru/files/"], - "Acknowledgement": [] - }, - { - "Name": "Manage Engine (Desktop Central)", - "Description": "Manage Engine (Desktop Central) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["dcagentservice.exe", "dcagentregister.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "desktopcentral.manageengine.com", - "desktopcentral.manageengine.com.eu", - "desktopcentral.manageengine.cn", - "*.dms.zoho.com", - "*.dms.zoho.com.eu", - "*.-dms.zoho.com.cn" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/manage_engine__desktop_central__network_sigma.yml", - "Description": "Detects potential network activity of Manage Engine (Desktop Central) RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/manage_engine__desktop_central__processes_sigma.yml", - "Description": "Detects potential processes activity of Manage Engine (Desktop Central) RMM tool" - } - ], - "References": [ - "https://www.manageengine.com/products/desktop-central/help/domains-required-for-agent-communication.html" - ], - "Acknowledgement": [] - }, - { - "Name": "Auvik", - "Description": "Auvik is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["auvik.engine.exe", "auvik.agent.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.my.auvik.com", "*.auvik.com", "auvik.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/auvik_network_sigma.yml", - "Description": "Detects potential network activity of Auvik RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/auvik_processes_sigma.yml", - "Description": "Detects potential processes activity of Auvik RMM tool" - } - ], - "References": [ - "https://support.auvik.com/hc/en-us/articles/204315700-What-protocols-and-ports-does-the-Auvik-collector-use" - ], - "Acknowledgement": [] - }, - { - "Name": "Basecamp", - "Description": "Basecamp is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["basecamp.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/basecamp_network_sigma.yml", - "Description": "Detects potential network activity of Basecamp RMM tool" - } - ], - "References": ["basecamp.com - No specific RMM tool listed"], - "Acknowledgement": [] - }, - { - "Name": "Free Tools Launcher", - "Description": "Free Tools Launcher is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files\\ManageEngine\\ManageEngine Free Tools\\Launcher\\*", - "*\\ManageEngine\\*" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "aws-cli", - "Description": "aws-cli is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files\\Amazon\\AWSCLI\\*", - "*\\Amazon\\AWSCLI\\*", - "*\\AWSCLIV*.msi", - "*\\AWSCLISetup.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/aws-cli_processes_sigma.yml", - "Description": "Detects potential processes activity of aws-cli RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "AnyDesk", - "Category": "RMM", - "Description": "AnyDesk is a popular remote desktop software that enables users to access and control a computer or device from a remote location. It was developed with the primary goal of facilitating remote work, technical support, and collaboration between individuals and teams.\n", - "Author": "Ali Alwashali, Nasreddine Bencherchali", - "Created": "2023-09-29", - "LastModified": "2024-08-02", - "Details": { - "Website": "https://anydesk.com/en", - "PEMetadata": [ - { - "Filename": "anydesk.exe", - "OriginalFileName": "AnyDesk.exe", - "Description": "AnyDesk", - "Product": "AnyDesk" - } - ], - "Privileges": "User", - "Free": true, - "Verification": false, - "SupportedOS": ["Android", "ChromeOS", "IOS", "Linux", "Mac", "Windows"], - "Capabilities": [ - "File Transfer", - "File System Access", - "Remote Control", - "GUI Support", - "Command line Support" - ], - "Vulnerabilities": [ - "https://www.cvedetails.com/vulnerability-list/vendor_id-16953/product_id-40173/Anydesk-Anydesk.html" - ], - "InstallationPaths": [ - "C:\\Program Files (x86)\\AnyDesk\\*", - "C:\\Program Files\\AnyDesk\\*" - ] - }, - "Artifacts": { - "Disk": [ - { - "File": "%programdata%\\AnyDesk\\ad_svc.trace", - "Description": "AnyDesk service log file. As well as ad.trace, we can determine the IP address of the other participant and its AnyDesk ID when a connection is established.", - "OS": "Windows", - "Example": [ - "info 2022-08-23 10:20:11.969 gsvc 4628 3528 3 anynet.relay_conn - External address: 34.xx.xx.123:46798" - ] - }, - { - "File": "%programdata%\\AnyDesk\\connection_trace.txt", - "Description": "Incoming connection logs, contains IP Address of the remote machine and file transfer activity. Only generated on target side. The content indicates how the connection was approved (e.g. the local user authorized it, or a password was used)", - "OS": "Windows", - "Example": [ - "Incoming 2022-08-23, 10:23 Passwd 547911884 547911884", - "Incoming 2022-09-28, 12:39 User 442226597 442226597" - ] - }, - { - "File": "%APPDATA%\\AnyDesk\\connection_trace.txt", - "Description": "Incoming connection logs, contains IP Address of the remote machine and file transfer activity. Only generated on target side. The content indicates how the connection was approved (e.g. the local user authorized it, or a password was used)", - "OS": "Windows", - "Example": [ - "Incoming 2022-08-23, 10:23 Passwd 547911884 547911884", - "Incoming 2022-09-28, 12:39 User 442226597 442226597" - ] - }, - { - "File": "%APPDATA%\\AnyDesk\\ad.trace", - "Description": "AnyDesk user interface log file. In this log file, we can determine the IP address of the other participant and its AnyDesk ID. It is also possible to track events of file transfer. Below is the Client ID and external IP address of the remote participant.", - "OS": "Windows", - "Example": [ - "info 2022-09-28 12:39:26.845 lsvc 9952 9944 21 anynet.any_socket - Client-ID: 442226597 (FPR: 8e28a2a25b30).", - "info 2022-09-28 12:39:26.845 lsvc 9952 9944 21 anynet.any_socket - Logged in from 12.xx.xx.21:59562 on relay 80e496c0." - ] - }, - { - "File": "%APPDATA%\\AnyDesk\\chat\\*.txt", - "Description": "If the chat functionality is used, its entries will be printed in a text file in this folder.", - "OS": "Windows" - }, - { - "File": "%APPDATA%\\AnyDesk\\user.conf", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "%PROGRAMDATA%\\AnyDesk\\service.conf", - "Description": "Password can be set to auto-validate the session. The password will be saved in a salted hash format.", - "OS": "Windows" - }, - { - "File": "%APPDATA%\\AnyDesk\\service.conf", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "%APPDATA%\\AnyDesk\\system.conf", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "%PROGRAMDATA%\\AnyDesk\\system.conf", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "%PROGRAMDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\StartUp\\AnyDesk.lnk", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "%PROGRAMDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\AnyDesk\\Uninstall AnyDesk.lnk", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "C:\\Users\\*\\Videos\\AnyDesk\\*.anydesk", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "C:\\Windows\\SysWOW64\\config\\systemprofile\\AppData\\Roaming\\AnyDesk\\*", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "~/Library/Application Support/AnyDesk/Logs/", - "Description": "N/A", - "OS": "Mac" - }, - { - "File": "~/.config/AnyDesk/Logs/", - "Description": "N/A", - "OS": "Linux" - } - ], - "EventLog": [ - { - "EventID": 7045, - "ProviderName": "Service Control Manager", - "LogFile": "System.evtx", - "ServiceName": "AnyDesk Service", - "ImagePath": "\"C:\\\\Program Files (x86)\\\\AnyDesk\\\\AnyDesk.exe\" --service", - "Description": "Service installation event as result of AnyDesk installation." - } - ], - "Registry": [ - { - "Path": "HKLM\\SOFTWARE\\Clients\\Media\\AnyDesk", - "Description": "N/A" - }, - { - "Path": "HKLM\\SYSTEM\\CurrentControlSet\\Services\\AnyDesk", - "Description": "N/A" - }, - { - "Path": "HKLM\\SOFTWARE\\Classes\\.anydesk\\shell\\open\\command", - "Description": "N/A" - }, - { - "Path": "HKLM\\SOFTWARE\\Classes\\AnyDesk\\shell\\open\\command", - "Description": "N/A" - }, - { - "Path": "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Print\\Printers\\AnyDesk Printer\\*", - "Description": "N/A" - }, - { - "Path": "HKLM\\DRIVERS\\DriverDatabase\\DeviceIds\\USBPRINT\\AnyDesk", - "Description": "N/A" - }, - { - "Path": "HKLM\\DRIVERS\\DriverDatabase\\DeviceIds\\WSDPRINT\\AnyDesk", - "Description": "N/A" - }, - { - "Path": "HKLM\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\AnyDesk", - "Description": "N/A" - } - ], - "Network": [ - { - "Description": "During setup the boot.net.anydesk.com domain is request over port 443", - "Domains": ["boot.net.anydesk.com"], - "Ports": [443] - }, - { - "Description": "N/A", - "Domains": ["relay-[a-f0-9]{8}.net.anydesk.com:443"], - "Ports": [443] - }, - { - "Description": "N/A", - "Domains": ["*.anydesk.com"], - "Ports": [443] - } - ], - "Other": [ - { - "Type": "User-Agent", - "Value": "AnyDesk/*" - }, - { - "Type": "NamedPipe", - "Value": "adprinterpipe" - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/SigmaHQ/sigma/blob/43277f26fc1c81fc98fc79147b711189e901b757/rules/windows/builtin/system/service_control_manager/win_system_service_install_anydesk.yml", - "Description": "Anydesk Remote Access Software Service Installation" - }, - { - "Sigma": "https://github.com/SigmaHQ/sigma/blob/43277f26fc1c81fc98fc79147b711189e901b757/rules/windows/file/file_event/file_event_win_anydesk_artefact.yml", - "Description": "N/A" - }, - { - "Sigma": "https://github.com/SigmaHQ/sigma/blob/43277f26fc1c81fc98fc79147b711189e901b757/rules/windows/process_creation/proc_creation_win_remote_access_tools_anydesk.yml", - "Description": "N/A" - }, - { - "Sigma": "https://github.com/SigmaHQ/sigma/blob/782f0f524e6f797ea114fe0d87b22cb4abaa6b7c/rules/windows/process_creation/proc_creation_win_remote_access_tools_anydesk_silent_install.yml", - "Description": "Remote Access Tool - AnyDesk Silent Installation" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/anydesk_registry_sigma.yml", - "Description": "Detects potential registry activity of AnyDesk RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/anydesk_network_sigma.yml", - "Description": "Detects potential network activity of AnyDesk RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/anydesk_files_sigma.yml", - "Description": "Detects potential files activity of AnyDesk RMM tool" - } - ], - "References": [ - "https://support.anydesk.com/knowledge/firewall", - "https://www.synacktiv.com/publications/legitimate-rats-a-comprehensive-forensic-analysis-of-the-usual-suspects.html", - "https://github.com/mthcht/awesome-lists/tree/79ced75eebe53bcabf1235b3c17eb11788875482/Lists/RMM/anydesk", - "https://ruler-project.github.io/ruler-project/RULER/remote/AnyDesk/" - ], - "Acknowledgement": [ - { - "Person": "Théo Letailleur", - "Handle": "in/theosyn" - }, - { - "Person": "Ali Alwashali", - "Handle": "@ali_alwashali" - }, - { - "Person": "Nasreddine Bencherchali", - "Handle": "@nas_bench" - } - ] - }, - { - "Name": "AnyViewer", - "Description": "AnyViewer is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.\n", - "Author": "@kostastsale", - "Created": "2024-08-03", - "LastModified": "2024-08-03", - "Details": { - "Website": "https://www.anyviewer.com/", - "PEMetadata": [ - { - "Filename": "AnyViewer.exe", - "OriginalFileName": "AnyViewer", - "Description": "Splash Window" - }, - { - "Filename": "RCClient.exe", - "OriginalFileName": "RCClient.exe", - "Description": "AnyViewer Core" - }, - { - "Filename": "ScreanCap.exe", - "Description": "Screan capture" - }, - { - "Filename": "AVCore.exe" - }, - { - "Filename": "RCService.exe" - } - ], - "Privileges": "System", - "Free": "up to 10 devices", - "Verification": "None", - "SupportedOS": ["Windows"], - "Capabilities": [ - "Remote desktop", - "Remote file transfer", - "Remote monitoring and management", - "Remote shell open" - ], - "Vulnerabilities": [], - "InstallationPaths": ["C:\\Program Files (x86)\\AnyViewer\\*"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [ - { - "EventID": 4688, - "ProviderName": "Microsoft-Security-Auditing", - "LogFile": "Security.evtx", - "CommandLine": "\"C:\\\\Program Files (x86)\\\\AnyViewer\\\\AVCore.exe\" -d", - "Description": "Taking actions on the remote machine such as opening a command prompt." - }, - { - "EventID": 7045, - "ProviderName": "Service Control Manager", - "LogFile": "System.evtx", - "ServiceName": "RCService", - "ImagePath": "C:\\\\Program Files (x86)\\\\AnyViewer\\\\RCService.exe", - "Description": "AnyViewer service installation service." - } - ], - "Registry": [], - "Network": [ - { - "Description": "N/A", - "Domains": ["*.anyviewer.com"], - "Ports": [443] - }, - { - "Description": "N/A", - "Domains": ["*.aomeisoftware.com"], - "Ports": [443] - } - ] - }, - "Detections": [ - { - "Name": "Arbitrary code execution and remote sessions via Action1 RMM", - "Description": "Threat hunting rule for detecting the execution of arbitrary code and remote sessions via Action1 RMM", - "author": "@kostastsale", - "Link": "https://github.com/tsale/Sigma_rules/blob/main/Threat%20Hunting%20Queries/Anyviewer.yml" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/anyviewer_network_sigma.yml", - "Description": "Detects potential network activity of AnyViewer RMM tool" - } - ], - "References": [ - "https://www.anyviewer.com/how-to/how-to-open-firewall-ports-for-remote-desktop-0427-gc.html", - "https://www.anyviewer.com/help/remote-technical-support.html" - ], - "Acknowledgement": [ - { - "Person": "Kostas", - "Handle": "@kostastsale" - } - ] - }, - { - "Name": "DW Service", - "Description": "DW Service is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["dwagent.exe", "dwagsvc.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.dwservice.net"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/dw_service_network_sigma.yml", - "Description": "Detects potential network activity of DW Service RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/dw_service_processes_sigma.yml", - "Description": "Detects potential processes activity of DW Service RMM tool" - } - ], - "References": [ - "https://news.dwservice.net/dwservice-security-infrastructure/" - ], - "Acknowledgement": [] - }, - { - "Name": "Level", - "Description": "Level is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["level.io"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/level_network_sigma.yml", - "Description": "Detects potential network activity of Level RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Site24x7", - "Description": "Site24x7 is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/13/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "MEAgentHelper.exe", - "MonitoringAgent.exe", - "Site24x7WindowsAgentTrayIcon.exe", - "Site24x7PluginAgent.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "plus*.site24x7.com", - "plus*.site24x7.eu", - "plus*.site24x7.in", - "plus*.site24x7.cn", - "plus*.site24x7.net.au", - "site24x7.com/msp" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/site24x7_network_sigma.yml", - "Description": "Detects potential network activity of Site24x7 RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/site24x7_processes_sigma.yml", - "Description": "Detects potential processes activity of Site24x7 RMM tool" - } - ], - "References": [ - "https://support.site24x7.com/portal/en/kb/articles/which-ports-do-i-need-to-allow-access-in-my-firewall-to-use-site24x7-agent" - ], - "Acknowledgement": [] - }, - { - "Name": "Cloudsfer", - "Description": "Cloudsfer is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "ScreenConnect", - "Description": "ScreenConnect is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "Ali Alwashali, Nasreddine Bencherchali", - "Created": "2023-10-01", - "LastModified": "2024-08-03", - "Details": { - "Website": "https://www.connectwise.com", - "PEMetadata": [ - { - "Filename": "", - "OriginalFileName": "", - "Description": "" - } - ], - "Privileges": "", - "Free": "14-Days Free Trial", - "Verification": "", - "SupportedOS": ["Android", "IOS", "Linux", "Mac", "Windows"], - "Capabilities": [ - "Command Line Support", - "File Transfer", - "Install Windows updates", - "Receive notification when user performs a predefined event", - "Remote Command Line", - "Remote Control", - "Sound Capture", - "Start / Stop services", - "View event logs" - ], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files (x86)\\ScreenConnect Client (Random)\\ScreenConnect.ClientService.exe", - "Remote Workforce Client.exe", - "*\\*\\ScreenConnect.ClientService.exe", - "C:\\Program Files (x86)\\ScreenConnect Client ()\\*", - "*\\ScreenConnect Client*\\*", - "*\\*\\ScreenConnect.WindowsClient.exe", - "screenconnect*.exe", - "screenconnect.windowsclient.exe", - "Remote Workforce Client.exe", - "screenconnect*.exe", - "ConnectWiseControl*.exe", - "connectwise*.exe", - "screenconnect.windowsclient.exe", - "screenconnect.clientservice.exe" - ] - }, - "Artifacts": { - "Disk": [ - { - "File": "C:\\Program Files*\\ScreenConnect\\App_Data\\Session.db", - "Description": "ScreenConnect session database", - "OS": "Windows" - }, - { - "File": "C:\\Program Files*\\ScreenConnect\\App_Data\\User.xml", - "Description": "ScreenConnect user configuration", - "OS": "Windows" - }, - { - "File": "C:\\ProgramData\\ScreenConnect Client*\\user.config", - "Description": "ScreenConnect client user configuration", - "OS": "Windows" - } - ], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "control.connectwise.com", - "*.connectwise.com", - "*.screenconnect.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/screenconnect_network_sigma.yml", - "Description": "Detects potential network activity of ScreenConnect RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/screenconnect_files_sigma.yml", - "Description": "Detects potential files activity of ScreenConnect RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/screenconnect_processes_sigma.yml", - "Description": "Detects potential processes activity of ScreenConnect RMM tool" - } - ], - "References": [ - "https://thedfirreport.com/2023/09/25/from-screenconnect-to-hive-ransomware-in-61-hours/" - ], - "Acknowledgement": [] - }, - { - "Name": "SmartFTP", - "Description": "SmartFTP is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files (x86)\\SmartFTP Client\\en-US\\", - "*\\SmartFTP Client\\*", - "*\\SfShellTools.dll.mui" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "SpyAnywhere", - "Description": "SpyAnywhere is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["sysdiag.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.spytech-web.com", "spyanywhere.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/spyanywhere_network_sigma.yml", - "Description": "Detects potential network activity of SpyAnywhere RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/spyanywhere_processes_sigma.yml", - "Description": "Detects potential processes activity of SpyAnywhere RMM tool" - } - ], - "References": ["https://www.spyanywhere.com/support.shtml"], - "Acknowledgement": [] - }, - { - "Name": "NinjaRMM", - "Description": "NinjaRMM is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "ninjarmmagent.exe", - "NinjaRMMAgent.exe", - "NinjaRMMAgenPatcher.exe", - "ninjarmm-cli.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "*.ninjarmm.com", - "*.ninjaone.com", - "resources.ninjarmm.com", - "ninjaone.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ninjarmm_network_sigma.yml", - "Description": "Detects potential network activity of NinjaRMM RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ninjarmm_processes_sigma.yml", - "Description": "Detects potential processes activity of NinjaRMM RMM tool" - } - ], - "References": ["https://www.ninjaone.com/faq/"], - "Acknowledgement": [] - }, - { - "Name": "CloudXplorer", - "Description": "CloudXplorer is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files\\ClumsyLeaf Software\\CloudXplorer\\*", - "*\\ClumsyLeaf Software\\CloudXplorer\\*", - "*\\clumsyleaf.cloudxplorer*.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/cloudxplorer_processes_sigma.yml", - "Description": "Detects potential processes activity of CloudXplorer RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "CruzControl", - "Description": "CruzControl is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": ["https://resources.doradosoftware.com/cruz-rmm"], - "Acknowledgement": [] - }, - { - "Name": "SimpleHelp", - "Description": "SimpleHelp is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "simplehelpcustomer.exe", - "simpleservice.exe", - "simplegatewayservice.exe", - "remote access.exe", - "windowslauncher.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed", "simple-help.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/simplehelp_network_sigma.yml", - "Description": "Detects potential network activity of SimpleHelp RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/simplehelp_processes_sigma.yml", - "Description": "Detects potential processes activity of SimpleHelp RMM tool" - } - ], - "References": ["https://simple-help.com/remote-support"], - "Acknowledgement": [] - }, - { - "Name": "EMCO Remote Console", - "Description": "EMCO Remote Console is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["remoteconsole.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed", "emcosoftware.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/emco_remote_console_network_sigma.yml", - "Description": "Detects potential network activity of EMCO Remote Console RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/emco_remote_console_processes_sigma.yml", - "Description": "Detects potential processes activity of EMCO Remote Console RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "ngrok", - "Description": "ngrok is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["ngrok.exe", "C:\\*\\ngrok.zip", "*\\ngrok*"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed", "ngrok.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ngrok_network_sigma.yml", - "Description": "Detects potential network activity of ngrok RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ngrok_processes_sigma.yml", - "Description": "Detects potential processes activity of ngrok RMM tool" - } - ], - "References": ["https://ngrok.com/docs/guides/running-behind-firewalls/"], - "Acknowledgement": [] - }, - { - "Name": "Apple Remote Desktop", - "Description": "Apple Remote Desktop is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/24/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["ARDAgent.app"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/apple_remote_desktop_network_sigma.yml", - "Description": "Detects potential network activity of Apple Remote Desktop RMM tool" - } - ], - "References": [ - "https://support.apple.com/guide/remote-desktop/install-and-set-up-remote-desktop-apdf49e03a4/mac" - ], - "Acknowledgement": [] - }, - { - "Name": "Netviewer (GoToMeet)", - "Description": "Netviewer (GoToMeet) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["nvClient.exe", "netviewer.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/netviewer__gotomeet__processes_sigma.yml", - "Description": "Detects potential processes activity of Netviewer (GoToMeet) RMM tool" - } - ], - "References": [ - "Obsolute - found copy here: https://www.enviolet.com/en/service/online-consultant.html" - ], - "Acknowledgement": [] - }, - { - "Name": "NoMachine", - "Description": "NoMachine is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["nomachine*.exe", "nxservice*.ese", "nxd.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed", "nomachine.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/nomachine_network_sigma.yml", - "Description": "Detects potential network activity of NoMachine RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/nomachine_processes_sigma.yml", - "Description": "Detects potential processes activity of NoMachine RMM tool" - } - ], - "References": ["https://kb.nomachine.com/AR04S01122"], - "Acknowledgement": [] - }, - { - "Name": "MioNet (WD Anywhere Access)", - "Description": "MioNet (WD Anywhere Access) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["mionet.exe", "mionetmanager.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/mionet__wd_anywhere_access__processes_sigma.yml", - "Description": "Detects potential processes activity of MioNet (WD Anywhere Access) RMM tool" - } - ], - "References": [ - "https://en.wikipedia.org/wiki/WD_Anywhere_Access - DOA as of 2016" - ], - "Acknowledgement": [] - }, - { - "Name": "Splashtop", - "Description": "Splashtop is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "Nasreddine Bencherchali", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files (x86)\\Splashtop\\*", - "*\\Splashtop\\Splashtop Remote\\Client for RMM\\*", - "strwinclt.exe" - ] - }, - "Artifacts": { - "Disk": [ - { - "File": "C:\\windows\\System32\\winevt\\Logs\\Splashtop-Splashtop Streamer-Status%4Operational.evtx", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "C:\\windows\\System32\\winevt\\Logs\\Splashtop-Splashtop Streamer-Remote Session%4Operational.evtx", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "%PROGRAMDATA%\\Splashtop\\Temp\\log\\FTCLog.txt", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "C:\\Program Files (x86)\\Splashtop\\Splashtop Remote\\Server\\log\\agent_log.txt", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "C:\\Program Files (x86)\\Splashtop\\Splashtop Remote\\Server\\log\\SPLog.txt", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "C:\\Program Files (x86)\\Splashtop\\Splashtop Remote\\Server\\log\\svcinfo.txt", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "C:\\Program Files (x86)\\Splashtop\\Splashtop Remote\\Server\\log\\sysinfo.txt", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "C:\\Program Files (x86)\\Splashtop\\Splashtop Remote\\Server\\SRService.exe", - "Description": "Splashtop Remote Service", - "OS": "Windows" - }, - { - "File": "C:\\Program Files (x86)\\Splashtop\\Splashtop Remote\\Server\\SRAgent.exe", - "Description": "SplashTop Remote Agent", - "OS": "Windows" - }, - { - "File": "C:\\Program Files (x86)\\Splashtop\\Splashtop Software Updater\\SSUAgent.exe", - "Description": "Splashtop Updater", - "OS": "Windows" - }, - { - "File": "C:\\Program Files (x86)\\Splashtop\\Splashtop Remote\\Server\\SRUtility.exe", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "C:\\Program Files (x86)\\Splashtop\\Splashtop Remote\\Server\\SRFeature.exe", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "C:\\Program Files (x86)\\Splashtop\\Splashtop Remote\\Server\\db\\SRAgent.sqlite3", - "Description": "N/A", - "OS": "Windows" - } - ], - "EventLog": [ - { - "EventID": 7045, - "ProviderName": "Service Control Manager", - "LogFile": "System.evtx", - "ServiceName": "Splashtop Software Updater Service", - "ImagePath": "\"C:\\\\Program Files (x86)\\\\Splashtop\\\\Splashtop Software Updater\\\\SSUService.exe\"", - "Description": "Service installation event as result of Splashtop Software Updater Service installation." - }, - { - "EventID": 7045, - "ProviderName": "Service Control Manager", - "LogFile": "System.evtx", - "ServiceName": "Splashtop® Remote Service", - "ImagePath": "\"C:\\\\Program Files (x86)\\\\Splashtop\\\\Splashtop Remote\\\\Server\\\\SRService.exe\"", - "Description": "Service installation event as result of Splashtop Remote Service installation." - }, - { - "EventID": 7045, - "ProviderName": "Service Control Manager", - "LogFile": "System.evtx", - "ServiceName": "SplashtopRemoteService", - "ImagePath": "\"C:\\\\Program Files (x86)\\\\Splashtop\\\\Splashtop Remote\\\\Server\\\\SRService.exe\"", - "Description": "Service installation event as result of Splashtop Remote Service installation." - } - ], - "Registry": [ - { - "Path": "KLM\\SOFTWARE\\WOW6432Node\\Splashtop Inc.\\*", - "Description": "Splashtop Inc. registry key" - }, - { - "Path": "HKLM\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Splashtop Software Updater", - "Description": "Splashtop Software Updater uninstall key" - }, - { - "Path": "HKLM\\SYSTEM\\CurrentControlSet\\Services\\SplashtopRemoteService", - "Description": "Splashtop Remote Service registry key" - }, - { - "Path": "HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WINEVT\\Channels\\Splashtop-Splashtop Streamer-Remote Session/Operational", - "Description": "Splashtop Streamer Remote Session event log channel" - }, - { - "Path": "HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WINEVT\\Channels\\Splashtop-Splashtop Streamer-Status/Operational", - "Description": "Splashtop Streamer Status event log channel" - }, - { - "Path": "HKLM\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Splashtop Software Updater\\InstallRefCount", - "Description": "Splashtop Software Updater install reference count" - }, - { - "Path": "HKLM\\SYSTEM\\CurrentControlSet\\Control\\SafeBoot\\Network\\SplashtopRemoteService", - "Description": "Splashtop Remote Service safe boot configuration" - }, - { - "Path": "HKU\\.DEFAULT\\Software\\Splashtop Inc.\\*", - "Description": "Default user Splashtop Inc. registry key" - }, - { - "Path": "HKU\\SID\\Software\\Splashtop Inc.\\*", - "Description": "User-specific Splashtop Inc. registry key" - }, - { - "Path": "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Print\\Printers\\Splashtop PDF Remote Printer", - "Description": "Splashtop PDF Remote Printer configuration" - }, - { - "Path": "HKLM\\SOFTWARE\\WOW6432Node\\Splashtop Inc.\\Splashtop Remote Server\\ClientInfo\\*", - "Description": "Splashtop Remote Server client information" - } - ], - "Network": [ - { - "Description": "N/A", - "Domains": ["*.splashtop.com"], - "Ports": ["N/A"] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/splashtop_registry_sigma.yml", - "Description": "Detects potential registry activity of Splashtop RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/splashtop_network_sigma.yml", - "Description": "Detects potential network activity of Splashtop RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/splashtop_files_sigma.yml", - "Description": "Detects potential files activity of Splashtop RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/splashtop_processes_sigma.yml", - "Description": "Detects potential processes activity of Splashtop RMM tool" - } - ], - "References": [ - "https://www.synacktiv.com/publications/legitimate-rats-a-comprehensive-forensic-analysis-of-the-usual-suspects.html" - ], - "Acknowledgement": [ - { - "Person": "Théo Letailleur", - "Handle": "in/theosyn" - } - ] - }, - { - "Name": "RAdmin", - "Description": "RAdmin is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.\n", - "Author": "Nasreddine Bencherchali", - "Created": "2024-08-05", - "LastModified": "2024-08-05", - "Details": { - "Website": "https://www.radmin.com/", - "PEMetadata": [ - { - "Filename": "RServer3.exe", - "OriginalFileName": "RServer3.exe", - "InternalName": "RServer3", - "Description": "Radmin Server", - "Product": "Radmin Server", - "Comments": "Radmin - Remote Control Server" - }, - { - "Filename": "Radmin.exe", - "OriginalFileName": "Radmin.exe", - "InternalName": "Radmin", - "Description": "Radmin Viewer", - "Product": "Radmin Viewer", - "Comments": "Radmin Viewer" - } - ], - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": ["Windows"], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files (x86)\\Radmin Viewer 3\\Radmin.exe", - "C:\\Windows\\SysWOW64\\rserver30\\rserver3.exe", - "C:\\Windows\\SysWOW64\\rserver30\\FamItrfc", - "C:\\Windows\\SysWOW64\\rserver30\\FamItrf2" - ] - }, - "Artifacts": { - "Disk": [ - { - "File": "C:\\Windows\\SysWOW64\\rserver30\\Radm_log.htm", - "Description": "RAdmin log file (32-bit)", - "OS": "Windows" - }, - { - "File": "C:\\Windows\\System32\\rserver30\\Radm_log.htm", - "Description": "RAdmin log file (64-bit)", - "OS": "Windows" - }, - { - "File": "C:\\Windows\\System32\\rserver30\\CHATLOGS\\*\\*.htm", - "Description": "RAdmin chat logs", - "OS": "Windows" - }, - { - "File": "C:\\Users\\*\\Documents\\ChatLogs\\*\\*.htm", - "Description": "RAdmin user chat logs", - "OS": "Windows" - } - ], - "EventLog": [], - "Registry": [ - { - "Path": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Radmin\\v3.0\\Server\\Parameters\\Radmin Security", - "Description": "N/A" - } - ], - "Network": [ - { - "Description": "N/A", - "Domains": ["radmin.com"], - "Ports": [443] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/SigmaHQ/sigma/blob/782f0f524e6f797ea114fe0d87b22cb4abaa6b7c/rules/windows/process_creation/proc_creation_win_pua_radmin.yml", - "Description": "PUA - Radmin Viewer Utility Execution" - }, - { - "Sigma": "https://github.com/SigmaHQ/sigma/blob/782f0f524e6f797ea114fe0d87b22cb4abaa6b7c/rules/windows/process_creation/proc_creation_win_registry_enumeration_for_credentials_cli.yml", - "Description": "Enumeration for 3rd Party Creds From CLI" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/radmin_registry_sigma.yml", - "Description": "Detects potential registry activity of RAdmin RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/radmin_network_sigma.yml", - "Description": "Detects potential network activity of RAdmin RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/radmin_files_sigma.yml", - "Description": "Detects potential files activity of RAdmin RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/radmin_processes_sigma.yml", - "Description": "Detects potential processes activity of RAdmin RMM tool" - } - ], - "References": [ - "https://radmin-club.com/radmin/how-to-establish-a-connection-outside-of-lan/", - "https://helpdesk.radmin.com/radmin3help/", - "https://helpdesk.radmin.com/radmin3help/files/viewercmd.htm", - "https://helpdesk.radmin.com/radmin3help/files/cmd.htm" - ], - "Acknowledgement": [ - { - "Person": "Nasreddine Bencherchali", - "Handle": "@nas_bench" - } - ] - }, - { - "Name": "LANDesk", - "Description": "LANDesk is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "issuser.exe", - "landeskagentbootstrap.exe", - "LANDeskPortalManager.exe", - "ldinv32.exe", - "ldsensors.exe", - "C:\\Program Files (x86)\\LANDesk\\*", - "*\\LANDesk\\*", - "*\\issuser.exe", - "*\\softmon.exe", - "*\\tmcsvc.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.ivanticloud.com", "*.ivanti.com", "ivanti.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/landesk_network_sigma.yml", - "Description": "Detects potential network activity of LANDesk RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/landesk_processes_sigma.yml", - "Description": "Detects potential processes activity of LANDesk RMM tool" - } - ], - "References": [ - "https://forums.ivanti.com/s/article/URL-exception-list-for-Ivanti-Security-Controls?language=en_US" - ], - "Acknowledgement": [] - }, - { - "Name": "SuperOps", - "Description": "SuperOps is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["superopsticket.exe", "superops.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "*.superopsbeta.com", - "superops.ai", - "serv.superopsalpha.com", - "*.superops.ai", - "*.superopsalpha.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/superops_network_sigma.yml", - "Description": "Detects potential network activity of SuperOps RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/superops_processes_sigma.yml", - "Description": "Detects potential processes activity of SuperOps RMM tool" - } - ], - "References": [ - "https://support.superops.com/en/articles/6632028-how-to-download-and-deploy-the-agent" - ], - "Acknowledgement": [] - }, - { - "Name": "Lite Manager", - "Description": "Lite Manager is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files\\LiteManager Pro – Viewer\\*", - "*\\LiteManager Pro – Viewer\\*", - "*\\LMNoIpServer.exe." - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Raidrive", - "Description": "Raidrive is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\*\\OpenBoxLab\\RaiDrive\\*", - "*\\OpenBoxLab\\RaiDrive\\*", - "service = raidrive_*", - "Computer\\HKEY_LOCAL_MACHINE\\SOFTWARE\\OpenBoxLab\\RaiDrive\\Drives" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Datto", - "Description": "Datto is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["datto.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/datto_network_sigma.yml", - "Description": "Detects potential network activity of Datto RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Supremo", - "Description": "Supremo is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/13/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "supremo.exe", - "supremoservice.exe", - "supremosystem.exe", - "supremohelper.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "supremocontrol.com", - "*.supremocontrol.com", - "* .nanosystems.it" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/supremo_network_sigma.yml", - "Description": "Detects potential network activity of Supremo RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/supremo_processes_sigma.yml", - "Description": "Detects potential processes activity of Supremo RMM tool" - } - ], - "References": [ - "https://www.supremocontrol.com/frequently-asked-questions/" - ], - "Acknowledgement": [] - }, - { - "Name": "Chicken (of the VNC)", - "Description": "Chicken (of the VNC) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Quick Assist", - "Description": "Quick Assist is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["quickassist.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/quick_assist_processes_sigma.yml", - "Description": "Detects potential processes activity of Quick Assist RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "KHelpDesk", - "Description": "KHelpDesk is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/26/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["KHelpDesk.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.khelpdesk.com.br"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/khelpdesk_network_sigma.yml", - "Description": "Detects potential network activity of KHelpDesk RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/khelpdesk_processes_sigma.yml", - "Description": "Detects potential processes activity of KHelpDesk RMM tool" - } - ], - "References": ["https://www.khelpdesk.com.br/en-us"], - "Acknowledgement": [] - }, - { - "Name": "TurboMeeting", - "Description": "TurboMeeting is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/14/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "pcstarter.exe", - "turbomeeting.exe", - "turbomeetingstarter.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed", "acceo.com/turbomeeting/"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/turbomeeting_network_sigma.yml", - "Description": "Detects potential network activity of TurboMeeting RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/turbomeeting_processes_sigma.yml", - "Description": "Detects potential processes activity of TurboMeeting RMM tool" - } - ], - "References": [ - "http://sourcing.rhubcom.com/v5/faqs.html#collapsetwentysix2-topdiv" - ], - "Acknowledgement": [] - }, - { - "Name": "RPort", - "Description": "RPort is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["rport.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed", "rport.io"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rport_network_sigma.yml", - "Description": "Detects potential network activity of RPort RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rport_processes_sigma.yml", - "Description": "Detects potential processes activity of RPort RMM tool" - } - ], - "References": ["https://kb.rport.io/using-the-remote-access"], - "Acknowledgement": [] - }, - { - "Name": "CloudBerry Explorer", - "Description": "CloudBerry Explorer is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files\\CloudBerryLab\\CloudBerry Drive\\*", - "*\\CloudBerryLab\\CloudBerry Drive\\*" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "ExpanDrive", - "Description": "ExpanDrive is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["C:\\Users\\*\\ExpanDrive.exe", "*\\ExpanDrive.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/expandrive_processes_sigma.yml", - "Description": "Detects potential processes activity of ExpanDrive RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "MioNet (Also known as WD Anywhere Access)", - "Description": "MioNet (Also known as WD Anywhere Access) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["mionet.exe", "mionetmanager.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/mionet__also_known_as_wd_anywhere_access__processes_sigma.yml", - "Description": "Detects potential processes activity of MioNet (Also known as WD Anywhere Access) RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "OCS inventory", - "Description": "OCS inventory is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["ocsinventory.exe", "ocsservice.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed", "ocsinventory-ng.org"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ocs_inventory_network_sigma.yml", - "Description": "Detects potential network activity of OCS inventory RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ocs_inventory_processes_sigma.yml", - "Description": "Detects potential processes activity of OCS inventory RMM tool" - } - ], - "References": ["https://ocsinventory-ng.org/?page_id=878&lang=en"], - "Acknowledgement": [] - }, - { - "Name": "RemotePass", - "Description": "RemotePass is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "remotepass-access.exe", - "rpaccess.exe", - "rpwhostscr.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["remotepass.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remotepass_network_sigma.yml", - "Description": "Detects potential network activity of RemotePass RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remotepass_processes_sigma.yml", - "Description": "Detects potential processes activity of RemotePass RMM tool" - } - ], - "References": ["https://www.remotepass.com/rpaccess.html - DOA as of 2024"], - "Acknowledgement": [] - }, - { - "Name": "Air Explorer", - "Description": "Air Explorer is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files\\airexplorer\\*", - "*\\airexplorer\\*", - "*\\airexplorer.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/air_explorer_processes_sigma.yml", - "Description": "Detects potential processes activity of Air Explorer RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "GoToAssist (GoTo Resolve)", - "Description": "GoToAssist (GoTo Resolve) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\ProgramFiles*\\GoTo Machine Installer\\*", - "*\\GoTo Machine Installer\\*", - "*\\GoTo\\*" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Comodo RMM", - "Description": "Comodo RMM is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["itsmagent.exe", "rviewer.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "*.itsm-us1.comodo.com", - "*mdmsupport.comodo.com", - "one.comodo.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/comodo_rmm_network_sigma.yml", - "Description": "Detects potential network activity of Comodo RMM RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/comodo_rmm_processes_sigma.yml", - "Description": "Detects potential processes activity of Comodo RMM RMM tool" - } - ], - "References": [ - "https://help.itarian.com/topic-459-1-1005-14776-Appendix-1b---Endpoint-Manager-Services---IP-Nos,-Host-Names-and-Port-Details---US-Customers.html" - ], - "Acknowledgement": [] - }, - { - "Name": "ShowMyPC", - "Description": "ShowMyPC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "SMPCSetup.exe", - "showmypc*.exe", - "showmypc.exe", - "smpcsetup.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.showmypc.com", "showmypc.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/showmypc_network_sigma.yml", - "Description": "Detects potential network activity of ShowMyPC RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/showmypc_processes_sigma.yml", - "Description": "Detects potential processes activity of ShowMyPC RMM tool" - } - ], - "References": [ - "https://showmypc.com/service/faq/ShowMyPCSecurityOverview1.pdf" - ], - "Acknowledgement": [] - }, - { - "Name": "ToDesk", - "Description": "ToDesk is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/14/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "todesk.exe", - "ToDesk_Service.exe", - "ToDesk_Setup.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "todesk.com", - "*.todesk.com", - "*.todesk.com", - "todesktop.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/todesk_network_sigma.yml", - "Description": "Detects potential network activity of ToDesk RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/todesk_processes_sigma.yml", - "Description": "Detects potential processes activity of ToDesk RMM tool" - } - ], - "References": ["https://www.todesk.com/"], - "Acknowledgement": [] - }, - { - "Name": "RunSmart", - "Description": "RunSmart is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["runsmart.io"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/runsmart_network_sigma.yml", - "Description": "Detects potential network activity of RunSmart RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "VNC Connect", - "Description": "VNC Connect is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files\\RealVNC\\VNC Server\\*", - "*\\RealVNC\\VNC Server\\*" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Echoware", - "Description": "Echoware is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["echoserver*.exe", "echoware.dll"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/echoware_processes_sigma.yml", - "Description": "Detects potential processes activity of Echoware RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Alpemix", - "Description": "Alpemix is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.\n", - "Author": "Nasreddine Bencherchali", - "Created": "2024-08-05", - "LastModified": "2024-08-05", - "Details": { - "Website": "https://www.alpemix.com/en/Home", - "PEMetadata": [ - { - "Filename": "Alpemix.exe", - "OriginalFileName": "Alpemix", - "Description": "Alpemix", - "Product": "Alpemix", - "InternalName": "Alpemix" - } - ], - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": ["Windows", "Linux", "Android", "Mac", "IOS"], - "Capabilities": [ - "5 Different Solutions for Remote Support", - "Access to Unattended Computers", - "Access to User Account Control (UAC) Screens", - "Add Your Own Logo", - "Auto Sizing", - "Automatic Update", - "Clipboard Transfer", - "Computer Independent Licensing", - "Contact List and Groups", - "Encrypted Communication", - "External Communication Barrier", - "File Transfer", - "Instant Messaging", - "Multi-Platform Support", - "Multiple Chat", - "Multiple Connections", - "No Port Forwarding Required", - "Peer to Peer Connection (p2p)", - "Receiving Offline Message", - "Remote Restart", - "ReportingRestricting The Authority", - "Screen Sharing", - "Sending Announcement Message", - "Sharing a certain part of the screen", - "Video Recording", - "Voice Communication", - "Who is currently supporting?", - "Working in Black Screen Mode" - ], - "Vulnerabilities": [], - "InstallationPaths": ["C:\\AlpemixService.exe", "C:\\AlpemixSrvc\\"] - }, - "Artifacts": { - "Disk": [ - { - "File": "%localappdata%\\Alpemix\\Alpemix.ini", - "Description": "N/A", - "OS": "Windows" - } - ], - "EventLog": [ - { - "EventID": 7045, - "ProviderName": "Service Control Manager", - "LogFile": "System.evtx", - "ServiceName": "AlpemixSrvc", - "ImagePath": "*\\Alpemix.exe servicestartxxx", - "Description": "Service installation event as result of Alpemix installation." - } - ], - "Registry": [ - { - "Path": "HKLM\\SYSTEM\\CurrentControlSet\\Services\\AlpemixSrvcx", - "Description": "N/A" - } - ], - "Network": [ - { - "Domains": ["*.alpemix.com"], - "Ports": [443], - "Description": "N/A" - }, - { - "Domains": ["*.teknopars.com"], - "Ports": [80], - "Description": "N/A" - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/alpemix_registry_sigma.yml", - "Description": "Detects potential registry activity of Alpemix RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/alpemix_network_sigma.yml", - "Description": "Detects potential network activity of Alpemix RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/alpemix_files_sigma.yml", - "Description": "Detects potential files activity of Alpemix RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/alpemix_processes_sigma.yml", - "Description": "Detects potential processes activity of Alpemix RMM tool" - } - ], - "References": ["https://www.alpemix.com/en/remote-access"], - "Acknowledgement": [ - { - "Person": "Nasreddine Bencherchali", - "Handle": "@nas_bench" - } - ] - }, - { - "Name": "Royal TS", - "Description": "Royal TS is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["royalts.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["royalapps.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/royal_ts_network_sigma.yml", - "Description": "Detects potential network activity of Royal TS RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/royal_ts_processes_sigma.yml", - "Description": "Detects potential processes activity of Royal TS RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "DragonDisk", - "Description": "DragonDisk is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files (x86)\\Almageste\\DragonDisk\\*", - "*\\Almageste\\DragonDisk\\*", - "*\\DragonDisk.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/dragondisk_processes_sigma.yml", - "Description": "Detects potential processes activity of DragonDisk RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Pcvisit", - "Description": "Pcvisit is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "pcvisit.exe", - "pcvisit_client.exe", - "pcvisit-easysupport.exe", - "pcvisit_service_client.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.pcvisit.de", "pcvisit.de"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pcvisit_network_sigma.yml", - "Description": "Detects potential network activity of Pcvisit RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pcvisit_processes_sigma.yml", - "Description": "Detects potential processes activity of Pcvisit RMM tool" - } - ], - "References": ["https://www.pcvisit.de/"], - "Acknowledgement": [] - }, - { - "Name": "Connectwise Automate (LabTech)", - "Description": "Connectwise Automate (LabTech) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["ltsvc.exe", "ltsvcmon.exe", "lttray.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.hostedrmm.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/connectwise_automate__labtech__network_sigma.yml", - "Description": "Detects potential network activity of Connectwise Automate (LabTech) RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/connectwise_automate__labtech__processes_sigma.yml", - "Description": "Detects potential processes activity of Connectwise Automate (LabTech) RMM tool" - } - ], - "References": [ - "https://www.connectwise.com/company/announcements/labtech-now-connectwise-automate" - ], - "Acknowledgement": [] - }, - { - "Name": "DameWare", - "Description": "DameWare is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "SolarWinds-Dameware-DRS*.exe", - "DameWare Mini Remote Control*.exe", - "C:\\Windows\\dwrcs\\*\n c:\\Program File\\SolarWinds\\Dameware Mini Remote Control\\*", - "dwrcs.exe", - "*\\dwrcs\\*", - "*\\dwrcst.exe", - "DameWare Remote Support.exe", - "SolarWinds-Dameware-MRC*.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/dameware_processes_sigma.yml", - "Description": "Detects potential processes activity of DameWare RMM tool" - } - ], - "References": [ - "https://documentation.solarwinds.com/en/success_center/dameware/content/install-standalone-port-requirements.htm" - ], - "Acknowledgement": [] - }, - { - "Name": "Onionshare", - "Description": "Onionshare is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files (x86)\\OnionShare\\*", - "*\\OnionShare\\*", - "*\\onionshare*.exe", - "OnionShare-win*.msi" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/onionshare_processes_sigma.yml", - "Description": "Detects potential processes activity of Onionshare RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Tailscale", - "Description": "Tailscale is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/14/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "tailscale-*.exe", - "tailscaled.exe", - "tailscale-ipn.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.tailscale.com", "*.tailscale.io", "tailscale.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/tailscale_network_sigma.yml", - "Description": "Detects potential network activity of Tailscale RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/tailscale_processes_sigma.yml", - "Description": "Detects potential processes activity of Tailscale RMM tool" - } - ], - "References": ["https://tailscale.com/kb/1023/troubleshooting"], - "Acknowledgement": [] - }, - { - "Name": "Senso.cloud", - "Description": "Senso.cloud is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["SensoClient.exe", "SensoService.exe", "aadg.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.senso.cloud", "senso.cloud"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/senso.cloud_network_sigma.yml", - "Description": "Detects potential network activity of Senso.cloud RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/senso.cloud_processes_sigma.yml", - "Description": "Detects potential processes activity of Senso.cloud RMM tool" - } - ], - "References": [ - "https://support.senso.cloud/support/solutions/articles/79000116305-firewall-and-content-filter-configuration" - ], - "Acknowledgement": [] - }, - { - "Name": "Proton Drive", - "Description": "Proton Drive is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "UltraViewer", - "Description": "UltraViewer is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/14/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "UltraViewer_Service.exe", - "UltraViewer_setup*", - "UltraViewer_Desktop.exe", - "ultraviewer.exe", - "C:\\Program Files (x86)\\UltraViewer\\UltraViewer_Desktop.exe", - "*\\UltraViewer\\", - "*\\UltraViewer_Desktop.exe", - "ultraviewer_desktop.exe", - "ultraviewer_service.exe", - "UltraViewer_Desktop.exe", - "UltraViewer_setup*", - "UltraViewer_Service.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["* .ultraviewer.net", "ultraviewer.net"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ultraviewer_network_sigma.yml", - "Description": "Detects potential network activity of UltraViewer RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ultraviewer_processes_sigma.yml", - "Description": "Detects potential processes activity of UltraViewer RMM tool" - } - ], - "References": [ - "https://www.ultraviewer.net/en/200000026-summary-of-ultraviewer-s-security-information.html" - ], - "Acknowledgement": [] - }, - { - "Name": "KickIdler", - "Description": "KickIdler is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["grabberEM.*msi", "grabberTT*.msi"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["kickidler.com", "my.kickidler.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/kickidler_network_sigma.yml", - "Description": "Detects potential network activity of KickIdler RMM tool" - } - ], - "References": ["https://www.kickidler.com/for-it/faq/"], - "Acknowledgement": [] - }, - { - "Name": "Remmina", - "Description": "Remmina is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "eHorus", - "Description": "eHorus is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["ehorus standalone.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["ehorus.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ehorus_network_sigma.yml", - "Description": "Detects potential network activity of eHorus RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ehorus_processes_sigma.yml", - "Description": "Detects potential processes activity of eHorus RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Quick Assist", - "Description": "Quick Assist is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["quickassist.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.support.services.microsoft.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/quick_assist_network_sigma.yml", - "Description": "Detects potential network activity of Quick Assist RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/quick_assist_processes_sigma.yml", - "Description": "Detects potential processes activity of Quick Assist RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "N-Able Advanced Monitoring Agent", - "Description": "N-Able Advanced Monitoring Agent is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "Agent_*_RW.exe", - "BASEClient.exe", - "BASupApp.exe", - "BASupSrvc.exe", - "BASupSrvcCnfg.exe", - "BASupTSHelper.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "*remote.management", - "*.logicnow.com", - "*systemmonitor.us", - "*systemmonitor.eu.com", - "*system-monitor.com", - "systemmonitor.us.cdn.cloudflare.net", - "*cloudbackup.management", - "*systemmonitor.co.uk", - "*.n-able.com", - "*.beanywhere.com ", - "*.swi-tc.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/n-able_advanced_monitoring_agent_network_sigma.yml", - "Description": "Detects potential network activity of N-Able Advanced Monitoring Agent RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/n-able_advanced_monitoring_agent_processes_sigma.yml", - "Description": "Detects potential processes activity of N-Able Advanced Monitoring Agent RMM tool" - } - ], - "References": [ - "https://documentation.n-able.com/takecontrol/troubleshooting/Content/kb/Take-Control-Standalone-Ports-and-Domains-Firewall-and-AV-Exclusions.htm" - ], - "Acknowledgement": [] - }, - { - "Name": "KiTTY", - "Description": "KiTTY is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["C:\\*\\kitty.exe", "*\\kitty.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/kitty_processes_sigma.yml", - "Description": "Detects potential processes activity of KiTTY RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "AweRay (AweSun)", - "Description": "AweRay (AweSun) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["aweray_remote*.exe", "AweSun.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["asapi-us.aweray.net", "asapi.aweray.net"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/aweray__awesun__network_sigma.yml", - "Description": "Detects potential network activity of AweRay (AweSun) RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/aweray__awesun__processes_sigma.yml", - "Description": "Detects potential processes activity of AweRay (AweSun) RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "FleetDeck", - "Description": "FleetDeck is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["fleetdeck_agent_svc.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["fleetdeck.io"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/fleetdeck_network_sigma.yml", - "Description": "Detects potential network activity of FleetDeck RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/fleetdeck_processes_sigma.yml", - "Description": "Detects potential processes activity of FleetDeck RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "TeleDesktop", - "Description": "TeleDesktop is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/14/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["pstlaunch.exe", "ptdskclient.exe", "ptdskhost.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed", "tele-desk.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/teledesktop_network_sigma.yml", - "Description": "Detects potential network activity of TeleDesktop RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/teledesktop_processes_sigma.yml", - "Description": "Detects potential processes activity of TeleDesktop RMM tool" - } - ], - "References": ["http://potomacsoft.com/ - DOA as of 2024"], - "Acknowledgement": [] - }, - { - "Name": "Remote Utilities", - "Description": "Remote Utilities is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["rutview.exe", "rutserv.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.internetid.ru"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remote_utilities_network_sigma.yml", - "Description": "Detects potential network activity of Remote Utilities RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remote_utilities_processes_sigma.yml", - "Description": "Detects potential processes activity of Remote Utilities RMM tool" - } - ], - "References": ["https://www.remoteutilities.com/download/"], - "Acknowledgement": [] - }, - { - "Name": "Cloud Explorer", - "Description": "Cloud Explorer is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "NetSupport Manager", - "Description": "NetSupport Manager is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["pcictlui.exe", "pcicfgui.exe", "client32.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.netsupportmanager.com", "netsupportmanager.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/netsupport_manager_network_sigma.yml", - "Description": "Detects potential network activity of NetSupport Manager RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/netsupport_manager_processes_sigma.yml", - "Description": "Detects potential processes activity of NetSupport Manager RMM tool" - } - ], - "References": ["https://www.netsupportmanager.com/resources/"], - "Acknowledgement": [] - }, - { - "Name": "GotoHTTP", - "Description": "GotoHTTP is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["GotoHTTP_x64.exe", "gotohttp.exe", "GotoHTTP*.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.gotohttp.com", "gotohttp.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/gotohttp_network_sigma.yml", - "Description": "Detects potential network activity of GotoHTTP RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/gotohttp_processes_sigma.yml", - "Description": "Detects potential processes activity of GotoHTTP RMM tool" - } - ], - "References": ["https://gotohttp.com/goto/help.12x"], - "Acknowledgement": [] - }, - { - "Name": "RemoteUtilities", - "Description": "RemoteUtilities is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "rutview.exe", - "*\\Remote Manipulator System - Server\\*", - "C:\\Program Files\\Remote Utilities\\*", - "*\\Remote Utilities\\*", - "rutserv.exe", - "*\\rutserv.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["remoteutilities.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remoteutilities_network_sigma.yml", - "Description": "Detects potential network activity of RemoteUtilities RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remoteutilities_processes_sigma.yml", - "Description": "Detects potential processes activity of RemoteUtilities RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "GoToMyPC", - "Description": "GoToMyPC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.\n", - "Author": "Nasreddine Bencherchali", - "Created": "2024-08-05", - "LastModified": "2024-08-05", - "Details": { - "Website": "", - "PEMetadata": [ - { - "Filename": "AppCore.exe" - }, - { - "Filename": "g2comm.exe" - }, - { - "Filename": "g2file*.exe" - }, - { - "Filename": "g2fileh.exe" - }, - { - "Filename": "g2host.exe" - }, - { - "Filename": "g2m_download.exe" - }, - { - "Filename": "g2mainh.exe" - }, - { - "Filename": "G2MChat.exe" - }, - { - "Filename": "G2MCodecInstExtractor.exe" - }, - { - "Filename": "G2MComm.exe" - }, - { - "Filename": "G2MCoreInstExtractor.exe" - }, - { - "Filename": "G2MFeedback.exe" - }, - { - "Filename": "G2MHost.exee" - }, - { - "Filename": "G2MInstaller.exe" - }, - { - "Filename": "G2MInstallerExtractor.exe" - }, - { - "Filename": "G2MInstHigh.exe" - }, - { - "Filename": "G2MLauncher.exe" - }, - { - "Filename": "G2MMatchMaking.exe" - }, - { - "Filename": "G2MMaterials.exe" - }, - { - "Filename": "G2MPolling.exe" - }, - { - "Filename": "G2MQandA.exe" - }, - { - "Filename": "G2MRecorder.exe" - }, - { - "Filename": "G2MScrUtil64.exe" - }, - { - "Filename": "G2MSessionControl.exe" - }, - { - "Filename": "G2MStart.exe" - }, - { - "Filename": "G2MTesting.exe" - }, - { - "Filename": "G2MTranscoder.exe" - }, - { - "Filename": "G2MUI.exe" - }, - { - "Filename": "G2MUninstall.exe" - }, - { - "Filename": "g2mupload.exe" - }, - { - "Filename": "g2mvideoconference.exe" - }, - { - "Filename": "G2MView.exe" - }, - { - "Filename": "g2printh.exe" - }, - { - "Filename": "g2quick.exe" - }, - { - "Filename": "g2svc.exe" - }, - { - "Filename": "g2tray.exe" - }, - { - "Filename": "gopcsrv.exe" - }, - { - "Filename": "GoToScrUtils.exe" - }, - { - "Filename": "GoTo.exe", - "OriginalFileName": "", - "Description": "" - } - ], - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["C:\\Program Files (x86)\\GoToMyPC\\*"] - }, - "Artifacts": { - "Disk": [ - { - "File": "%AppData%\\GoTo\\Logs\\goto.log", - "Description": "N/A", - "OS": "Windows" - } - ], - "EventLog": [], - "Registry": [ - { - "Path": "HKEY_LOCAL_MACHINE\\WOW6432Node\\Citrix\\GoToMyPc", - "Description": "Configuration settings including registration email" - }, - { - "Path": "HKEY_LOCAL_MACHINE\\WOW6432Node\\Citrix\\GoToMyPc\\GuestInvite", - "Description": "Guest invites send to connect" - }, - { - "Path": "HKEY_CURRENT_USER\\SOFTWARE\\Citrix\\GoToMyPc\\FileTransfer\\history", - "Description": "hostname of the computer making connections and location of transferred files" - }, - { - "Path": "HKEY_USERS\\\\SOFTWARE\\Citrix\\GoToMyPc\\FileTransfer\\history", - "Description": "hostname of the computer making connections and location of transferred files" - } - ], - "Network": [ - { - "Description": "N/A", - "Domains": ["*.GoToMyPC.com"], - "Ports": ["N/A"] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/gotomypc_registry_sigma.yml", - "Description": "Detects potential registry activity of GoToMyPC RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/gotomypc_network_sigma.yml", - "Description": "Detects potential network activity of GoToMyPC RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/gotomypc_files_sigma.yml", - "Description": "Detects potential files activity of GoToMyPC RMM tool" - } - ], - "References": [ - "https://support.logmeininc.com/gotomypc/help/what-are-the-optimal-firewall-configurations#", - "https://support.goto.com/training/help/how-do-i-configure-gototraining-to-work-with-firewalls", - "https://ruler-project.github.io/ruler-project/RULER/remote/Citrix%20GoToMyPC/" - ], - "Acknowledgement": [ - { - "Person": "Phill Moore", - "Handle": "@phillmoore" - } - ] - }, - { - "Name": "SmartCode Web VNC", - "Description": "SmartCode Web VNC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["C:\\Program Files\\TightVNC\\*", "*\\TightVNC\\*"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Seetrol", - "Description": "Seetrol is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "seetrolcenter.exe", - "seetrolclient.exe", - "seetrolmyservice.exe", - "seetrolremote.exe", - "seetrolsetting.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["seetrol.co.kr"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/seetrol_network_sigma.yml", - "Description": "Detects potential network activity of Seetrol RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/seetrol_processes_sigma.yml", - "Description": "Detects potential processes activity of Seetrol RMM tool" - } - ], - "References": ["http://www.seetrol.com/en/features/features3.php"], - "Acknowledgement": [] - }, - { - "Name": "RDPView", - "Description": "RDPView is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["dwrcs.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed", "systemmanager.ru/dntu.en/rdp_view.htm"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rdpview_network_sigma.yml", - "Description": "Detects potential network activity of RDPView RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rdpview_processes_sigma.yml", - "Description": "Detects potential processes activity of RDPView RMM tool" - } - ], - "References": ["systemmanager.ru/dntu.en/rdp_view.htm - Same as Damware"], - "Acknowledgement": [] - }, - { - "Name": "Zoho Assist", - "Description": "Zoho Assist is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/14/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "zaservice.exe", - "ZMAgent.exe", - "C:\\*\\ZA_Access.exe", - "ZohoMeeting.exe", - "Zohours.exe", - "zohotray.exe", - "ZohoURSService.exe", - "*\\ZA_Access.exe", - "Zaservice.exe", - "za_connect.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "*.zoho.com.au", - "*.zohoassist.jp", - "assist.zoho.com", - "zoho.com/assist/", - "*.zoho.in", - "downloads.zohodl.com.cn", - "*.zohoassist.com", - "downloads.zohocdn.com", - "gateway.zohoassist.com", - "*.zohoassist.com.cn", - "*.zoho.com.cn", - "*.zoho.com", - "*.zoho.eu" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/zoho_assist_network_sigma.yml", - "Description": "Detects potential network activity of Zoho Assist RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/zoho_assist_processes_sigma.yml", - "Description": "Detects potential processes activity of Zoho Assist RMM tool" - } - ], - "References": [ - "https://www.zoho.com/assist/kb/firewall-configuration.html" - ], - "Acknowledgement": [] - }, - { - "Name": "Xpra", - "Description": "Xpra is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files (x86)\\Xpra\\*", - "*\\Xpra\\*", - "*\\Xpra-Launcher.exe", - "*\\Xpra-x86_64_Setup.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/xpra_processes_sigma.yml", - "Description": "Detects potential processes activity of Xpra RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "CloudBuckIt", - "Description": "CloudBuckIt is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files (x86)\\CloudBuckIt\\*", - "*\\CloudBuckIt\\*", - "*\\CloudBuckIt*.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/cloudbuckit_processes_sigma.yml", - "Description": "Detects potential processes activity of CloudBuckIt RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "DeskNets", - "Description": "DeskNets is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/26/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": ["https://www.desknets.com/en/download.html"], - "Acknowledgement": [] - }, - { - "Name": "ODrive", - "Description": "ODrive is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Users\\*\\current\\", - "*Users\\*\\.odrive", - "*\\Odriveapp.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/odrive_processes_sigma.yml", - "Description": "Detects potential processes activity of ODrive RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "XRDP", - "Description": "XRDP is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "ManageEngine", - "Description": "ManageEngine is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "InstallShield Setup.exe", - "ManageEngine_Remote_Access_Plus.exe", - "*\\dcagentservice.exe", - "C:\\Program Files (x86)\\DesktopCentral_Agent\\bin\\*", - "*\\DesktopCentral_Agent\\bin\\*" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/manageengine_processes_sigma.yml", - "Description": "Detects potential processes activity of ManageEngine RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Impero Connect", - "Description": "Impero Connect is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["ImperoClientSVC.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["imperosoftware.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/impero_connect_network_sigma.yml", - "Description": "Detects potential network activity of Impero Connect RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/impero_connect_processes_sigma.yml", - "Description": "Detects potential processes activity of Impero Connect RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Remcos", - "Description": "Remcos is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["remcos*.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remcos_processes_sigma.yml", - "Description": "Detects potential processes activity of Remcos RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "PDQ Connect", - "Description": "PDQ Connect is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/26/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["pdq-connect*.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["app.pdq.com", "cfcdn.pdq.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pdq_connect_network_sigma.yml", - "Description": "Detects potential network activity of PDQ Connect RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pdq_connect_processes_sigma.yml", - "Description": "Detects potential processes activity of PDQ Connect RMM tool" - } - ], - "References": [ - "https://connect.pdq.com/hc/en-us/articles/9518992071707-Network-Requirements" - ], - "Acknowledgement": [] - }, - { - "Name": "Terminals", - "Description": "Terminals is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Air Live Drive", - "Description": "Air Live Drive is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files\\AirLiveDrive\\*", - "*\\AirLiveDrive\\*", - "*\\AirLiveDrive.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/air_live_drive_processes_sigma.yml", - "Description": "Detects potential processes activity of Air Live Drive RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Syncro", - "Description": "Syncro is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/13/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "Syncro.Installer.exe", - "Kabuto.App.Runner.exe", - "Syncro.Overmind.Service.exe", - "Kabuto.Installer.exe", - "KabutoSetup.exe", - "Syncro.Service.exe", - "Kabuto.Service.Runner.exe", - "Syncro.App.Runner.exe", - "SyncroLive.Service.exe", - "SyncroLive.Agent.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "kabuto.io", - "*.syncromsp.com", - "*.syncroapi.com", - "syncromsp.com", - "servably.com", - "ld.aurelius.host", - "app.kabuto.io ", - "*.kabutoservices.com", - "repairshopr.com", - "kabutoservices.com", - "attachments.servably.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/syncro_network_sigma.yml", - "Description": "Detects potential network activity of Syncro RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/syncro_processes_sigma.yml", - "Description": "Detects potential processes activity of Syncro RMM tool" - } - ], - "References": [ - "https://community.syncromsp.com/t/syncro-exceptions-and-allowlists/2004" - ], - "Acknowledgement": [] - }, - { - "Name": "247ithelp.com (ConnectWise)", - "Description": "247ithelp.com (ConnectWise) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["Remote Workforce Client.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.247ithelp.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/247ithelp.com__connectwise__network_sigma.yml", - "Description": "Detects potential network activity of 247ithelp.com (ConnectWise) RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/247ithelp.com__connectwise__processes_sigma.yml", - "Description": "Detects potential processes activity of 247ithelp.com (ConnectWise) RMM tool" - } - ], - "References": ["Similar / replaced by ScreenConnect"], - "Acknowledgement": [] - }, - { - "Name": "Netviewer", - "Description": "Netviewer is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["netviewer*.exe", "netviewer.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["download.cnet.com/Net-Viewer/3000-2370_4-10034828.html"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/netviewer_network_sigma.yml", - "Description": "Detects potential network activity of Netviewer RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/netviewer_processes_sigma.yml", - "Description": "Detects potential processes activity of Netviewer RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Syspectr", - "Description": "Syspectr is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/26/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["oo-syspectr*.exe", "OOSysAgent.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["atled.syspectr.com", "app.syspectr.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/syspectr_network_sigma.yml", - "Description": "Detects potential network activity of Syspectr RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/syspectr_processes_sigma.yml", - "Description": "Detects potential processes activity of Syspectr RMM tool" - } - ], - "References": ["https://www.syspectr.com/en/installation-in-a-network"], - "Acknowledgement": [] - }, - { - "Name": "I'm InTouch", - "Description": "I'm InTouch is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "iit.exe", - "intouch.exe", - "I'm InTouch Go Installer.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.01com.com", "01com.com/imintouch-remote-pc-desktop"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/i'm_intouch_network_sigma.yml", - "Description": "Detects potential network activity of I'm InTouch RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/i'm_intouch_processes_sigma.yml", - "Description": "Detects potential processes activity of I'm InTouch RMM tool" - } - ], - "References": [ - "https://www.01com.com/mobile/imintouch-remote-pc-desktop/faqs/remote-access/" - ], - "Acknowledgement": [] - }, - { - "Name": "aria2", - "Description": "aria2 is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\ProgramData\\CentraStage\\AEMAgent\\*", - "*ProgramData\\CentraStage\\AEMAgent\\*", - "*\\Steinberg\\Download Assistant\\3rd Party\\optional\\aria2\\*", - "*\\aria2c.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/aria2_processes_sigma.yml", - "Description": "Detects potential processes activity of aria2 RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "ISL Light", - "Description": "ISL Light is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "islalwaysonmonitor.exe", - "isllight.exe", - "isllightservice.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["islonline.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/isl_light_network_sigma.yml", - "Description": "Detects potential network activity of ISL Light RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/isl_light_processes_sigma.yml", - "Description": "Detects potential processes activity of ISL Light RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Mocha VNC Lite", - "Description": "Mocha VNC Lite is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "This installs a modified VNC and cannot be blocked by path separate from VNC", - "This installs a modified VNC and cannot be blocked by path separate from VNC", - "*\\RealVNC\\VNC4\\*" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Ericom Connect", - "Description": "Ericom Connect is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "EricomConnectRemoteHost*.exe", - "ericomconnnectconfigurationtool.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed", "ericom.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ericom_connect_network_sigma.yml", - "Description": "Detects potential network activity of Ericom Connect RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ericom_connect_processes_sigma.yml", - "Description": "Detects potential processes activity of Ericom Connect RMM tool" - } - ], - "References": ["https://www.ericom.com/connect-accessnow/"], - "Acknowledgement": [] - }, - { - "Name": "Yandex.Disk", - "Description": "Yandex.Disk is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files (x86)\\Yandex\\*", - "*\\Yandex\\*", - "*\\YandexDisk2.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/yandex.disk_processes_sigma.yml", - "Description": "Detects potential processes activity of Yandex.Disk RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "LiteManager", - "Description": "LiteManager is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "lmnoipserver.exe", - "ROMFUSClient.exe", - "romfusclient.exe", - "romviewer.exe", - "romserver.exe", - "ROMServer.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "*.litemanager.ru", - "*.litemanager.com", - "litemanager.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/litemanager_network_sigma.yml", - "Description": "Detects potential network activity of LiteManager RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/litemanager_processes_sigma.yml", - "Description": "Detects potential processes activity of LiteManager RMM tool" - } - ], - "References": [ - "https://www.litemanager.com/articles/LiteManager_remote_access_to_a_desktop_via_the_Internet_or_LAN/" - ], - "Acknowledgement": [] - }, - { - "Name": "BeAnyWhere", - "Description": "BeAnyWhere is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "basuptshelper.exe", - "basupsrvcupdate.exe", - "BASupApp.exe", - "BASupSysInf.exe", - "BASupAppSrvc.exe", - "TakeControl.exe", - "BASupAppElev.exe", - "basupsrvc.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["beanywhere.en.uptodown.com/windows", "beanywhere.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/beanywhere_network_sigma.yml", - "Description": "Detects potential network activity of BeAnyWhere RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/beanywhere_processes_sigma.yml", - "Description": "Detects potential processes activity of BeAnyWhere RMM tool" - } - ], - "References": [ - "https://www.shouldiremoveit.com/beanywhere-support-service-40908-program.aspx" - ], - "Acknowledgement": [] - }, - { - "Name": "Jump Cloud", - "Description": "Jump Cloud is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/26/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["JumpCloud*.exe "] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.api.jumpcloud.com", "*.assist.jumpcloud.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/jump_cloud_network_sigma.yml", - "Description": "Detects potential network activity of Jump Cloud RMM tool" - } - ], - "References": [ - "https://jumpcloud.com/support/understand-remote-assist-agent" - ], - "Acknowledgement": [] - }, - { - "Name": "Remote Desktop Manager (Devolutions)", - "Description": "Remote Desktop Manager (Devolutions) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "AweRay", - "Description": "AweRay is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["aweray_remote*.exe", "AweSun.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["asapi*.aweray.net", "client-api.aweray.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/aweray_network_sigma.yml", - "Description": "Detects potential network activity of AweRay RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/aweray_processes_sigma.yml", - "Description": "Detects potential processes activity of AweRay RMM tool" - } - ], - "References": ["https://sun.aweray.com/help"], - "Acknowledgement": [] - }, - { - "Name": "Remobo", - "Description": "Remobo is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "remobo.exe", - "remobo_client.exe", - "remobo_tracker.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed", "remobo.en.softonic.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remobo_network_sigma.yml", - "Description": "Detects potential network activity of Remobo RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remobo_processes_sigma.yml", - "Description": "Detects potential processes activity of Remobo RMM tool" - } - ], - "References": ["https://www.remobo.com - DOA as of 2024"], - "Acknowledgement": [] - }, - { - "Name": "ESET Remote Administrator", - "Description": "ESET Remote Administrator is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "era.exe", - "einstaller.exe", - "ezhelp*.exe", - "eratool.exe", - "ERAAgent.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "user_managed", - "eset.com/me/business/remote-management/remote-administrator/" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/eset_remote_administrator_network_sigma.yml", - "Description": "Detects potential network activity of ESET Remote Administrator RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/eset_remote_administrator_processes_sigma.yml", - "Description": "Detects potential processes activity of ESET Remote Administrator RMM tool" - } - ], - "References": [ - "eset.com/me/business/remote-management/remote-administrator/" - ], - "Acknowledgement": [] - }, - { - "Name": "BeyondTrust (Bomgar)", - "Description": "BeyondTrust (Bomgar) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "bomgar-scc.exe", - "bomgar-rdp.exe", - "bomgar-scc-*.exe", - "bomgar-pac-*.exe", - "bomgar-pac.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "bomgarcloud.com", - "*.bomgarcloud.com", - "*.beyondtrustcloud.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/beyondtrust__bomgar__network_sigma.yml", - "Description": "Detects potential network activity of BeyondTrust (Bomgar) RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/beyondtrust__bomgar__processes_sigma.yml", - "Description": "Detects potential processes activity of BeyondTrust (Bomgar) RMM tool" - } - ], - "References": [ - "https://www.beyondtrust.com/docs/remote-support/getting-started/deployment/cloud/network.htm" - ], - "Acknowledgement": [] - }, - { - "Name": "Ultra VNC", - "Description": "Ultra VNC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files\\uvnc bvba\\UltraVNC\\*", - "*\\uvnc bvba\\UltraVNC\\*", - "*\\UVNC_Launch.exe", - "*\\winvnc.exe", - "*\\vncviewer.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ultra_vnc_processes_sigma.yml", - "Description": "Detects potential processes activity of Ultra VNC RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "pcAnywhere", - "Description": "pcAnywhere is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "awhost32.exe", - "awrem32.exe", - "pcaquickconnect.exe", - "winaw32.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pcanywhere_network_sigma.yml", - "Description": "Detects potential network activity of pcAnywhere RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pcanywhere_processes_sigma.yml", - "Description": "Detects potential processes activity of pcAnywhere RMM tool" - } - ], - "References": ["https://en.wikipedia.org/wiki/PcAnywhere"], - "Acknowledgement": [] - }, - { - "Name": "Remote.it", - "Description": "Remote.it is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "remote-it-installer.exe", - "remote.it.exe", - "remoteit.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["auth.api.remote.it", "api.remote.it", "remote.it"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remote.it_network_sigma.yml", - "Description": "Detects potential network activity of Remote.it RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remote.it_processes_sigma.yml", - "Description": "Detects potential processes activity of Remote.it RMM tool" - } - ], - "References": ["https://docs.remote.it/introduction/get-started"], - "Acknowledgement": [] - }, - { - "Name": "Cruz", - "Description": "Cruz is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["resources.doradosoftware.com/cruz-rmm"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/cruz_network_sigma.yml", - "Description": "Detects potential network activity of Cruz RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Guacamole", - "Description": "Guacamole is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["guacd.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed", "guacamole.apache.org"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/guacamole_network_sigma.yml", - "Description": "Detects potential network activity of Guacamole RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/guacamole_processes_sigma.yml", - "Description": "Detects potential processes activity of Guacamole RMM tool" - } - ], - "References": ["guacamole.apache.org"], - "Acknowledgement": [] - }, - { - "Name": "Addigy", - "Description": "Addigy is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/27/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["addigy-*.pkg"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "prod.addigy.com", - "grtmprod.addigy.com", - "agents.addigy.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/addigy_network_sigma.yml", - "Description": "Detects potential network activity of Addigy RMM tool" - } - ], - "References": ["https://addigy.com/"], - "Acknowledgement": [] - }, - { - "Name": "AeroAdmin", - "Description": "AeroAdmin is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["aeroadmin.exe", "AeroAdmin.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["auth*.aeroadmin.com", "aeroadmin.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/aeroadmin_network_sigma.yml", - "Description": "Detects potential network activity of AeroAdmin RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/aeroadmin_processes_sigma.yml", - "Description": "Detects potential processes activity of AeroAdmin RMM tool" - } - ], - "References": ["https://support.aeroadmin.com/kb/faq.php?id=58"], - "Acknowledgement": [] - }, - { - "Name": "FleetDesk.io", - "Description": "FleetDesk.io is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "fleetdeck_agent_svc.exe", - "fleetdeck_commander_svc.exe", - "fleetdeck_installer.exe", - "fleetdeck_agent.exe", - "fleetdeck_commander_launcher.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "*.fleetdeck.io", - "cognito-idp.us-west-2.amazonaws.com", - "fleetdeck.io" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/fleetdesk.io_network_sigma.yml", - "Description": "Detects potential network activity of FleetDesk.io RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/fleetdesk.io_processes_sigma.yml", - "Description": "Detects potential processes activity of FleetDesk.io RMM tool" - } - ], - "References": ["https://fleetdeck.io/faq/"], - "Acknowledgement": [] - }, - { - "Name": "Dameware-mini remote control Protocol", - "Description": "Dameware-mini remote control Protocol is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["dntus*.exe", "dwrcs.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["dameware.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/dameware-mini_remote_control_protocol_network_sigma.yml", - "Description": "Detects potential network activity of Dameware-mini remote control Protocol RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/dameware-mini_remote_control_protocol_processes_sigma.yml", - "Description": "Detects potential processes activity of Dameware-mini remote control Protocol RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Access Remote PC", - "Description": "Access Remote PC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["rpcgrab.exe", "rpcsetup.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/access_remote_pc_processes_sigma.yml", - "Description": "Detects potential processes activity of Access Remote PC RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Acronic Cyber Protect (Remotix)", - "Description": "Acronic Cyber Protect (Remotix) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/26/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "AcronisCyberProtectConnectQuickAssist*.exe", - "AcronisCyberProtectConnectAgent.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "cloud.acronis.com", - "agents*-cloud.acronis.com", - "gw.remotix.com", - "connect.acronis.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/acronic_cyber_protect__remotix__network_sigma.yml", - "Description": "Detects potential network activity of Acronic Cyber Protect (Remotix) RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/acronic_cyber_protect__remotix__processes_sigma.yml", - "Description": "Detects potential processes activity of Acronic Cyber Protect (Remotix) RMM tool" - } - ], - "References": ["https://kb.acronis.com/content/47189"], - "Acknowledgement": [] - }, - { - "Name": "Instant Housecall", - "Description": "Instant Housecall is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "hsloader.exe", - "InstantHousecall.exe", - "ihcserver.exe", - "instanthousecall.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "*.instanthousecall.com", - "secure.instanthousecall.com", - "*.instanthousecall.net", - "instanthousecall.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/instant_housecall_network_sigma.yml", - "Description": "Detects potential network activity of Instant Housecall RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/instant_housecall_processes_sigma.yml", - "Description": "Detects potential processes activity of Instant Housecall RMM tool" - } - ], - "References": ["https://instanthousecall.com/features/"], - "Acknowledgement": [] - }, - { - "Name": "SkyFex", - "Description": "SkyFex is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["Deskroll.exe", "DeskRollUA.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["skyfex.com", "deskroll.com", "*.deskroll.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/skyfex_network_sigma.yml", - "Description": "Detects potential network activity of SkyFex RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/skyfex_processes_sigma.yml", - "Description": "Detects potential processes activity of SkyFex RMM tool" - } - ], - "References": ["https://skyfex.com/"], - "Acknowledgement": [] - }, - { - "Name": "PSEXEC", - "Description": "PSEXEC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["psexec.exe", "psexecsvc.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/psexec_network_sigma.yml", - "Description": "Detects potential network activity of PSEXEC RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/psexec_processes_sigma.yml", - "Description": "Detects potential processes activity of PSEXEC RMM tool" - } - ], - "References": [ - "https://learn.microsoft.com/en-us/sysinternals/downloads/psexec" - ], - "Acknowledgement": [] - }, - { - "Name": "MSP360", - "Description": "MSP360 is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "Online Backup.exe", - "CBBackupPlan.exe", - "Cloud.Backup.Scheduler.exe", - "Cloud.Backup.RM.Service.exe", - "cbb.exe", - "CloudRaService.exe", - "CloudRaSd.exe", - "CloudRaCmd.exe", - "CloudRaUtilities.exe", - "Remote Desktop.exe", - "Connect.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "*.cloudberrylab.com", - "*.msp360.com", - "*.mspbackups.com", - "msp360.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/msp360_network_sigma.yml", - "Description": "Detects potential network activity of MSP360 RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/msp360_processes_sigma.yml", - "Description": "Detects potential processes activity of MSP360 RMM tool" - } - ], - "References": [ - "https://kb.msp360.com/managed-backup-service/mbs-tcp-ports-configuration#" - ], - "Acknowledgement": [] - }, - { - "Name": "SecureCRT", - "Description": "SecureCRT is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\*\\SecureCRT.EXE", - "*\\SecureCRT.EXE", - "*\\VanDyke Software\\ClientPack\\*" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/securecrt_processes_sigma.yml", - "Description": "Detects potential processes activity of SecureCRT RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "VNC", - "Description": "VNC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/14/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "winvnc*.exe", - "vncserver.exe", - "winwvc.exe", - "winvncsc.exe", - "vncserverui.exe", - "vncviewer.exe", - "winvnc.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed", "realvnc.com/en/connect/download/vnc"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/vnc_network_sigma.yml", - "Description": "Detects potential network activity of VNC RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/vnc_processes_sigma.yml", - "Description": "Detects potential processes activity of VNC RMM tool" - } - ], - "References": ["https://realvnc.com/en/connect/download/vnc"], - "Acknowledgement": [] - }, - { - "Name": "Panorama9", - "Description": "Panorama9 is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["p9agent*.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "trusted.panorama9.com", - "changes.panorama9.com", - "panorama9.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/panorama9_network_sigma.yml", - "Description": "Detects potential network activity of Panorama9 RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/panorama9_processes_sigma.yml", - "Description": "Detects potential processes activity of Panorama9 RMM tool" - } - ], - "References": [ - "https://support.panorama9.com/en/articles/1859605-what-ports-and-hosts-does-the-p9-agent-communicate-with" - ], - "Acknowledgement": [] - }, - { - "Name": "FixMe", - "Description": "FixMe is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "FixMeit Client.exe", - "TiExpertStandalone.exe", - "FixMeitClient*.exe", - "TiExpertCore.exe", - "FixMeit Unattended Access Setup.exe", - "FixMeit Expert Setup.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["fixme.it"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/fixme_network_sigma.yml", - "Description": "Detects potential network activity of FixMe RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/fixme_processes_sigma.yml", - "Description": "Detects potential processes activity of FixMe RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "ISL Online", - "Description": "ISL Online is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "*\\ISLLight.exe", - "isllight.exe", - "ISLLightClient.exe", - "C:\\Program Files (x86)\\ISL Online\\ISL Light*", - "*\\ISL Online\\ISL Light*", - "ISLLight.exe", - "isllightservice.exe", - "islalwaysonmonitor.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.islonline.com", "*.islonline.net"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/isl_online_network_sigma.yml", - "Description": "Detects potential network activity of ISL Online RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/isl_online_processes_sigma.yml", - "Description": "Detects potential processes activity of ISL Online RMM tool" - } - ], - "References": ["https://help.islonline.com/19818/165940"], - "Acknowledgement": [] - }, - { - "Name": "RES Automation Manager", - "Description": "RES Automation Manager is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "wisshell*.exe", - "wmc.exe", - "wmc_deployer.exe", - "wmcsvc.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed", "ivanti.com/"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/res_automation_manager_network_sigma.yml", - "Description": "Detects potential network activity of RES Automation Manager RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/res_automation_manager_processes_sigma.yml", - "Description": "Detects potential processes activity of RES Automation Manager RMM tool" - } - ], - "References": [ - "https://forums.ivanti.com/s/article/INFO-Which-ports-does-Ivanti-Automation-use?language=en_US&ui-force-components-controllers-recordGlobalValueProvider.RecordGvp.getRecord=1" - ], - "Acknowledgement": [] - }, - { - "Name": "rclone", - "Description": "rclone is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "portable tool. No install path", - "portable tool. No install path", - "rclone*.zip", - "*\\rclone.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rclone_processes_sigma.yml", - "Description": "Detects potential processes activity of rclone RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Atera", - "Description": "Atera is a remote monitoring and management (RMM) tool. It is used by threat actors to deploy ransomware or facilitate command execution and lateral movement.\n", - "Created": "2024/08/03", - "LastModified": "", - "Details": { - "Website": "https://www.atera.com/", - "PEMetadata": [ - { - "Filename": "AteraAgent.exe", - "OriginalFileName": "AteraAgent.exe", - "Description": "AteraAgent" - } - ], - "Privileges": "SYSTEM", - "Free": "30 day trial", - "Verification": "None", - "SupportedOS": ["Windows", "MacOS", "Linux"], - "Capabilities": [ - "Integrated remote access with Splashtop and AnyDesk", - "Remote monitoring and management", - "Patch management", - "Network discovery", - "Backup and disaster recovery", - "Helpdesk and ticketing", - "Reporting and analytics", - "Billing and invoicing", - "Customer portal", - "Mobile app" - ], - "Vulnerabilities": ["CVE-2023-26078", "CVE-2023-26077"], - "InstallationPaths": [ - "*\\AgentPackageNetworkDiscovery.exe", - "*\\AgentPackageTaskScheduler.exe", - "*\\ATERA Networks\\AteraAgent\\*", - "*\\AteraAgent.exe", - "atera_agent.exe", - "atera_agent.exe", - "ateraagent.exe", - "C:\\Program Files\\ATERA Networks\\AteraAgent\\*", - "C:\\Program Files\\Atera Networks", - "C:\\Program Files (x86)\\Atera Networks", - "syncrosetup.exe" - ] - }, - "Artifacts": { - "Disk": [ - { - "File": "C:\\Program Files\\ATERA Networks\\AteraAgent\\Packages\\AgentPackageRunCommandInteractive\\log.txt", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "C:\\Program Files\\ATERA Networks\\AteraAgent\\Packages\\*", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "C:\\Program Files\\ATERA Networks\\AteraAgent\\AteraAgent.exe", - "Description": "Atera service binary", - "OS": "Windows" - }, - { - "File": "C:\\Program Files\\Atera Networks\\AlphaAgent.exe", - "Description": "Atera service binary", - "OS": "Windows" - }, - { - "File": "C:\\Program Files\\ATERA Networks\\AteraAgent\\Packages\\AgentPackageSTRemote\\AgentPackageSTRemote.exe", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "C:\\Program Files\\ATERA Networks\\AteraAgent\\Packages\\AgentPackageMonitoring\\AgentPackageMonitoring.exe", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "C:\\Program Files\\ATERA Networks\\AteraAgent\\Packages\\AgentPackageHeartbeat\\AgentPackageHeartbeat.exe", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "C:\\Program Files\\ATERA Networks\\AteraAgent\\Packages\\AgentPackageFileExplorer\\AgentPackageFileExplorer.exe", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "C:\\Program Files\\ATERA Networks\\AteraAgent\\Packages\\AgentPackageRunCommandInteractive\\AgentPackageRunCommandInteractive.exe", - "Description": "N/A", - "OS": "Windows" - } - ], - "EventLog": [ - { - "EventID": 7045, - "ProviderName": "Service Control Manager", - "LogFile": "System.evtx", - "ServiceName": "AteraAgent", - "ImagePath": "\"C:\\\\Program Files (x86)\\\\ATERA Networks\\\\AteraAgent\\\\AteraAgent.exe\"", - "Description": "Service installation event as result of AteraAgent installation." - }, - { - "EventID": 7045, - "ProviderName": "Service Control Manager", - "LogFile": "System.evtx", - "ServiceName": "WinRing0_1_2_0", - "ImagePath": "\"C:\\\\Program Files (x86)\\\\ATERA Networks\\\\AteraAgent\\\\Packages\\\\AgentPackageMonitoring\\\\OpenHardwareMonitorLib.sys\"", - "Description": "Service installation event as result of Atera pakcage manager installation." - }, - { - "EventID": 11707, - "ProviderName": "MsiInstaller", - "LogFile": "Application.evtx", - "Data": "Product: AteraAgent -- Installation completed successfully.", - "Description": "Service installation event as result of AteraAgent installation." - }, - { - "EventID": 4688, - "ProviderName": "Microsoft-Security-Auditing", - "LogFile": "Security.evtx", - "CommandLine": "C:\\\\Program Files\\\\ATERA Networks\\\\AteraAgent\\\\Packages\\\\AgentPackageFileExplorer\\\\AgentPackageFileExplorer.exe XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXX XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXX agent-api.atera.com/Production 443 [BASE64BLOB]", - "Description": "Service installation event as result of AteraAgent installation." - } - ], - "Registry": [ - { - "Path": "HKLM\\SOFTWARE\\ATERA Networks\\AlphaAgent", - "Description": null - }, - { - "Path": "HKLM\\SYSTEM\\CurrentControlSet\\Services\\AteraAgent", - "Description": null - }, - { - "Path": "KLM\\SOFTWARE\\WOW6432Node\\Splashtop Inc.", - "Description": null - }, - { - "Path": "HKLM\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Splashtop Software Updater", - "Description": null - }, - { - "Path": "HKLM\\SYSTEM\\ControlSet\\Services\\EventLog\\Application\\AlphaAgent", - "Description": null - }, - { - "Path": "HKLM\\SYSTEM\\ControlSet\\Services\\EventLog\\Application\\AteraAgent", - "Description": null - }, - { - "Path": "HKLM\\SOFTWARE\\Microsoft\\Tracing\\AteraAgent_RASAPI32", - "Description": null - }, - { - "Path": "HKLM\\SOFTWARE\\Microsoft\\Tracing\\AteraAgent_RASMANCS", - "Description": null - }, - { - "Path": "HKLM\\SOFTWARE\\ATERA Networks\\*", - "Description": null - } - ], - "Network": [ - { - "Description": "N/A", - "Domains": ["pubsub.atera.com"], - "Ports": ["N/A"] - }, - { - "Description": "N/A", - "Domains": ["pubsub.pubnub.com"], - "Ports": ["N/A"] - }, - { - "Description": "N/A", - "Domains": ["agentreporting.atera.com"], - "Ports": ["N/A"] - }, - { - "Description": "N/A", - "Domains": ["getalphacontrol.com"], - "Ports": ["N/A"] - }, - { - "Description": "N/A", - "Domains": ["app.atera.com"], - "Ports": ["N/A"] - }, - { - "Description": "N/A", - "Domains": ["agenthb.atera.com"], - "Ports": ["N/A"] - }, - { - "Description": "N/A", - "Domains": ["packagesstore.blob.core.windows.net"], - "Ports": ["N/A"] - }, - { - "Description": "N/A", - "Domains": ["ps.pndsn.com"], - "Ports": ["N/A"] - }, - { - "Description": "N/A", - "Domains": ["agent-api.atera.com"], - "Ports": ["N/A"] - }, - { - "Description": "N/A", - "Domains": ["cacerts.thawte.com"], - "Ports": ["N/A"] - }, - { - "Description": "N/A", - "Domains": ["agentreportingstore.blob.core.windows.net"], - "Ports": ["N/A"] - }, - { - "Description": "N/A", - "Domains": ["atera-agent-heartbeat.servicebus.windows.net"], - "Ports": ["N/A"] - }, - { - "Description": "N/A", - "Domains": ["ps.atera.com"], - "Ports": ["N/A"] - }, - { - "Description": "N/A", - "Domains": ["atera.pubnubapi.com"], - "Ports": ["N/A"] - }, - { - "Description": "N/A", - "Domains": ["appcdn.atera.com"], - "Ports": ["N/A"] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/The-DFIR-Report/Sigma-Rules/blob/d67407d357ad32b247e2a303abc5a38bb30fd576/rules/windows/process_creation/proc_creation_win_ateraagent_malicious_installations.yml", - "Name": "AteraAgent malicious installations", - "Description": "Detects AteraAgent installations with suspicious command line arguments." - }, - { - "Sigma": "https://github.com/SigmaHQ/sigma/blob/782f0f524e6f797ea114fe0d87b22cb4abaa6b7c/rules/windows/builtin/application/msiinstaller/win_software_atera_rmm_agent_install.yml", - "Name": "Atera Agent Installation", - "Description": "Detects Atera Agent installation." - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/atera_registry_sigma.yml", - "Description": "Detects potential registry activity of Atera RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/atera_network_sigma.yml", - "Description": "Detects potential network activity of Atera RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/atera_files_sigma.yml", - "Description": "Detects potential files activity of Atera RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/atera_processes_sigma.yml", - "Description": "Detects potential processes activity of Atera RMM tool" - } - ], - "References": [ - "https://support.atera.com/hc/en-us/articles/360015461139-Firewall-Settings-for-Atera-s-Integrations", - "https://support.atera.com/hc/en-us/articles/215955967-Troubleshoot-Atera-s-Windows-agent", - "https://support.atera.com/hc/en-us/articles/115015619747-Release-Notes-February-2018", - "https://thedfirreport.com/?s=ateraagent" - ], - "Acknowledgement": [ - { - "Person": "Théo Letailleur", - "Handle": "in/theosyn" - }, - { - "Person": "Nasreddine Bencherchali", - "Handle": "@nas_bench" - }, - { - "Person": "Kostas", - "Handle": "@kostastsale" - } - ] - }, - { - "Name": "CrossLoop", - "Description": "CrossLoop is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "crossloopservice.exe", - "CrossLoopConnect.exe", - "WinVNCStub.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.crossloop.com", "crossloop.en.softonic.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/crossloop_network_sigma.yml", - "Description": "Detects potential network activity of CrossLoop RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/crossloop_processes_sigma.yml", - "Description": "Detects potential processes activity of CrossLoop RMM tool" - } - ], - "References": ["www.CrossLoop.com -> redirects to avast.com"], - "Acknowledgement": [] - }, - { - "Name": "Level.io", - "Description": "Level.io is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "level-windows-amd64.exe", - "level.exe", - "level-remote-control-ffmpeg.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["level.io", "*.level.io"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/level.io_network_sigma.yml", - "Description": "Detects potential network activity of Level.io RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/level.io_processes_sigma.yml", - "Description": "Detects potential processes activity of Level.io RMM tool" - } - ], - "References": [ - "https://docs.level.io/1.0/admin-guides/troubleshooting-agent-issues" - ], - "Acknowledgement": [] - }, - { - "Name": "Tactical RMM", - "Description": "Tactical RMM is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/14/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["tacticalrmm.exe", "tacticalrmm.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "login.tailscale.com", - "login.tailscale.com", - "docs.tacticalrmm.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/tactical_rmm_network_sigma.yml", - "Description": "Detects potential network activity of Tactical RMM RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/tactical_rmm_processes_sigma.yml", - "Description": "Detects potential processes activity of Tactical RMM RMM tool" - } - ], - "References": ["docs.tacticalrmm.com"], - "Acknowledgement": [] - }, - { - "Name": "Fortra", - "Description": "Fortra is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["fortra.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/fortra_network_sigma.yml", - "Description": "Detects potential network activity of Fortra RMM tool" - } - ], - "References": [ - "https://www.fortra.com - No free/cloud RMM softwars listed" - ], - "Acknowledgement": [] - }, - { - "Name": "Sorillus", - "Description": "Sorillus is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["Sorillus-Launcher*.exe", "Sorillus Launcher.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.sorillus.com", "sorillus.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/sorillus_network_sigma.yml", - "Description": "Detects potential network activity of Sorillus RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/sorillus_processes_sigma.yml", - "Description": "Detects potential processes activity of Sorillus RMM tool" - } - ], - "References": ["https://sorillus.com/"], - "Acknowledgement": [] - }, - { - "Name": "RemoteCall", - "Description": "RemoteCall is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "rcengmgru.exe", - "rcmgrsvc.exe", - "rxstartsupport.exe", - "rcstartsupport.exe", - "raautoup.exe", - "agentu.exe", - "remotesupportplayeru.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "*.remotecall.com", - "*.startsupport.com", - "remotecall.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remotecall_network_sigma.yml", - "Description": "Detects potential network activity of RemoteCall RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remotecall_processes_sigma.yml", - "Description": "Detects potential processes activity of RemoteCall RMM tool" - } - ], - "References": [ - "https://help.remotecall.com/hc/en-us/articles/360005128814--RemoteCall-Server-List-For-Firewall" - ], - "Acknowledgement": [] - }, - { - "Name": "Laplink Everywhere", - "Description": "Laplink Everywhere is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "laplink.exe", - "laplink-everywhere-setup*.exe", - "laplinkeverywhere.exe", - "llrcservice.exe", - "serverproxyservice.exe", - "OOSysAgent.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "everywhere.laplink.com", - "le.laplink.com", - "atled.syspectr.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/laplink_everywhere_network_sigma.yml", - "Description": "Detects potential network activity of Laplink Everywhere RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/laplink_everywhere_processes_sigma.yml", - "Description": "Detects potential processes activity of Laplink Everywhere RMM tool" - } - ], - "References": ["https://everywhere.laplink.com/docs"], - "Acknowledgement": [] - }, - { - "Name": "MEGAsync", - "Description": "MEGAsync is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Users\\*\\AppData\\Local\\MEGAsync\\*", - "*Users\\*\\AppData\\Local\\MEGAsync\\*", - "*Users\\*\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", - "*ProgramData\\MEGAsync\\*", - "*\\MEGAsyncSetup64.exe", - "*\\MEGAupdater.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/megasync_processes_sigma.yml", - "Description": "Detects potential processes activity of MEGAsync RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Neturo", - "Description": "Neturo is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["neturo*.exe", "ntrntservice.exe", "neturo.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["neturo.uplus.co.kr"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/neturo_network_sigma.yml", - "Description": "Detects potential network activity of Neturo RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/neturo_processes_sigma.yml", - "Description": "Detects potential processes activity of Neturo RMM tool" - } - ], - "References": [ - "Obscure, located an older copy here: http://www.iconpos.com/pos/home/iconpos/bbs.php?id=file&q=view&uid=2" - ], - "Acknowledgement": [] - }, - { - "Name": "Distant Desktop", - "Description": "Distant Desktop is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["distant-desktop.exe", "dd.exe", "ddsystem.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.distantdesktop.com", "*signalserver.xyz"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/distant_desktop_network_sigma.yml", - "Description": "Detects potential network activity of Distant Desktop RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/distant_desktop_processes_sigma.yml", - "Description": "Detects potential processes activity of Distant Desktop RMM tool" - } - ], - "References": ["https://www.distantdesktop.com/manual/first-start.htm"], - "Acknowledgement": [] - }, - { - "Name": "rsync", - "Description": "rsync is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Anyplace Control", - "Description": "Anyplace Control is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["apc_host.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["anyplace-control.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/anyplace_control_network_sigma.yml", - "Description": "Detects potential network activity of Anyplace Control RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/anyplace_control_processes_sigma.yml", - "Description": "Detects potential processes activity of Anyplace Control RMM tool" - } - ], - "References": [ - "http://www.anyplace-control.com/anyplace-control/help/faq.htm" - ], - "Acknowledgement": [] - }, - { - "Name": "JollysFastVNC", - "Description": "JollysFastVNC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "ExtraPuTTY", - "Description": "ExtraPuTTY is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Users\\*\\ExtraPuTTY-0.30-2016-01-28-installer.exe", - "*Users\\*\\ExtraPuTTY-0.30-2016-01-28-installer.exe", - "*\\ExtraPuTTY-0.30-2016-01-28-installer.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/extraputty_processes_sigma.yml", - "Description": "Detects potential processes activity of ExtraPuTTY RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "rdpwrap", - "Description": "rdpwrap is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["RDPWInst.exe", "RDPCheck.exe", "RDPConf.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed", "github.com/stascorp/rdpwrap"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rdpwrap_network_sigma.yml", - "Description": "Detects potential network activity of rdpwrap RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rdpwrap_processes_sigma.yml", - "Description": "Detects potential processes activity of rdpwrap RMM tool" - } - ], - "References": ["github.com/stascorp/rdpwrap"], - "Acknowledgement": [] - }, - { - "Name": "N-ABLE Remote Access Software", - "Description": "N-ABLE Remote Access Software is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["n-able.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/n-able_remote_access_software_network_sigma.yml", - "Description": "Detects potential network activity of N-ABLE Remote Access Software RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Google Drive", - "Description": "Google Drive is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files\\Google\\Drive File Stream\\*", - "*\\Google\\Drive File Stream\\*", - "*Users\\*\\AppData\\*\\Google\\DriveFS*", - "G:\\My Drive*", - "*\\GoogleDriveFS.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/google_drive_processes_sigma.yml", - "Description": "Detects potential processes activity of Google Drive RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Solar-PuTTY", - "Description": "Solar-PuTTY is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files\\Solar-Putty-v4\\*", - "*\\Solar-Putty-v4\\*", - "*\\Solar-PuTTY.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/solar-putty_processes_sigma.yml", - "Description": "Detects potential processes activity of Solar-PuTTY RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "TeamViewer", - "Description": "TeamViewer is a remote monitoring and management (RMM) tool.\n", - "Author": "Nasreddine Bencherchali, Michael Haag", - "Created": "2024-08-02", - "LastModified": "2024-08-02", - "Details": { - "Website": "https://www.teamviewer.com/en", - "PEMetadata": [ - { - "Filename": "TeamViewer.exe", - "OriginalFileName": "", - "Description": "", - "Product": "TeamViewer" - } - ], - "Privileges": "user", - "Free": true, - "Verification": false, - "SupportedOS": ["Android", "ChromeOS", "IOS", "Linux", "Mac", "Windows"], - "Capabilities": [], - "Vulnerabilities": [ - "https://www.cvedetails.com/vulnerability-list/vendor_id-11100/product_id-19942/Teamviewer-Teamviewer.html" - ], - "InstallationPaths": [ - "C:\\Program Files\\TeamViewer\\", - "teamviewer_desktop.exe", - "teamviewer_service.exe", - "teamviewerhost" - ] - }, - "Artifacts": { - "Disk": [ - { - "File": "C:\\Users\\\\AppData\\Local\\Temp\\TeamViewer\\TV15Install.log", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "TeamViewer\\d\\d_Logfile\\.log", - "Description": "N/A", - "OS": "Windows", - "Type": "Regex" - }, - { - "File": "C:\\Program Files\\TeamViewer\\Connections_incoming.txt", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "C:\\Program Files\\TeamViewer\\TVNetwork.log", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "%LOCALAPPDATA%\\Temp\\TeamViewer\\TV15Install.log", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "%APPDATA%\\\\TeamViewer\\\\TeamViewer\\d\\d_Logfile\\.log", - "Description": "N/A", - "OS": "Windows", - "Type": "Regex" - }, - { - "File": "teamviewerqs.exe", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "tv_w32.exe", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "tv_w64.exe", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "tv_x64.exe", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "teamviewer.exe", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "teamviewer_service.exe", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "%LOCALAPPDATA%\\TeamViewer\\Database\\tvchatfilecache.db", - "Description": "SQlite 3 database storing cache about TeamViewer chat", - "OS": "Windows" - }, - { - "File": "%LOCALAPPDATA%\\TeamViewer\\RemotePrinting\\tvprint.db", - "Description": "SQlite 3 database storing TeamViewer print jobs", - "OS": "Windows" - }, - { - "File": "%PROGRAMDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\TeamViewer.lnk", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "C:\\Program Files*\\TeamViewer\\connections*.txt", - "Description": "N/A", - "OS": "Windows" - }, - { - "File": "C:\\Users\\*\\AppData\\Roaming\\TeamViewer\\MRU\\RemoteSupport\\*tvc", - "Description": "N/A", - "OS": "Windows" - } - ], - "EventLog": [ - { - "EventID": 7045, - "ProviderName": "Service Control Manager", - "LogFile": "System.evtx", - "ServiceName": "TeamViewer", - "ImagePath": "\"C:\\\\Program Files\\\\TeamViewer\\\\TeamViewer_Service.exe\"", - "Description": "Service installation event as result of TeamViewer installation." - } - ], - "Registry": [ - { - "Path": "HKLM\\SOFTWARE\\TeamViewer\\*", - "Description": "N/A" - }, - { - "Path": "HKU\\\\SOFTWARE\\TeamViewer\\*", - "Description": "N/A" - }, - { - "Path": "HKLM\\SYSTEM\\CurrentControlSet\\Services\\TeamViewer\\*", - "Description": "N/A" - }, - { - "Path": "HKLM\\SOFTWARE\\TeamViewer\\ConnectionHistory", - "Description": "N/A" - }, - { - "Path": "HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\TeamViewer\\*", - "Description": "N/A" - }, - { - "Path": "HKU\\SID\\SOFTWARE\\TeamViewer\\MainWindowHandle", - "Description": "N/A" - }, - { - "Path": "HKU\\SID\\SOFTWARE\\TeamViewer\\DesktopWallpaperSingleImage", - "Description": "N/A" - }, - { - "Path": "HKU\\SID\\SOFTWARE\\TeamViewer\\DesktopWallpaperSingleImagePath", - "Description": "N/A" - }, - { - "Path": "HKU\\SID\\SOFTWARE\\TeamViewer\\DesktopWallpaperSingleImagePosition", - "Description": "N/A" - }, - { - "Path": "HKU\\SID\\SOFTWARE\\TeamViewer\\MinimizeToTray", - "Description": "N/A" - }, - { - "Path": "HKU\\SID\\SOFTWARE\\TeamViewer\\MultiMedia\\AudioUserSelectedCapturingEndpoint", - "Description": "N/A" - }, - { - "Path": "HKU\\SID\\SOFTWARE\\TeamViewer\\MultiMedia\\AudioSendingVolumeV2", - "Description": "N/A" - }, - { - "Path": "HKU\\SID\\SOFTWARE\\TeamViewer\\MultiMedia\\AudioUserSelectedRenderingEndpoint", - "Description": "N/A" - }, - { - "Path": "HKLM\\SOFTWARE\\TeamViewer\\ConnectionHistory", - "Description": "N/A" - }, - { - "Path": "HKU\\SID\\SOFTWARE\\TeamViewer\\ClientWindow_Mode", - "Description": "N/A" - }, - { - "Path": "HKU\\SID\\SOFTWARE\\TeamViewer\\ClientWindowPositions", - "Description": "N/A" - } - ], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.teamviewer.com"], - "Ports": [] - }, - { - "Description": "N/A", - "Domains": ["router15.teamviewer.com"], - "Ports": [443] - }, - { - "Description": "N/A", - "Domains": ["client.teamviewer.com"], - "Ports": [443] - }, - { - "Description": "N/A", - "Domains": ["taf.teamviewer.com"], - "Ports": [443] - } - ], - "Other": [ - { - "Type": "Mutex", - "Value": "TeamViewer_LogMutex" - }, - { - "Type": "Mutex", - "Value": "TeamViewerHooks_DynamicMemMutex" - }, - { - "Type": "Mutex", - "Value": "TeamViewer3_Win32_Instance_Mutex" - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/teamviewer_registry_sigma.yml", - "Description": "Detects potential registry activity of TeamViewer RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/teamviewer_network_sigma.yml", - "Description": "Detects potential network activity of TeamViewer RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/teamviewer_files_sigma.yml", - "Description": "Detects potential files activity of TeamViewer RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/teamviewer_processes_sigma.yml", - "Description": "Detects potential processes activity of TeamViewer RMM tool" - } - ], - "References": [ - "https://community.teamviewer.com/English/kb/articles/4139-ports-used-by-teamviewer", - "https://arista.my.site.com/AristaCommunity/s/article/Security-Analysis-TeamViewer#", - "https://www.teamviewer.com/en/global/support/knowledge-base/teamviewer-classic/troubleshooting/log-file-reading-incoming-connection/", - "https://www.synacktiv.com/publications/legitimate-rats-a-comprehensive-forensic-analysis-of-the-usual-suspects.html", - "https://github.com/Purp1eW0lf/Blue-Team-Notes" - ], - "Acknowledgement": [ - { - "Person": "Théo Letailleur", - "Handle": "in/theosyn" - } - ] - }, - { - "Name": "Itarian", - "Description": "Itarian is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "ITSMAgent.exe", - "RViewer.exe", - "ItsmRsp.exe", - "RAccess.exe", - "RmmService.exe", - "ITarianRemoteAccessSetup.exe", - "RDesktop.exe", - "ComodoRemoteControl.exe", - "ITSMService.exe", - "RHost.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "mdmsupport.comodo.com", - "*.itsm-us1.comodo.com", - "*.cmdm.comodo.com", - "remoteaccess.itarian.com", - "servicedesk.itarian.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/itarian_network_sigma.yml", - "Description": "Detects potential network activity of Itarian RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/itarian_processes_sigma.yml", - "Description": "Detects potential processes activity of Itarian RMM tool" - } - ], - "References": [ - "https://help.itarian.com/topic-459-1-1005-14776-Appendix-1b---Endpoint-Manager-Services---IP-Nos,-Host-Names-and-Port-Details---US-Customers.html" - ], - "Acknowledgement": [] - }, - { - "Name": "Visual Studio Dev Tunnel", - "Description": "Visual Studio Dev Tunnel is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "global.rel.tunnels.api.visualstudio.com", - "*.rel.tunnels.api.visualstudio.com", - "*.devtunnels.ms" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/visual_studio_dev_tunnel_network_sigma.yml", - "Description": "Detects potential network activity of Visual Studio Dev Tunnel RMM tool" - } - ], - "References": [ - "https://learn.microsoft.com/en-us/azure/developer/dev-tunnels/security" - ], - "Acknowledgement": [] - }, - { - "Name": "ITSupport247 (ConnectWise)", - "Description": "ITSupport247 (ConnectWise) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["saazapsc.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.itsupport247.net"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/itsupport247__connectwise__network_sigma.yml", - "Description": "Detects potential network activity of ITSupport247 (ConnectWise) RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/itsupport247__connectwise__processes_sigma.yml", - "Description": "Detects potential processes activity of ITSupport247 (ConnectWise) RMM tool" - } - ], - "References": ["https://control.itsupport247.net/"], - "Acknowledgement": [] - }, - { - "Name": "LogMeIn", - "Description": "LogMeIn is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.\n", - "Author": "Nasreddine Bencherchali", - "Created": "2024-08-05", - "LastModified": "2024-08-05", - "Details": { - "Website": "https://www.logmein.com/", - "PEMetadata": [ - { - "Filename": "lmiguardiansvc.exe" - }, - { - "Filename": "lmiignition.exe" - }, - { - "Filename": "logmeinsystray.exe" - }, - { - "Filename": "logmein.exe", - "OriginalFileName": "", - "Company": "LogMeIn, Inc.", - "Description": "LMIGuardianSvc", - "Product": "LMIGuardianSvc" - } - ], - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": null - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "N/A", - "Domains": ["logmein-gateway.com"], - "Ports": [443] - }, - { - "Description": "N/A", - "Domains": ["*.logmein.com"], - "Ports": [443] - }, - { - "Description": "N/A", - "Domains": ["*.logmein.eu"], - "Ports": [443] - }, - { - "Description": "N/A", - "Domains": ["logmeinrescue.com"], - "Ports": [443] - }, - { - "Description": "N/A", - "Domains": ["*.logmeininc.com"], - "Ports": [443] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/SigmaHQ/sigma/blob/782f0f524e6f797ea114fe0d87b22cb4abaa6b7c/rules/windows/dns_query/dns_query_win_remote_access_software_domains_non_browsers.yml", - "Description": "DNS Query To Remote Access Software Domain From Non-Browser App" - }, - { - "Sigma": "https://github.com/SigmaHQ/sigma/blob/782f0f524e6f797ea114fe0d87b22cb4abaa6b7c/rules/windows/process_creation/proc_creation_win_remote_access_tools_logmein.yml", - "Description": "Remote Access Tool - LogMeIn Execution" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/logmein_network_sigma.yml", - "Description": "Detects potential network activity of LogMeIn RMM tool" - } - ], - "References": [ - "https://support.logmeininc.com/central/help/allowlisting-and-firewall-configuration" - ], - "Acknowledgement": [ - { - "Person": "Nasreddine Bencherchali", - "Handle": "@nas_bench" - } - ] - }, - { - "Name": "Cyberduck", - "Description": "Cyberduck is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files\\Cyberduck\\*", - "*\\Cyberduck\\*", - "*\\Cyberduck.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/cyberduck_processes_sigma.yml", - "Description": "Detects potential processes activity of Cyberduck RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Electric", - "Description": "Electric is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["electric.ai"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/electric_network_sigma.yml", - "Description": "Detects potential network activity of Electric RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "PuTTY", - "Description": "PuTTY is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "TeraCLOUD", - "Description": "TeraCLOUD is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "c:\\*\\TeraCloud.Client*", - "*\\TeraCloud.Client*", - "*\\Livedrive-Setup.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/teracloud_processes_sigma.yml", - "Description": "Detects potential processes activity of TeraCLOUD RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Netreo", - "Description": "Netreo is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "charon.netreo.net", - "activation.netreo.net", - "*.api.netreo.com", - "netreo.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/netreo_network_sigma.yml", - "Description": "Detects potential network activity of Netreo RMM tool" - } - ], - "References": ["https://solutions.netreo.com/docs/firewall-requirements"], - "Acknowledgement": [] - }, - { - "Name": "Netop Remote Control (Impero Connect)", - "Description": "Netop Remote Control (Impero Connect) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "nhostsvc.exe", - "nhstw32.exe", - "ngstw32.exe", - "Netop Ondemand.exe", - "nldrw32.exe", - "rmserverconsolemediator.exe", - "ImperoInit.exe", - "Connect.Backdrop.cloud*.exe", - "ImperoClientSVC.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.connect.backdrop.cloud", "*.netop.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/netop_remote_control__impero_connect__network_sigma.yml", - "Description": "Detects potential network activity of Netop Remote Control (Impero Connect) RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/netop_remote_control__impero_connect__processes_sigma.yml", - "Description": "Detects potential processes activity of Netop Remote Control (Impero Connect) RMM tool" - } - ], - "References": [ - "https://kb.netop.com/article/firewall-and-proxy-server-considerations-when-using-netop-portal-communication-373.html" - ], - "Acknowledgement": [] - }, - { - "Name": "Splashtop (Beta)", - "Description": "Splashtop (Beta) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "SRServer.exe", - "SplashtopSOS.exe", - "Splashtop_Streamer_Windows*.exe", - "SRManager.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["splashtop.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/splashtop__beta__network_sigma.yml", - "Description": "Detects potential network activity of Splashtop (Beta) RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/splashtop__beta__processes_sigma.yml", - "Description": "Detects potential processes activity of Splashtop (Beta) RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "FastViewer", - "Description": "FastViewer is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "fastclient.exe", - "fastmaster.exe", - "FastViewer.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.fastviewer.com", "fastviewer.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/fastviewer_network_sigma.yml", - "Description": "Detects potential network activity of FastViewer RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/fastviewer_processes_sigma.yml", - "Description": "Detects potential processes activity of FastViewer RMM tool" - } - ], - "References": [ - "https://fastviewer.com/demo/EN_FastViewer_Server%20Installation%20Configuration.pdf" - ], - "Acknowledgement": [] - }, - { - "Name": "RustDesk", - "Description": "RustDesk is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["rustdesk*.exe", "rustdesk.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["rustdesk.com", "user_managed", "web.rustdesk.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rustdesk_network_sigma.yml", - "Description": "Detects potential network activity of RustDesk RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rustdesk_processes_sigma.yml", - "Description": "Detects potential processes activity of RustDesk RMM tool" - } - ], - "References": ["https://rustdesk.com/docs/en/"], - "Acknowledgement": [] - }, - { - "Name": "MobaXterm", - "Description": "MobaXterm is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\*\\MobaXterm_installer_12.1.msi", - "*\\MobaXterm_installer_*.msi", - "*\\Mobatek\\MobaXterm\\*" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "GoToAssist", - "Description": "GoToAssist is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "gotoassist.exe", - "g2a*.exe", - "GoTo Assist Opener.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "goto.com", - "*.getgo.com", - "*.fastsupport.com", - "*.gotoassist.com", - "helpme.net", - "*.gotoassist.me", - "*.gotoassist.at", - "*.desktopstreaming.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/gotoassist_network_sigma.yml", - "Description": "Detects potential network activity of GoToAssist RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/gotoassist_processes_sigma.yml", - "Description": "Detects potential processes activity of GoToAssist RMM tool" - } - ], - "References": [ - "https://help.gotoassist.com/remote-support/help/what-should-i-allow-on-my-firewall-for-gotoassist-remote-support-v5" - ], - "Acknowledgement": [] - }, - { - "Name": "Free Ping Tool", - "Description": "Free Ping Tool is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["can't find this one", "can't find this one"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "HelpBeam", - "Description": "HelpBeam is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["helpbeam*.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["helpbeam.software.informer.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/helpbeam_network_sigma.yml", - "Description": "Detects potential network activity of HelpBeam RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/helpbeam_processes_sigma.yml", - "Description": "Detects potential processes activity of HelpBeam RMM tool" - } - ], - "References": ["https://www.helpbeam.com domain for sale in 2024"], - "Acknowledgement": [] - }, - { - "Name": "NTR Remote", - "Description": "NTR Remote is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/26/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["NTRsupportPro_EN.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.ntrsupport.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ntr_remote_network_sigma.yml", - "Description": "Detects potential network activity of NTR Remote RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ntr_remote_processes_sigma.yml", - "Description": "Detects potential processes activity of NTR Remote RMM tool" - } - ], - "References": ["DOA as of 2024"], - "Acknowledgement": [] - }, - { - "Name": "ServerEye", - "Description": "ServerEye is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["servereye*.exe", "ServiceProxyLocalSys.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.server-eye.de"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/servereye_network_sigma.yml", - "Description": "Detects potential network activity of ServerEye RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/servereye_processes_sigma.yml", - "Description": "Detects potential processes activity of ServerEye RMM tool" - } - ], - "References": [ - "https://www.servereye.de/wp-content/uploads/Anleitung-zur-Erstinstallation_aktuell.pdf" - ], - "Acknowledgement": [] - }, - { - "Name": "WebRDP", - "Description": "WebRDP is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/14/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["webrdp.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed", "github.com/Mikej81/WebRDP"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/webrdp_network_sigma.yml", - "Description": "Detects potential network activity of WebRDP RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/webrdp_processes_sigma.yml", - "Description": "Detects potential processes activity of WebRDP RMM tool" - } - ], - "References": ["github.com/Mikej81/WebRDP"], - "Acknowledgement": [] - }, - { - "Name": "GoTo Opener", - "Description": "GoTo Opener is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files (x86)\\GoTo Opener", - "*\\GoTo Opener" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "S3 Browser", - "Description": "S3 Browser is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files (x86)\\S3 Browser\\*", - "*\\S3 Browser\\*", - "*\\s3browser*.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/s3_browser_processes_sigma.yml", - "Description": "Detects potential processes activity of S3 Browser RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Any Support", - "Description": "Any Support is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/27/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["ManualLauncher.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.anysupport.net"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/any_support_network_sigma.yml", - "Description": "Detects potential network activity of Any Support RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/any_support_processes_sigma.yml", - "Description": "Detects potential processes activity of Any Support RMM tool" - } - ], - "References": ["https://www.anysupport.net/introduce_howto.php"], - "Acknowledgement": [] - }, - { - "Name": "BeamYourScreen", - "Description": "BeamYourScreen is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["beamyourscreen.exe", "beamyourscreen-host.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["beamyourscreen.com", "*.beamyourscreen.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/beamyourscreen_network_sigma.yml", - "Description": "Detects potential network activity of BeamYourScreen RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/beamyourscreen_processes_sigma.yml", - "Description": "Detects potential processes activity of BeamYourScreen RMM tool" - } - ], - "References": ["beamyourscreen redirects to https://www.mikogo.com/"], - "Acknowledgement": [] - }, - { - "Name": "Sophos-Remote Management System", - "Description": "Sophos-Remote Management System is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["clientmrinit.exe", "mgntsvc.exe", "routernt.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "*.sophos.com", - "*.sophosupd.com", - "*.sophosupd.net", - "community.sophos.com/on-premise-endpoint/f/sophos-endpoint-software/5725/sophos-remote-management-system" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/sophos-remote_management_system_network_sigma.yml", - "Description": "Detects potential network activity of Sophos-Remote Management System RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/sophos-remote_management_system_processes_sigma.yml", - "Description": "Detects potential processes activity of Sophos-Remote Management System RMM tool" - } - ], - "References": [ - "community.sophos.com/on-premise-endpoint/f/sophos-endpoint-software/5725/sophos-remote-management-system" - ], - "Acknowledgement": [] - }, - { - "Name": "Amazon (Cloud) Drive", - "Description": "Amazon (Cloud) Drive is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Users\\*\\AppData\\Local\\Amazon\\Cloud Drive\\*", - "*\\AppData\\Local\\Amazon\\Cloud Drive\\*", - "*\\AmazonCloudDrive.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/amazon__cloud__drive_processes_sigma.yml", - "Description": "Detects potential processes activity of Amazon (Cloud) Drive RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Desktop Central", - "Description": "Desktop Central is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["dcagentservice.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["desktopcentral.manageengine.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/desktop_central_network_sigma.yml", - "Description": "Detects potential network activity of Desktop Central RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/desktop_central_processes_sigma.yml", - "Description": "Detects potential processes activity of Desktop Central RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "PSEXEC (Clone)", - "Description": "PSEXEC (Clone) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "paexec.exe", - "PAExec-*.exe", - "csexec.exe ", - "remcom.exe", - "remcomsvc.exe", - "xcmd.exe", - "xcmdsvc.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/psexec__clone__network_sigma.yml", - "Description": "Detects potential network activity of PSEXEC (Clone) RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/psexec__clone__processes_sigma.yml", - "Description": "Detects potential processes activity of PSEXEC (Clone) RMM tool" - } - ], - "References": ["https://www.poweradmin.com/paexec/"], - "Acknowledgement": [] - }, - { - "Name": "GetScreen", - "Description": "GetScreen is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["GetScreen.exe", "getscreen.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["getscreen.me", "GetScreen.me", "*.getscreen.me"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/getscreen_network_sigma.yml", - "Description": "Detects potential network activity of GetScreen RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/getscreen_processes_sigma.yml", - "Description": "Detects potential processes activity of GetScreen RMM tool" - } - ], - "References": [ - "https://docs.getscreen.me/self-hosted/system-requirements/" - ], - "Acknowledgement": [] - }, - { - "Name": "RemotePC", - "Description": "RemotePC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files (x86)\\RemotePC\\*", - "Idrive.File-Transfer", - "*\\RemotePC\\*", - "remotepcservice.exe", - "RemotePC.exe", - "remotepchost.exe", - "idrive.RemotePCAgent", - "rpcsuite.exe", - "*\\RemotePCService.exe", - "RemotePCService.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "*.remotedesktop.com", - "*.remotepc.com", - "www.remotepc.com", - "remotepc.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remotepc_network_sigma.yml", - "Description": "Detects potential network activity of RemotePC RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remotepc_processes_sigma.yml", - "Description": "Detects potential processes activity of RemotePC RMM tool" - } - ], - "References": ["https://www.remotedesktop.com/helpdesk/faq-firewall"], - "Acknowledgement": [] - }, - { - "Name": "Tanium", - "Description": "Tanium is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/14/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "TaniumClient.exe", - "TaniumCX.exe", - "TaniumExecWrapper.exe", - "TaniumFileInfo.exe", - "TPowerShell.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["cloud.tanium.com", "*.cloud.tanium.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/tanium_network_sigma.yml", - "Description": "Detects potential network activity of Tanium RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/tanium_processes_sigma.yml", - "Description": "Detects potential processes activity of Tanium RMM tool" - } - ], - "References": [ - "https://help.tanium.com/bundle/ug_client_cloud/page/client/platform_connections.html" - ], - "Acknowledgement": [] - }, - { - "Name": "GoodSync", - "Description": "GoodSync is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "installation requires paid version of GoodSync Server", - "installation requires paid version of GoodSync Server", - "GoodSync-vsub-Setup.exe", - "A40B81B36CDC2D24910FC58816E50DCDE21BD1A9" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/goodsync_processes_sigma.yml", - "Description": "Detects potential processes activity of GoodSync RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "LabTeach (Connectwise Automate)", - "Description": "LabTeach (Connectwise Automate) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["ltsvc.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/labteach__connectwise_automate__processes_sigma.yml", - "Description": "Detects potential processes activity of LabTeach (Connectwise Automate) RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "RemoteView", - "Description": "RemoteView is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "remoteview.exe", - "rv.exe", - "rvagent.exe", - "rvagtray.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*content.rview.com", "*.rview.com", "content.rview.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remoteview_network_sigma.yml", - "Description": "Detects potential network activity of RemoteView RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remoteview_processes_sigma.yml", - "Description": "Detects potential processes activity of RemoteView RMM tool" - } - ], - "References": [ - "https://help.rview.com/hc/en-us/articles/360005175994--RemoteView-Server-list-for-firewall" - ], - "Acknowledgement": [] - }, - { - "Name": "UltraVNC", - "Description": "UltraVNC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/14/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["UltraVNC*.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["ultravnc.com", "user_managed"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ultravnc_network_sigma.yml", - "Description": "Detects potential network activity of UltraVNC RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ultravnc_processes_sigma.yml", - "Description": "Detects potential processes activity of UltraVNC RMM tool" - } - ], - "References": [ - "https://uvnc.com/docs/uvnc-server/49-UltraVNC-server-configuration.html" - ], - "Acknowledgement": [] - }, - { - "Name": "SmarTTY", - "Description": "SmarTTY is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "c:\\Program Files (x86)\\Sysprogs\\SmarTTY\\*", - "*\\Sysprogs\\SmarTTY\\*", - "*\\SmarTTY.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/smartty_processes_sigma.yml", - "Description": "Detects potential processes activity of SmarTTY RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Absolute (Computrace)", - "Description": "Absolute (Computrace) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "6/18/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "rpcnet.exe", - "ctes.exe", - "ctespersitence.exe", - "cteshostsvc.exe", - "rpcld.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*search.namequery.com", "*server.absolute.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/absolute__computrace__network_sigma.yml", - "Description": "Detects potential network activity of Absolute (Computrace) RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/absolute__computrace__processes_sigma.yml", - "Description": "Detects potential processes activity of Absolute (Computrace) RMM tool" - } - ], - "References": [ - "https://community.absolute.com/s/article/Understanding-Absolutes-Endpoint-Agents-Rpcnet-CTES-and-search-namequery-com" - ], - "Acknowledgement": [] - }, - { - "Name": "Quest KACE Agent (formerly Dell KACE)", - "Description": "Quest KACE Agent (formerly Dell KACE) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["konea.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.kace.com", "www.quest.com/kace/"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/quest_kace_agent__formerly_dell_kace__network_sigma.yml", - "Description": "Detects potential network activity of Quest KACE Agent (formerly Dell KACE) RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/quest_kace_agent__formerly_dell_kace__processes_sigma.yml", - "Description": "Detects potential processes activity of Quest KACE Agent (formerly Dell KACE) RMM tool" - } - ], - "References": [ - "https://support.quest.com/kb/4211365/which-network-ports-and-urls-are-required-for-the-kace-sma-appliance-to-function" - ], - "Acknowledgement": [] - }, - { - "Name": "DeskShare", - "Description": "DeskShare is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/26/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["TeamTaskManager.exe", "DSGuest.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/deskshare_network_sigma.yml", - "Description": "Detects potential network activity of DeskShare RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/deskshare_processes_sigma.yml", - "Description": "Detects potential processes activity of DeskShare RMM tool" - } - ], - "References": [ - "https://www.deskshare.com/help/fml/Active-and-Passive-connection-mode.aspx" - ], - "Acknowledgement": [] - }, - { - "Name": "Pocket Cloud (Wyse)", - "Description": "Pocket Cloud (Wyse) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["pocketcloud*.exe", "pocketcloudservice.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pocket_cloud__wyse__processes_sigma.yml", - "Description": "Detects potential processes activity of Pocket Cloud (Wyse) RMM tool" - } - ], - "References": ["https://wyse-pocketcloud.informer.com/2.1/"], - "Acknowledgement": [] - }, - { - "Name": "ESET Remote Administrator", - "Description": "ESET Remote Administrator is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "einstaller.exe", - "era.exe", - "ERAAgent.exe", - "ezhelp*.exe", - "eratool.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "user_managed", - "eset.com/me/business/remote-management/remote-administrator/" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/eset_remote_administrator_network_sigma.yml", - "Description": "Detects potential network activity of ESET Remote Administrator RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/eset_remote_administrator_processes_sigma.yml", - "Description": "Detects potential processes activity of ESET Remote Administrator RMM tool" - } - ], - "References": [ - "eset.com/me/business/remote-management/remote-administrator/" - ], - "Acknowledgement": [] - }, - { - "Name": "Pilixo", - "Description": "Pilixo is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["rdp.exe", "Pilixo_Installer*.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["pilixo.com", "download.pilixo.com", "*.pilixo.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pilixo_network_sigma.yml", - "Description": "Detects potential network activity of Pilixo RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pilixo_processes_sigma.yml", - "Description": "Detects potential processes activity of Pilixo RMM tool" - } - ], - "References": [ - "https://pilixo.freshdesk.com/support/solutions/articles/9000141879-device-connectivity-and-firewalls" - ], - "Acknowledgement": [] - }, - { - "Name": "CloudMounter", - "Description": "CloudMounter is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files\\CloudMounter\\*", - "*\\CloudMounter\\*", - "*\\CloudMounter\\*", - "*\\cloudmounter.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/cloudmounter_processes_sigma.yml", - "Description": "Detects potential processes activity of CloudMounter RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Mikogo", - "Description": "Mikogo is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "mikogo.exe", - "mikogo-starter.exe", - "mikogo-service.exe", - "mikogolauncher.exe", - "C:\\Users\\*\\AppData\\Roaming\\Mikogo\\*", - "*Users\\*\\AppData\\Roaming\\Mikogo\\*", - "*\\Mikogo-Service.exe", - "*\\Mikogo-Screen-Service.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "*.real-time-collaboration.com", - "*.mikogo4.com", - "*.mikogo.com", - "mikogo.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/mikogo_network_sigma.yml", - "Description": "Detects potential network activity of Mikogo RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/mikogo_processes_sigma.yml", - "Description": "Detects potential processes activity of Mikogo RMM tool" - } - ], - "References": [ - "https://mikogo.zendesk.com/hc/en-us/articles/214072478-Which-IP-addresses-do-we-use-for-our-services" - ], - "Acknowledgement": [] - }, - { - "Name": "WebEx (Remote Access)", - "Description": "WebEx (Remote Access) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/14/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [ - "https://help.webex.com/en-us/article/nyc3q0b/Set-Up-a-Computer-for-Remote-Access" - ], - "Acknowledgement": [] - }, - { - "Name": "Koofr", - "Description": "Koofr is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Duplicati", - "Description": "Duplicati is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "c:\\Program Files\\*\\Duplicati.Server.exe", - "*\\*\\Duplicati.Server.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/duplicati_processes_sigma.yml", - "Description": "Detects potential processes activity of Duplicati RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "ManageEngine RMM Central", - "Description": "ManageEngine RMM Central is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["manageengine.com/remote-monitoring-management/"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/manageengine_rmm_central_network_sigma.yml", - "Description": "Detects potential network activity of ManageEngine RMM Central RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "WinSCP", - "Description": "WinSCP is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Users\\IEUser\\Downloads\\WinSCP-5.21.6-Portable\\*", - "*\\WinSCP*Portable\\*", - "*\\WinSCP.exe", - "*\\WinSCP\\*" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/winscp_processes_sigma.yml", - "Description": "Detects potential processes activity of WinSCP RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "GatherPlace-desktop sharing", - "Description": "GatherPlace-desktop sharing is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["gp3.exe", "gp4.exe", "gp5.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "*.gatherplace.com", - "*.gatherplace.net", - "gatherplace.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/gatherplace-desktop_sharing_network_sigma.yml", - "Description": "Detects potential network activity of GatherPlace-desktop sharing RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/gatherplace-desktop_sharing_processes_sigma.yml", - "Description": "Detects potential processes activity of GatherPlace-desktop sharing RMM tool" - } - ], - "References": ["https://www.gatherplace.com/kb?id=136377"], - "Acknowledgement": [] - }, - { - "Name": "Laplink Gold", - "Description": "Laplink Gold is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["tsircusr.exe", "laplink.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed", "wen.laplink.com/product/laplink-gold"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/laplink_gold_network_sigma.yml", - "Description": "Detects potential network activity of Laplink Gold RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/laplink_gold_processes_sigma.yml", - "Description": "Detects potential processes activity of Laplink Gold RMM tool" - } - ], - "References": ["wen.laplink.com/product/laplink-gold"], - "Acknowledgement": [] - }, - { - "Name": "Centurion", - "Description": "Centurion is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["ctiserv.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["centuriontech.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/centurion_network_sigma.yml", - "Description": "Detects potential network activity of Centurion RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/centurion_processes_sigma.yml", - "Description": "Detects potential processes activity of Centurion RMM tool" - } - ], - "References": [ - "https://data443.atlassian.net/servicedesk/customer/portal/20" - ], - "Acknowledgement": [] - }, - { - "Name": "Ivanti Remote Control", - "Description": "Ivanti Remote Control is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "IvantiRemoteControl.exe", - "ArcUI.exe", - "AgentlessRC.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.ivanticloud.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ivanti_remote_control_network_sigma.yml", - "Description": "Detects potential network activity of Ivanti Remote Control RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ivanti_remote_control_processes_sigma.yml", - "Description": "Detects potential processes activity of Ivanti Remote Control RMM tool" - } - ], - "References": ["https://rc1.ivanticloud.com/"], - "Acknowledgement": [] - }, - { - "Name": "NordLocker", - "Description": "NordLocker is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Cloud Turtle", - "Description": "Cloud Turtle is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files (x86)\\Genie9\\*", - "*\\Genie9\\*" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "CloudExplorer", - "Description": "CloudExplorer is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "CloudHQ", - "Description": "CloudHQ is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Xeox", - "Description": "Xeox is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/14/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "xeox-agent_x64.exe", - "xeox_service_windows.exe", - "xeox-agent_*.exe", - "xeox-agent_x86.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.xeox.com", "xeox.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/xeox_network_sigma.yml", - "Description": "Detects potential network activity of Xeox RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/xeox_processes_sigma.yml", - "Description": "Detects potential processes activity of Xeox RMM tool" - } - ], - "References": [ - "https://help.xeox.com/knowledge-base/gSuyNfDH6u79M82utnswf2/firewall-settings-xeox-agent-and-integrations/47T7S9tZJ2L1Z2W5gwuXoW" - ], - "Acknowledgement": [] - }, - { - "Name": "ezHelp", - "Description": "ezHelp is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "ezhelpclientmanager.exe", - "ezHelpManager.exe", - "ezhelpclient.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.ezhelp.co.kr", "ezhelp.co.kr"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ezhelp_network_sigma.yml", - "Description": "Detects potential network activity of ezHelp RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ezhelp_processes_sigma.yml", - "Description": "Detects potential processes activity of ezHelp RMM tool" - } - ], - "References": ["https://www.exhelp.co.kr"], - "Acknowledgement": [] - }, - { - "Name": "Level.io", - "Description": "Level.io is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "level-windows-amd64.exe", - "level.exe", - "level-remote-control-ffmpeg.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["level.io", "*.level.io"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/level.io_network_sigma.yml", - "Description": "Detects potential network activity of Level.io RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/level.io_processes_sigma.yml", - "Description": "Detects potential processes activity of Level.io RMM tool" - } - ], - "References": [ - "https://docs.level.io/1.0/admin-guides/troubleshooting-agent-issues" - ], - "Acknowledgement": [] - }, - { - "Name": "MultCloud", - "Description": "MultCloud is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["requires sign up", "requires sign up"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "CloudGopher", - "Description": "CloudGopher is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Synergy", - "Description": "Synergy is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/26/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/synergy_network_sigma.yml", - "Description": "Detects potential network activity of Synergy RMM tool" - } - ], - "References": ["https://symless.com/synergy"], - "Acknowledgement": [] - }, - { - "Name": "ConnectWise Control", - "Description": "ConnectWise Control is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "screenconnect.clientservice.exe", - "connectwisecontrol.client.exe", - "screenconnect.windowsclient.exe", - "connectwisechat-customer.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["live.screenconnect.com", "control.connectwise.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/connectwise_control_network_sigma.yml", - "Description": "Detects potential network activity of ConnectWise Control RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/connectwise_control_processes_sigma.yml", - "Description": "Detects potential processes activity of ConnectWise Control RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "OptiTune", - "Description": "OptiTune is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/26/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["OTService.exe", "OTPowerShell.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.optitune.us", "*.opti-tune.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/optitune_network_sigma.yml", - "Description": "Detects potential network activity of OptiTune RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/optitune_processes_sigma.yml", - "Description": "Detects potential processes activity of OptiTune RMM tool" - } - ], - "References": ["https://www.bravurasoftware.com/optitune/support/faq.aspx"], - "Acknowledgement": [] - }, - { - "Name": "Netop", - "Description": "Netop is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files\\Danware Data\\NetOp Packn Deploy\\*", - "*\\Danware Data\\NetOp Packn Deploy\\*", - "*\\Netop Remote Control\\*" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "ConnectWise", - "Description": "ConnectWise is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files (x86)\\ScreenConnect Client ()\\*", - "*\\ScreenConnect*Client*\\*" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Encapto", - "Description": "Encapto is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["encapto.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/encapto_network_sigma.yml", - "Description": "Detects potential network activity of Encapto RMM tool" - } - ], - "References": ["https://www.encapto.com - used to manage Cisco services"], - "Acknowledgement": [] - }, - { - "Name": "Action1", - "Description": "Action1 is a powerful Remote Monitoring and Management(RMM) tool that enables users to execute commands, scripts, and binaries. \nThrough the web interface of action1, the administrator must create a new policy or an app to establish remote execution and then points that the agent is installed.\n", - "Author": "@kostastsale", - "Created": "2024-08-03", - "LastModified": "2024-08-03", - "Details": { - "Website": "https://www.action1.com/", - "PEMetadata": [ - { - "Filename": "action1_connector.exe" - }, - { - "Filename": "action1_remote.exe" - }, - { - "Filename": "action1_update.exe" - }, - { - "Filename": "action1_agent.exe", - "OriginalFileName": "action1_agent.exe", - "Description": "Endpoint Agent" - } - ], - "Privileges": "SYSTEM", - "Free": "Yes", - "Verification": "Corporate email required although temporary email services are accepted", - "SupportedOS": ["Windows"], - "Capabilities": [ - "Backup and disaster recovery", - "Billing and invoicing", - "Customer portal", - "HelpDesk and ticketing", - "Mobile app", - "Network discovery", - "Patch management", - "Remote monitoring and management", - "Reporting and analytics" - ], - "Vulnerabilities": [], - "InstallationPaths": ["C:\\Windows\\Action1\\*"] - }, - "Artifacts": { - "Disk": [ - { - "File": "C:\\Windows\\Action1\\action1_agent.exe", - "Description": "Action1 service binary", - "OS": "Windows" - }, - { - "File": "C:\\Windows\\Action1\\*", - "Description": "Multiple files and binaries related to Action1 installation", - "OS": "Windows" - }, - { - "File": "C:\\Windows\\Action1\\scripts\\*", - "Description": "Multiple scripts related to Action1 installation", - "OS": "Windows" - }, - { - "File": "C:\\Windows\\Action1\\rule_data\\*", - "Description": "Files related to Action1 rules", - "OS": "Windows" - }, - { - "File": "C:\\Windows\\Action1\\action1_log_*.log", - "Description": "Contains history, errors, system notifications. Incoming and outgoing connections.", - "OS": "Windows" - } - ], - "EventLog": [ - { - "EventID": 7045, - "ProviderName": "Service Control Manager", - "LogFile": "System.evtx", - "ServiceName": "Action1 Agent", - "ImagePath": "\"C:\\\\Windows\\\\Action1\\\\action1_agent.exe\"", - "Description": "Service installation event as result of Action1 installation." - }, - { - "EventID": 4688, - "ProviderName": "Microsoft-Security-Auditing", - "LogFile": "Security.evtx", - "CommandLine": "C:\\Windows\\Action1\\action1_agent.exe service", - "Description": "Service installation event as result of Action1 installation." - }, - { - "EventID": 4688, - "ProviderName": "Microsoft-Security-Auditing", - "LogFile": "Security.evtx", - "CommandLine": "C:\\Windows\\Action1\\action1_agent.exe loggedonuser", - "Description": "Executing command to get logged on user." - } - ], - "Registry": [ - { - "Path": "HKLM\\System\\CurrentControlSet\\Services\\A1Agent", - "Description": "Service installation event as result of Action1 installation." - }, - { - "Path": "HKLM\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\Windows Error Reporting\\LocalDumps\\action1_agent.exe", - "Description": "Ensures that detailed crash information is available for analysis, which aids in maintaining the stability and reliability of the software." - }, - { - "Path": "HKLM\\SOFTWARE\\WOW6432Node\\Action1", - "Description": "Storing its configuration settings and other relevant information" - } - ], - "Network": [ - { - "Description": "N/A", - "Domains": ["*.action1.com"], - "Ports": [443] - }, - { - "Description": "N/A", - "Domains": ["a1-backend-packages.s3.amazonaws.com"], - "Ports": [443] - } - ] - }, - "Detections": [ - { - "Name": "Arbitrary code execution and remote sessions via Action1 RMM", - "Description": "Threat hunting rule for detecting the execution of arbitrary code and remote sessions via Action1 RMM", - "author": "@kostastsale", - "Link": "https://github.com/tsale/Sigma_rules/blob/ea87e4fc851207ca0f002ec043624f2b3bf1b2da/Threat%20Hunting%20Queries/Action1_RMM.yml" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/action1_registry_sigma.yml", - "Description": "Detects potential registry activity of Action1 RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/action1_network_sigma.yml", - "Description": "Detects potential network activity of Action1 RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/action1_files_sigma.yml", - "Description": "Detects potential files activity of Action1 RMM tool" - } - ], - "References": [ - "https://www.action1.com/documentation/firewall-configuration/", - "https://www.action1.com/documentation/", - "https://twitter.com/Kostastsale/status/1646256901506605063?s=20", - "https://ruler-project.github.io/ruler-project/RULER/remote/Action1/" - ], - "Acknowledgement": [ - { - "Person": "Kostas", - "Handle": "@kostastsale" - } - ] - }, - { - "Name": "FleetDeck.io", - "Description": "FleetDeck.io is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "fleetdeck_agent_svc.exe", - "fleetdeck_commander_svc.exe", - "fleetdeck_installer.exe", - "fleetdeck_commander_launcher.exe", - "fleetdeck_agent.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["fleetdeck.io"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/fleetdeck.io_network_sigma.yml", - "Description": "Detects potential network activity of FleetDeck.io RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/fleetdeck.io_processes_sigma.yml", - "Description": "Detects potential processes activity of FleetDeck.io RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "SuperPuTTY", - "Description": "SuperPuTTY is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Downloads\\SuperPuTTY\\*", - "*Downloads\\SuperPuTTY\\*", - "*\\superputty.exe", - "*\\SuperPuTTY\\*" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/superputty_processes_sigma.yml", - "Description": "Detects potential processes activity of SuperPuTTY RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Royal Apps", - "Description": "Royal Apps is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["royalserver.exe", "royalts.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/royal_apps_network_sigma.yml", - "Description": "Detects potential network activity of Royal Apps RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/royal_apps_processes_sigma.yml", - "Description": "Detects potential processes activity of Royal Apps RMM tool" - } - ], - "References": ["https://www.royalapps.com/ts/win/download"], - "Acknowledgement": [] - }, - { - "Name": "Tanium Deploy", - "Description": "Tanium Deploy is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["tanium.com/products/tanium-deploy"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/tanium_deploy_network_sigma.yml", - "Description": "Detects potential network activity of Tanium Deploy RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Zabbix Agent", - "Description": "Zabbix Agent is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/14/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["zabbix_agent*.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed", "zabbix.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/zabbix_agent_network_sigma.yml", - "Description": "Detects potential network activity of Zabbix Agent RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/zabbix_agent_processes_sigma.yml", - "Description": "Detects potential processes activity of Zabbix Agent RMM tool" - } - ], - "References": [ - "https://www.zabbix.com/documentation/current/en/manual/appendix/install/windows_agent" - ], - "Acknowledgement": [] - }, - { - "Name": "Weezo", - "Description": "Weezo is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/14/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["weezohttpd.exe", "weezo.exe", "weezo setup*.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "*.weezo.me", - "weezo.net", - "*.weezo.net", - "weezo.en.softonic.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/weezo_network_sigma.yml", - "Description": "Detects potential network activity of Weezo RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/weezo_processes_sigma.yml", - "Description": "Detects potential processes activity of Weezo RMM tool" - } - ], - "References": ["weezo.en.softonic.com"], - "Acknowledgement": [] - }, - { - "Name": "BeInSync", - "Description": "BeInSync is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/26/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["Beinsync*.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.beinsync.net", "*.beinsync.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/beinsync_network_sigma.yml", - "Description": "Detects potential network activity of BeInSync RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/beinsync_processes_sigma.yml", - "Description": "Detects potential processes activity of BeInSync RMM tool" - } - ], - "References": ["https://en.wikipedia.org/wiki/Phoenix_Technologies"], - "Acknowledgement": [] - }, - { - "Name": "ScreenMeet", - "Description": "ScreenMeet is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["ScreenMeetSupport.exe", "ScreenMeet.Support.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.screenmeet.com", "*.scrn.mt"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/screenmeet_network_sigma.yml", - "Description": "Detects potential network activity of ScreenMeet RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/screenmeet_processes_sigma.yml", - "Description": "Detects potential processes activity of ScreenMeet RMM tool" - } - ], - "References": ["https://docs.screenmeet.com/docs/firewall-white-list"], - "Acknowledgement": [] - }, - { - "Name": "MyIVO", - "Description": "MyIVO is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["myivomgr.exe", "myivomanager.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["myivo-server.software.informer.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/myivo_network_sigma.yml", - "Description": "Detects potential network activity of MyIVO RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/myivo_processes_sigma.yml", - "Description": "Detects potential processes activity of MyIVO RMM tool" - } - ], - "References": ["myivo.com - DOA as of 2024"], - "Acknowledgement": [] - }, - { - "Name": "LabTech RMM (Now ConnectWise Automate)", - "Description": "LabTech RMM (Now ConnectWise Automate) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["ltsvc.exe", "ltsvcmon.exe", "lttray.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["connectwise.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/labtech_rmm__now_connectwise_automate__network_sigma.yml", - "Description": "Detects potential network activity of LabTech RMM (Now ConnectWise Automate) RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/labtech_rmm__now_connectwise_automate__processes_sigma.yml", - "Description": "Detects potential processes activity of LabTech RMM (Now ConnectWise Automate) RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Kabuto", - "Description": "Kabuto is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["Kabuto.App.Runner.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.kabuto.io", "repairtechsolutions.com/kabuto/"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/kabuto_network_sigma.yml", - "Description": "Detects potential network activity of Kabuto RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/kabuto_processes_sigma.yml", - "Description": "Detects potential processes activity of Kabuto RMM tool" - } - ], - "References": ["https://www.repairtechsolutions.com/documentation/kabuto/"], - "Acknowledgement": [] - }, - { - "Name": "FreeRDP", - "Description": "FreeRDP is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "ZOC", - "Description": "ZOC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files\\ZOC8\\*", - "*\\ZOC?\\*", - "*\\zoc.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/zoc_processes_sigma.yml", - "Description": "Detects potential processes activity of ZOC RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "AliWangWang-remote-control", - "Description": "AliWangWang-remote-control is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["alitask.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["wangwang.taobao.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/aliwangwang-remote-control_network_sigma.yml", - "Description": "Detects potential network activity of AliWangWang-remote-control RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/aliwangwang-remote-control_processes_sigma.yml", - "Description": "Detects potential processes activity of AliWangWang-remote-control RMM tool" - } - ], - "References": [ - "https://github.com/KKomarov/AliWangWangEng/blob/master/chs.locale" - ], - "Acknowledgement": [] - }, - { - "Name": "Goverlan", - "Description": "Goverlan is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "goverrmc.exe", - "govsrv*.exe", - "GovAgentInstallHelper.exe", - "GovAgentx64.exe", - "GovReachClient.exe", - "C:\\Program Files (x86)\\PJ Technologies\\GOVsrv\\*", - "*\\PJ Technologies\\GOVsrv\\*", - "*\\GovSrv.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed", "goverlan.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/goverlan_network_sigma.yml", - "Description": "Detects potential network activity of Goverlan RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/goverlan_processes_sigma.yml", - "Description": "Detects potential processes activity of Goverlan RMM tool" - } - ], - "References": [ - "https://www.goverlan.com/pdf/Goverlan-Remote-Control-Software.pdf" - ], - "Acknowledgement": [] - }, - { - "Name": "Microsoft Quick Assist", - "Description": "Microsoft Quick Assist is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["quickassist.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/microsoft_quick_assist_network_sigma.yml", - "Description": "Detects potential network activity of Microsoft Quick Assist RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/microsoft_quick_assist_processes_sigma.yml", - "Description": "Detects potential processes activity of Microsoft Quick Assist RMM tool" - } - ], - "References": [ - "https://support.microsoft.com/en-us/windows/install-quick-assist-c17479b7-a49d-4d12-938c-dbfb97c88bca" - ], - "Acknowledgement": [] - }, - { - "Name": "N-Able Advanced Monitoring Agent", - "Description": "N-Able Advanced Monitoring Agent is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "BASupSrvc.exe", - "winagent.exe", - "BASupApp.exe", - "BASupTSHelper.exe", - "Agent_*_RW.exe", - "BASEClient.exe", - "BASupSrvcCnfg.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "*.beanywhere.com ", - "systemmonitor.co.uk", - "*system-monitor.com", - "cloudbackup.management", - "*systemmonitor.co.uk", - "n-able.com", - "systemmonitor.us", - "*systemmonitor.eu.com", - "*.logicnow.com", - "*.swi-tc.com", - "*remote.management", - "systemmonitor.us.cdn.cloudflare.net", - "*cloudbackup.management", - "remote.management", - "logicnow.com", - "system-monitor.com", - "*systemmonitor.us", - "systemmonitor.eu.com", - "*.n-able.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/n-able_advanced_monitoring_agent_network_sigma.yml", - "Description": "Detects potential network activity of N-Able Advanced Monitoring Agent RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/n-able_advanced_monitoring_agent_processes_sigma.yml", - "Description": "Detects potential processes activity of N-Able Advanced Monitoring Agent RMM tool" - } - ], - "References": [ - "https://documentation.n-able.com/takecontrol/troubleshooting/Content/kb/Take-Control-Standalone-Ports-and-Domains-Firewall-and-AV-Exclusions.htm" - ], - "Acknowledgement": [] - }, - { - "Name": "Ocamlfuse", - "Description": "Ocamlfuse is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "MyGreenPC", - "Description": "MyGreenPC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/26/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["mygreenpc.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*mygreenpc.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/mygreenpc_network_sigma.yml", - "Description": "Detects potential network activity of MyGreenPC RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/mygreenpc_processes_sigma.yml", - "Description": "Detects potential processes activity of MyGreenPC RMM tool" - } - ], - "References": ["http://www.mygreenpc.com/"], - "Acknowledgement": [] - }, - { - "Name": "Syncthing", - "Description": "Syncthing is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Users\\*\\AppData\\Roaming\\SyncTrayzor\\*", - "*Users\\*\\AppData\\Roaming\\SyncTrayzor\\*", - "*\\Syncthing.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/syncthing_processes_sigma.yml", - "Description": "Detects potential processes activity of Syncthing RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Chrome Remote Desktop", - "Description": "Chrome Remote Desktop is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "remote_host.exe", - "remoting_host.exe", - "C:\\Program Files (x86)\\Google\\Chrome Remote Desktop\\*", - "*\\Google\\Chrome Remote Desktop\\*", - "*\\remoting_host.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "*remotedesktop.google.com", - "*remotedesktop-pa.googleapis.com", - "remotedesktop.google.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/chrome_remote_desktop_network_sigma.yml", - "Description": "Detects potential network activity of Chrome Remote Desktop RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/chrome_remote_desktop_processes_sigma.yml", - "Description": "Detects potential processes activity of Chrome Remote Desktop RMM tool" - } - ], - "References": ["https://support.google.com/chrome/a/answer/2799701?hl=en"], - "Acknowledgement": [] - }, - { - "Name": "Microsoft RDP", - "Description": "Microsoft RDP is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "termsrv.exe", - "mstsc.exe", - "Microsoft Remote Desktop" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/microsoft_rdp_processes_sigma.yml", - "Description": "Detects potential processes activity of Microsoft RDP RMM tool" - } - ], - "References": [ - "https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/clients/windows" - ], - "Acknowledgement": [] - }, - { - "Name": "Chrome Remote Desktop", - "Description": "Chrome Remote Desktop is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "remote_host.exe", - "remoting_host.exe", - "C:\\Program Files (x86)\\Google\\Chrome Remote Desktop\\*", - "*\\Google\\Chrome Remote Desktop\\*", - "*\\remoting_host.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "*remotedesktop-pa.googleapis.com", - "*remotedesktop.google.com", - "remotedesktop.google.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/chrome_remote_desktop_network_sigma.yml", - "Description": "Detects potential network activity of Chrome Remote Desktop RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/chrome_remote_desktop_processes_sigma.yml", - "Description": "Detects potential processes activity of Chrome Remote Desktop RMM tool" - } - ], - "References": ["https://support.google.com/chrome/a/answer/2799701?hl=en"], - "Acknowledgement": [] - }, - { - "Name": "Remote Desktop Plus", - "Description": "Remote Desktop Plus is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["rdp.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["donkz.nl"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remote_desktop_plus_network_sigma.yml", - "Description": "Detects potential network activity of Remote Desktop Plus RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remote_desktop_plus_processes_sigma.yml", - "Description": "Detects potential processes activity of Remote Desktop Plus RMM tool" - } - ], - "References": ["https://www.donkz.nl/"], - "Acknowledgement": [] - }, - { - "Name": "NateOn-desktop sharing", - "Description": "NateOn-desktop sharing is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["nateon*.exe", "nateon.exe", "nateonmain.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.nate.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/nateon-desktop_sharing_network_sigma.yml", - "Description": "Detects potential network activity of NateOn-desktop sharing RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/nateon-desktop_sharing_processes_sigma.yml", - "Description": "Detects potential processes activity of NateOn-desktop sharing RMM tool" - } - ], - "References": ["http://rsupport.nate.com/rview/r8/main/index.aspx"], - "Acknowledgement": [] - }, - { - "Name": "Barracuda", - "Description": "Barracuda is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "*.islonline.net", - "rmm.barracudamsp.com", - "barracudamsp.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/barracuda_network_sigma.yml", - "Description": "Detects potential network activity of Barracuda RMM tool" - } - ], - "References": ["https://help.islonline.com/19799/166125"], - "Acknowledgement": [] - }, - { - "Name": "Dropbox", - "Description": "Dropbox is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files (x86)\\Dropbox\\Client\\*", - "*\\Dropbox\\Client\\*", - "*\\Dropbox.exe", - "*Users\\*\\Dropbox\\bin\\" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/dropbox_processes_sigma.yml", - "Description": "Detects potential processes activity of Dropbox RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "CrossTec Remote Control", - "Description": "CrossTec Remote Control is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["PCIVIDEO.EXE", "supporttool.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed", "crosstecsoftware.com/remotecontrol"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/crosstec_remote_control_network_sigma.yml", - "Description": "Detects potential network activity of CrossTec Remote Control RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/crosstec_remote_control_processes_sigma.yml", - "Description": "Detects potential processes activity of CrossTec Remote Control RMM tool" - } - ], - "References": [ - "www.crosstecsoftware.com/supporthome.html - domain DOA 2/1/2024" - ], - "Acknowledgement": [] - }, - { - "Name": "DeskDay", - "Description": "DeskDay is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["ultimate_*.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["deskday.ai", "app.deskday.ai"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/deskday_network_sigma.yml", - "Description": "Detects potential network activity of DeskDay RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/deskday_processes_sigma.yml", - "Description": "Detects potential processes activity of DeskDay RMM tool" - } - ], - "References": [ - "https://support.deskday.ai/en/articles/8235973-installing-the-end-user-application-ultimate" - ], - "Acknowledgement": [] - }, - { - "Name": "mRemoteNG", - "Description": "mRemoteNG is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "mRemoteNG.exe", - "C:\\Program Files (x86)\\mRemoteNG\\*", - "*\\mRemoteNG\\*", - "*\\mRemoteNG.exe", - "c:\\Program Files (x86)%\\mRemoteNG", - "*%\\mRemoteNG", - "mRemoteNG-Installer-*.msi", - "*\\mRemoteNG.exe" - ] - }, - "Artifacts": { - "Disk": [ - { - "File": "C:\\Users\\*\\AppData\\Roaming\\mRemoteNG\\mRemoteNG.log", - "Description": "mRemoteNG log file", - "OS": "Windows" - }, - { - "File": "C:\\Users\\*\\AppData\\Roaming\\mRemoteNG\\confCons.xml", - "Description": "mRemoteNG configuration file", - "OS": "Windows" - }, - { - "File": "C:\\Users\\*\\AppData\\*\\mRemoteNG\\**10\\user.config", - "Description": "mRemoteNG user configuration file", - "OS": "Windows" - } - ], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed", "mremoteng.org"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/mremoteng_network_sigma.yml", - "Description": "Detects potential network activity of mRemoteNG RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/mremoteng_files_sigma.yml", - "Description": "Detects potential files activity of mRemoteNG RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/mremoteng_processes_sigma.yml", - "Description": "Detects potential processes activity of mRemoteNG RMM tool" - } - ], - "References": ["https://github.com/mRemoteNG/mRemoteNG"], - "Acknowledgement": [] - }, - { - "Name": "FreeNX", - "Description": "FreeNX is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["C:\\*\\nxplayer.exe", "*\\nxplayer.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/freenx_processes_sigma.yml", - "Description": "Detects potential processes activity of FreeNX RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "NetSupport Manager", - "Description": "NetSupport Manager is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["pcictlui.exe", "client32.exe", "pcicfgui.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "geo.netsupportsoftware.com", - "netsupportmanager.com", - "*.netsupportmanager.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/netsupport_manager_network_sigma.yml", - "Description": "Detects potential network activity of NetSupport Manager RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/netsupport_manager_processes_sigma.yml", - "Description": "Detects potential processes activity of NetSupport Manager RMM tool" - } - ], - "References": ["https://www.netsupportmanager.com/resources/"], - "Acknowledgement": [] - }, - { - "Name": "rdp2tcp", - "Description": "rdp2tcp is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["tdp2tcp.exe", "rdp2tcp.py"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed", "github.com/V-E-O/rdp2tcp"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rdp2tcp_network_sigma.yml", - "Description": "Detects potential network activity of rdp2tcp RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rdp2tcp_processes_sigma.yml", - "Description": "Detects potential processes activity of rdp2tcp RMM tool" - } - ], - "References": ["github.com/V-E-O/rdp2tcp"], - "Acknowledgement": [] - }, - { - "Name": "ITSupport247 (ConnectWise)", - "Description": "ITSupport247 (ConnectWise) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["saazapsc.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.itsupport247.net", "itsupport247.net"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/itsupport247__connectwise__network_sigma.yml", - "Description": "Detects potential network activity of ITSupport247 (ConnectWise) RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/itsupport247__connectwise__processes_sigma.yml", - "Description": "Detects potential processes activity of ITSupport247 (ConnectWise) RMM tool" - } - ], - "References": ["https://control.itsupport247.net/"], - "Acknowledgement": [] - }, - { - "Name": "Pulseway", - "Description": "Pulseway is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["PCMonitorManager.exe", "pcmonitorsrv.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["pulseway.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pulseway_network_sigma.yml", - "Description": "Detects potential network activity of Pulseway RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pulseway_processes_sigma.yml", - "Description": "Detects potential processes activity of Pulseway RMM tool" - } - ], - "References": ["https://intercom.help/pulseway/en/"], - "Acknowledgement": [] - }, - { - "Name": "Naverisk", - "Description": "Naverisk is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["AgentSetup-*.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed", "naverisk.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/naverisk_network_sigma.yml", - "Description": "Detects potential network activity of Naverisk RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/naverisk_processes_sigma.yml", - "Description": "Detects potential processes activity of Naverisk RMM tool" - } - ], - "References": [ - "http://kb.naverisk.com/en/articles/2811223-deploying-naverisk-agents" - ], - "Acknowledgement": [] - }, - { - "Name": "Total Software Deployment", - "Description": "Total Software Deployment is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\ProgramData\\Total Software Deployment\\*", - "*\\Total Software Deployment\\*", - "*\\tniwinagent.exe", - "*\\Tsdservice.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/total_software_deployment_processes_sigma.yml", - "Description": "Detects potential processes activity of Total Software Deployment RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "ISL Online", - "Description": "ISL Online is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "islalwaysonmonitor.exe", - "isllight.exe", - "isllightservice.exe", - "ISLLightClient.exe", - "C:\\Program Files (x86)\\ISL Online\\ISL Light*", - "*\\ISL Online\\ISL Light*", - "*\\ISLLight.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.islonline.com", "*.islonline.net"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/isl_online_network_sigma.yml", - "Description": "Detects potential network activity of ISL Online RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/isl_online_processes_sigma.yml", - "Description": "Detects potential processes activity of ISL Online RMM tool" - } - ], - "References": ["https://help.islonline.com/19818/165940"], - "Acknowledgement": [] - }, - { - "Name": "NinjaOne (formerly NinjaRMM)", - "Description": "NinjaOne (formerly NinjaRMM) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["*ProgramData\\NinjaRMMAgent\\*"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Microsoft OneDrive", - "Description": "Microsoft OneDrive is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "QQ IM-remote assistance", - "Description": "QQ IM-remote assistance is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["qq.exe", "QQProtect.exe", "qqpcmgr.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "*.mdt.qq.com", - "*.desktop.qq.com", - "upload_data.qq.com", - "qq-messenger.en.softonic.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/qq_im-remote_assistance_network_sigma.yml", - "Description": "Detects potential network activity of QQ IM-remote assistance RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/qq_im-remote_assistance_processes_sigma.yml", - "Description": "Detects potential processes activity of QQ IM-remote assistance RMM tool" - } - ], - "References": ["https://en.wikipedia.org/wiki/Tencent_QQ"], - "Acknowledgement": [] - }, - { - "Name": "Distant Desktop", - "Description": "Distant Desktop is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["ddsystem.exe", "dd.exe", "distant-desktop.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.distantdesktop.com", "*signalserver.xyz"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/distant_desktop_network_sigma.yml", - "Description": "Detects potential network activity of Distant Desktop RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/distant_desktop_processes_sigma.yml", - "Description": "Detects potential processes activity of Distant Desktop RMM tool" - } - ], - "References": ["https://www.distantdesktop.com/manual/first-start.htm"], - "Acknowledgement": [] - }, - { - "Name": "FixMe.it", - "Description": "FixMe.it is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "FixMeit Unattended Access Setup.exe", - "TiExpertStandalone.exe", - "FixMeitClient*.exe", - "FixMeit Client.exe", - "FixMeit Expert Setup.exe", - "TiExpertCore.exe", - "fixmeitclient.exe", - "TiClientCore.exe", - "TiClientHelper*.exe", - "no installation required | recommend blocking fixme[.]it SaaS portal", - "no installation required | recommend blocking fixme[.]it SaaS portal", - "9380CC75B872221A7425D7503565B67580407F60" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "*.fixme.it", - "*.techinline.net", - "fixme.it", - "*set.me", - "*setme.net" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/fixme.it_network_sigma.yml", - "Description": "Detects potential network activity of FixMe.it RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/fixme.it_processes_sigma.yml", - "Description": "Detects potential processes activity of FixMe.it RMM tool" - } - ], - "References": [ - "https://docs.fixme.it/general-questions/which-ports-and-servers-does-fixme-it-use" - ], - "Acknowledgement": [] - }, - { - "Name": "FileZilla", - "Description": "FileZilla is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files\\FileZilla FTP Client\\*", - "*\\FileZilla FTP Client\\*", - "*\\FileZilla.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/filezilla_processes_sigma.yml", - "Description": "Detects potential processes activity of FileZilla RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Microsoft RDP", - "Description": "Microsoft RDP is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["mstsc.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/microsoft_rdp_processes_sigma.yml", - "Description": "Detects potential processes activity of Microsoft RDP RMM tool" - } - ], - "References": [ - "https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/clients/windows" - ], - "Acknowledgement": [] - }, - { - "Name": "RuDesktop", - "Description": "RuDesktop is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/9/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["rd.exe", "rudesktop*.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.rudesktop.ru", "rudesktop.ru"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rudesktop_network_sigma.yml", - "Description": "Detects potential network activity of RuDesktop RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rudesktop_processes_sigma.yml", - "Description": "Detects potential processes activity of RuDesktop RMM tool" - } - ], - "References": ["https://rudesktop.ru"], - "Acknowledgement": [] - }, - { - "Name": "BeyondTrust (Bomgar)", - "Description": "BeyondTrust (Bomgar) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "bomgar-scc-*.exe", - "bomgar-scc.exe", - "bomgar-pac-*.exe", - "bomgar-pac.exe", - "bomgar-rdp.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "*.beyondtrustcloud.com", - "*.bomgarcloud.com", - "bomgarcloud.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/beyondtrust__bomgar__network_sigma.yml", - "Description": "Detects potential network activity of BeyondTrust (Bomgar) RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/beyondtrust__bomgar__processes_sigma.yml", - "Description": "Detects potential processes activity of BeyondTrust (Bomgar) RMM tool" - } - ], - "References": [ - "https://www.beyondtrust.com/docs/remote-support/getting-started/deployment/cloud/network.htm" - ], - "Acknowledgement": [] - }, - { - "Name": "FreeFileSync", - "Description": "FreeFileSync is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files\\FreeFileSync\\*", - "*\\FreeFileSync\\*", - "*\\FreeFileSync.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/freefilesync_processes_sigma.yml", - "Description": "Detects potential processes activity of FreeFileSync RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "TightVNC", - "Description": "TightVNC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/14/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "tvnviewer.exe", - "TightVNCViewerPortable*.exe", - "tvnserver.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed", "tightvnc.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/tightvnc_network_sigma.yml", - "Description": "Detects potential network activity of TightVNC RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/tightvnc_processes_sigma.yml", - "Description": "Detects potential processes activity of TightVNC RMM tool" - } - ], - "References": [ - "https://www.tightvnc.com/doc/win/TightVNC_for_Windows-Installation_and_Getting_Started.pdf" - ], - "Acknowledgement": [] - }, - { - "Name": "MeshCentral", - "Description": "MeshCentral is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["meshcentral*.exe", "mesh*.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["user_managed", "meshcentral.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/meshcentral_network_sigma.yml", - "Description": "Detects potential network activity of MeshCentral RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/meshcentral_processes_sigma.yml", - "Description": "Detects potential processes activity of MeshCentral RMM tool" - } - ], - "References": ["https://ylianst.github.io/MeshCentral/meshcentral/"], - "Acknowledgement": [] - }, - { - "Name": "CuteFTP", - "Description": "CuteFTP is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files (x86)\\Globalscape\\CuteFTP\\*", - "*\\Globalscape\\CuteFTP\\*", - "*\\cuteftppro.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/cuteftp_processes_sigma.yml", - "Description": "Detects potential processes activity of CuteFTP RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Dev Tunnels (aka Visual Studio Dev Tunnel)", - "Description": "Dev Tunnels (aka Visual Studio Dev Tunnel) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "learn.microsoft.com/en-us/azure/developer/dev-tunnels/overview" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/dev_tunnels__aka_visual_studio_dev_tunnel__network_sigma.yml", - "Description": "Detects potential network activity of Dev Tunnels (aka Visual Studio Dev Tunnel) RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "CarotDAV", - "Description": "CarotDAV is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files (x86)\\Rei Software\\CarotDAV\\*", - "*\\Rei Software\\CarotDAV\\*", - "*\\CarotDAV.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/carotdav_processes_sigma.yml", - "Description": "Detects potential processes activity of CarotDAV RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Bitvise SSH Server", - "Description": "Bitvise SSH Server is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": [ - "C:\\Program Files\\Bitvise SSH Server\\*", - "*\\Bitvise SSH Server\\*", - "*\\BvSshServer-Inst.exe" - ] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/bitvise_ssh_server_processes_sigma.yml", - "Description": "Detects potential processes activity of Bitvise SSH Server RMM tool" - } - ], - "References": [], - "Acknowledgement": [] - }, - { - "Name": "Pandora RC (eHorus)", - "Description": "Pandora RC (eHorus) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["ehorus standalone.exe", "ehorus_agent.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["portal.ehorus.com"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pandora_rc__ehorus__network_sigma.yml", - "Description": "Detects potential network activity of Pandora RC (eHorus) RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pandora_rc__ehorus__processes_sigma.yml", - "Description": "Detects potential processes activity of Pandora RC (eHorus) RMM tool" - } - ], - "References": [ - "https://pandorafms.com/manual/!current/en/documentation/09_pandora_rc/01_pandora_rc_introduction" - ], - "Acknowledgement": [] - }, - { - "Name": "DW Service", - "Description": "DW Service is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/7/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["dwagsvc.exe", "dwagent.exe", "dwagsvc.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": ["*.dwservice.net"], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/dw_service_network_sigma.yml", - "Description": "Detects potential network activity of DW Service RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/dw_service_processes_sigma.yml", - "Description": "Detects potential processes activity of DW Service RMM tool" - } - ], - "References": [ - "https://news.dwservice.net/dwservice-security-infrastructure/" - ], - "Acknowledgement": [] - }, - { - "Name": "Iperius Remote", - "Description": "Iperius Remote is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", - "Author": "", - "Created": "", - "LastModified": "2/8/2024", - "Details": { - "Website": "", - "PEMetadata": { - "Filename": "", - "OriginalFileName": "", - "Description": "" - }, - "Privileges": "", - "Free": "", - "Verification": "", - "SupportedOS": [], - "Capabilities": [], - "Vulnerabilities": [], - "InstallationPaths": ["iperius.exe", "iperiusremote.exe"] - }, - "Artifacts": { - "Disk": [], - "EventLog": [], - "Registry": [], - "Network": [ - { - "Description": "Known remote domains", - "Domains": [ - "*.iperiusremote.com", - "*.iperius.com", - "*.iperius-rs.com", - "iperiusremote.com" - ], - "Ports": [] - } - ] - }, - "Detections": [ - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/iperius_remote_network_sigma.yml", - "Description": "Detects potential network activity of Iperius Remote RMM tool" - }, - { - "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/iperius_remote_processes_sigma.yml", - "Description": "Detects potential processes activity of Iperius Remote RMM tool" - } - ], - "References": [ - "https://www.iperiusremote.com/download-iperius-remote-desktop-windows.aspx" - ], - "Acknowledgement": [] - } -] + { + "Name": "Rapid7", + "Description": "Rapid7 is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/14/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "ir_agent.exe", + "rapid7_agent_core.exe", + "rapid7_endpoint_broker.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.analytics.insight.rapid7.com", + "*.endpoint.ingress.rapid7.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rapid7_network_sigma.yml", + "Description": "Detects potential network activity of Rapid7 RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rapid7_processes_sigma.yml", + "Description": "Detects potential processes activity of Rapid7 RMM tool" + } + ], + "References": [ + "https://docs.rapid7.com/insightvm/configure-communications-with-the-insight-platform/" + ], + "Acknowledgement": [] + }, + { + "Name": "SunLogin", + "Description": "SunLogin is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/26/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "OrayRemoteShell.exe", + "OrayRemoteService.exe", + "sunlogin*.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "sunlogin.oray.com", + "client.oray.net" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/sunlogin_network_sigma.yml", + "Description": "Detects potential network activity of SunLogin RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/sunlogin_processes_sigma.yml", + "Description": "Detects potential processes activity of SunLogin RMM tool" + } + ], + "References": [ + "https://sunlogin.oray.com/en/embed/software.html" + ], + "Acknowledgement": [] + }, + { + "Name": "CloudFuze", + "Description": "CloudFuze is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Box", + "Description": "Box is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files\\Box\\Box\\*", + "*\\Box\\Box\\*", + "*\\Box.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/box_processes_sigma.yml", + "Description": "Detects potential processes activity of Box RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "GoToAssist Agent Desktop Console", + "Description": "GoToAssist Agent Desktop Console is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\*\\G2RDesktopConsole-x64.msi", + "*\\G2RDesktopConsole-x64.msi" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Kaseya (VSA)", + "Description": "Kaseya (VSA) aka Unigma is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.\n", + "Author": "Nasreddine Bencherchali", + "Created": "2024-08-05", + "LastModified": "2024-08-05", + "Details": { + "Website": "", + "PEMetadata": [ + { + "Filename": "agentmon.exe" + }, + { + "Filename": "KaUpdHlp.exe" + }, + { + "Filename": "KaUsrTsk.exe", + "OriginalFileName": "", + "Description": "" + } + ], + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files (x86)\\Kaseya\\", + "C:\\ProgramData\\Kaseya\\" + ] + }, + "Artifacts": { + "Disk": [ + { + "File": "%localappdata%\\Kaseya\\Log\\KaseyaLiveConnect\\*", + "Description": "Kaseya Live Connect logs", + "OS": "Windows" + }, + { + "File": "~/Library/Logs/com.kaseya/KaseyaLiveConnect/*", + "Description": "Kaseya Live Connect logs", + "OS": "MacOS" + }, + { + "File": "C:\\ProgramData\\Kaseya\\Log\\Endpoint\\*", + "Description": "Kaseya Endpoint logs", + "OS": "Windows" + }, + { + "File": "C:\\Program Files*\\Kaseya\\*\\agentmon.log", + "Description": "Kaseya Agent Monitor log" + }, + { + "File": "/var/log/system.log", + "Description": "Kaseya Agent Monitor log", + "OS": "MacOS 32bit" + }, + { + "File": " ~/opt/kaseya/*/logs*", + "Description": "Kaseya Agent Monitor log", + "OS": "MacOS 64bit" + }, + { + "File": "C:\\Users\\*\\AppData\\Local\\Temp\\KASetup.log", + "Description": "Kaseya Setup log in user temp directory", + "OS": "Windows" + }, + { + "File": "C:\\Windows\\Temp\\KASetup.log", + "Description": "Kaseya Setup log in Windows temp directory", + "OS": "Windows" + }, + { + "File": "C:\\ProgramData\\Kaseya\\Log\\KaseyaEdgeServices\\*", + "Description": "Kaseya Edge Services logs", + "OS": "Windows" + }, + { + "File": "C:\\Kaseya\\api\\v1.0\\logs\\", + "Description": "Kaseya API logs", + "OS": "Windows" + }, + { + "File": "C:\\Kaseya\\api\\v1.5\\endpoint\\logs", + "Description": "Kaseya API logs", + "OS": "Windows" + }, + { + "File": "C:\\Kaseya\\api\\v1.5\\endpoints\\logs", + "Description": "Kaseya API logs", + "OS": "Windows" + }, + { + "File": "C:\\Windows\\System32\\config\\systemprofile\\AppData\\Local\\Kaseya\\Log\\MakeSelfSignedCert.exe\\", + "Description": "Certificate creation", + "OS": "Windows" + }, + { + "File": "C:\\Kaseya\\WebPages\\install\\makecert.txt", + "Description": "Certificate creation", + "OS": "Windows" + }, + { + "File": "C:\\ProgramData\\Kaseya\\Log\\Endpoint\\Instance_*\\KaseyaEndpoint*", + "Description": "Endpoint service logs", + "OS": "Windows" + }, + { + "File": "C:\\ProgramData\\Kaseya\\Log\\Endpoint\\Instance_*\\Session_*", + "Description": "Session logs", + "OS": "Windows" + } + ], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "deploy01.kaseya.com", + "*managedsupport.kaseya.net", + "*.kaseya.net", + "kaseya.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/kaseya__vsa__network_sigma.yml", + "Description": "Detects potential network activity of Kaseya (VSA) RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/kaseya__vsa__files_sigma.yml", + "Description": "Detects potential files activity of Kaseya (VSA) RMM tool" + } + ], + "References": [ + "https://helpdesk.kaseya.com/hc/en-gb/articles/229012608-Software-Deployment-URL-Port-Requirements", + "https://helpdesk.kaseya.com/hc/en-gb/articles/229009708-Live-Connect-Log-File-Locations", + "https://ruler-project.github.io/ruler-project/RULER/remote/Kaseya/", + "https://helpdesk.kaseya.com/hc/en-gb/articles/229009708-Live-Connect-Log-File-Locations" + ], + "Acknowledgement": [] + }, + { + "Name": "PuTTY Tray", + "Description": "PuTTY Tray is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\*\\puttytray.exe", + "*\\puttytray.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/putty_tray_processes_sigma.yml", + "Description": "Detects potential processes activity of PuTTY Tray RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Azure Storage Explorer", + "Description": "Azure Storage Explorer is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files (x86)\\Microsoft Azure Storage Explorer\\*", + "*\\Microsoft Azure Storage Explorer\\*", + "*\\StorageExplorer.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/azure_storage_explorer_processes_sigma.yml", + "Description": "Detects potential processes activity of Azure Storage Explorer RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "SysAid", + "Description": "SysAid is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files\\SysAidServer\\*", + "*\\SysAidServer\\*", + "*\\SysAid\\*", + "*\\IliAS.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/sysaid_processes_sigma.yml", + "Description": "Detects potential processes activity of SysAid RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Domotz", + "Description": "Domotz is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "domotz.exe", + "Domotz Pro Desktop App.exe", + "domotz_bash.exe", + "domotz*.exe", + "Domotz Pro Desktop App Setup*.exe", + "domotz-windows*.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.domotz.co", + "domotz.com", + "*cell-1.domotz.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/domotz_network_sigma.yml", + "Description": "Detects potential network activity of Domotz RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/domotz_processes_sigma.yml", + "Description": "Detects potential processes activity of Domotz RMM tool" + } + ], + "References": [ + "https://help.domotz.com/tips-tricks/unblock-outgoing-connections-on-firewall/" + ], + "Acknowledgement": [] + }, + { + "Name": "BeyondTrust", + "Description": "BeyondTrust is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Netop Remote Control (aka Impero Connect)", + "Description": "Netop Remote Control (aka Impero Connect) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "nhostsvc.exe", + "nhstw32.exe", + "nldrw32.exe", + "rmserverconsolemediator.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "imperosoftware.com/impero-connect/" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/netop_remote_control__aka_impero_connect__network_sigma.yml", + "Description": "Detects potential network activity of Netop Remote Control (aka Impero Connect) RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/netop_remote_control__aka_impero_connect__processes_sigma.yml", + "Description": "Detects potential processes activity of Netop Remote Control (aka Impero Connect) RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Bomgar - Now BeyondTrust", + "Description": "Bomgar - Now BeyondTrust is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Microsoft TSC", + "Description": "Microsoft TSC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "termsrv.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/microsoft_tsc_processes_sigma.yml", + "Description": "Detects potential processes activity of Microsoft TSC RMM tool" + } + ], + "References": [ + "https://learn.microsoft.com/en-us/troubleshoot/windows-server/remote/terminal-server-startup-connection-application" + ], + "Acknowledgement": [] + }, + { + "Name": "Jump Desktop", + "Description": "Jump Desktop is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "jumpclient.exe", + "jumpdesktop.exe", + "jumpservice.exe", + "jumpconnect.exe", + "jumpupdater.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.jumpdesktop.com", + "jumpdesktop.com", + "jumpto.me", + "*.jumpto.me" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/jump_desktop_network_sigma.yml", + "Description": "Detects potential network activity of Jump Desktop RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/jump_desktop_processes_sigma.yml", + "Description": "Detects potential processes activity of Jump Desktop RMM tool" + } + ], + "References": [ + "https://support.jumpdesktop.com/hc/en-us/articles/360042490351-Administrators-Guide-For-Jump-Desktop-Connect" + ], + "Acknowledgement": [] + }, + { + "Name": "IntelliAdmin Remote Control", + "Description": "IntelliAdmin Remote Control is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "iadmin.exe", + "intelliadmin.exe", + "agent32.exe", + "agent64.exe", + "agent_setup_5.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed", + "*.intelliadmin.com", + "intelliadmin.com/remote-control" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/intelliadmin_remote_control_network_sigma.yml", + "Description": "Detects potential network activity of IntelliAdmin Remote Control RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/intelliadmin_remote_control_processes_sigma.yml", + "Description": "Detects potential processes activity of IntelliAdmin Remote Control RMM tool" + } + ], + "References": [ + "intelliadmin.com/remote-control" + ], + "Acknowledgement": [] + }, + { + "Name": "Chrome SSH Extension", + "Description": "Chrome SSH Extension is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Users\\*\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\iodihamcpbpeioajjeobimgagajmlibd*", + "*Users\\*\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\iodihamcpbpeioajjeobimgagajmlibd*" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "ZeroTier", + "Description": "ZeroTier is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/14/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "zerotier*.msi", + "zerotier*.exe", + "zero-powershell.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "zerotier.com", + "*.zerotier.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/zerotier_network_sigma.yml", + "Description": "Detects potential network activity of ZeroTier RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/zerotier_processes_sigma.yml", + "Description": "Detects potential processes activity of ZeroTier RMM tool" + } + ], + "References": [ + "https://my.zerotier.com/" + ], + "Acknowledgement": [] + }, + { + "Name": "Ericom AccessNow", + "Description": "Ericom AccessNow is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "accessserver*.exe", + "accessserver.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed", + "ericom.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ericom_accessnow_network_sigma.yml", + "Description": "Detects potential network activity of Ericom AccessNow RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ericom_accessnow_processes_sigma.yml", + "Description": "Detects potential processes activity of Ericom AccessNow RMM tool" + } + ], + "References": [ + "https://www.ericom.com/connect-accessnow/" + ], + "Acknowledgement": [] + }, + { + "Name": "RealVNC", + "Description": "RealVNC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Pcnow", + "Description": "Pcnow is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "mwcliun.exe", + "pcnmgr.exe", + "webexpcnow.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "au.pcmag.com/utilities/21470/webex-pcnow" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pcnow_network_sigma.yml", + "Description": "Detects potential network activity of Pcnow RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pcnow_processes_sigma.yml", + "Description": "Detects potential processes activity of Pcnow RMM tool" + } + ], + "References": [ + "http://pcnow.webex.com/ - DOA as of 2024" + ], + "Acknowledgement": [] + }, + { + "Name": "DesktopNow", + "Description": "DesktopNow is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/26/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "desktopnow.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.nchuser.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/desktopnow_network_sigma.yml", + "Description": "Detects potential network activity of DesktopNow RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/desktopnow_processes_sigma.yml", + "Description": "Detects potential processes activity of DesktopNow RMM tool" + } + ], + "References": [ + "https://forums.ivanti.com/s/article/Network-Ports-used-by-Environment-Manager?language=en_US" + ], + "Acknowledgement": [] + }, + { + "Name": "Pocket Controller (Soti Xsight)", + "Description": "Pocket Controller (Soti Xsight) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "pocketcontroller.exe", + "wysebrowser.exe", + "XSightService.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*soti.net" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pocket_controller__soti_xsight__network_sigma.yml", + "Description": "Detects potential network activity of Pocket Controller (Soti Xsight) RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pocket_controller__soti_xsight__processes_sigma.yml", + "Description": "Detects potential processes activity of Pocket Controller (Soti Xsight) RMM tool" + } + ], + "References": [ + "https://pulse.soti.net/support/soti-xsight/help/" + ], + "Acknowledgement": [] + }, + { + "Name": "Instant Housecall", + "Description": "Instant Housecall is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "hsloader.exe", + "ihcserver.exe", + "instanthousecall.exe", + "instanthousecall.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.instanthousecall.com", + "*.instanthousecall.net", + "instanthousecall.com", + "secure.instanthousecall.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/instant_housecall_network_sigma.yml", + "Description": "Detects potential network activity of Instant Housecall RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/instant_housecall_processes_sigma.yml", + "Description": "Detects potential processes activity of Instant Housecall RMM tool" + } + ], + "References": [ + "https://instanthousecall.com/features/" + ], + "Acknowledgement": [] + }, + { + "Name": "CentraStage (Now Datto)", + "Description": "CentraStage (Now Datto) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "CagService.exe", + "AEMAgent.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.rmm.datto.com", + "*cc.centrastage.net", + "datto.com/au/products/rmm/" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/centrastage__now_datto__network_sigma.yml", + "Description": "Detects potential network activity of CentraStage (Now Datto) RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/centrastage__now_datto__processes_sigma.yml", + "Description": "Detects potential processes activity of CentraStage (Now Datto) RMM tool" + } + ], + "References": [ + "https://rmm.datto.com/help/de/Content/1INTRODUCTION/Requirements/AllowListRequirements.htm" + ], + "Acknowledgement": [] + }, + { + "Name": "Core FTP", + "Description": "Core FTP is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\*\\coreftplite.exe", + "*\\coreftplite.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/core_ftp_processes_sigma.yml", + "Description": "Detects potential processes activity of Core FTP RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Insync", + "Description": "Insync is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Users\\USERNAME\\AppData\\Roaming\\Insync\\App\\Insync.exe", + "*Users\\*\\AppData\\Roaming\\Insync\\App\\Insync.exe", + "*\\Insync.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/insync_processes_sigma.yml", + "Description": "Detects potential processes activity of Insync RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Microsoft TSC", + "Description": "Microsoft TSC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "termsrv.exe", + "mstsc.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/microsoft_tsc_processes_sigma.yml", + "Description": "Detects potential processes activity of Microsoft TSC RMM tool" + } + ], + "References": [ + "https://learn.microsoft.com/en-us/troubleshoot/windows-server/remote/terminal-server-startup-connection-application" + ], + "Acknowledgement": [] + }, + { + "Name": "LogMeIn rescue", + "Description": "LogMeIn rescue is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "support-logmeinrescue*.exe", + "support-logmeinrescue.exe", + "lmi_rescue.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.logmeinrescue.com", + "*.logmeinrescue.eu", + "logmeinrescue.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/logmein_rescue_network_sigma.yml", + "Description": "Detects potential network activity of LogMeIn rescue RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/logmein_rescue_processes_sigma.yml", + "Description": "Detects potential processes activity of LogMeIn rescue RMM tool" + } + ], + "References": [ + "https://support.logmeinrescue.com/rescue/help/allowlisting-and-rescue" + ], + "Acknowledgement": [] + }, + { + "Name": "Electric AI (Kaseya)", + "Description": "Electric AI (Kaseya) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [ + "https://www.electric.ai/product/device-management-solutions - Usess Kaseya/jamf" + ], + "Acknowledgement": [] + }, + { + "Name": "Adobe Connect", + "Description": "Adobe Connect is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/27/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "ConnectAppSetup*.exe", + "ConnectShellSetup*.exe", + "Connect.exe", + "ConnectDetector.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.adobeconnect.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/adobe_connect_network_sigma.yml", + "Description": "Detects potential network activity of Adobe Connect RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/adobe_connect_processes_sigma.yml", + "Description": "Detects potential processes activity of Adobe Connect RMM tool" + } + ], + "References": [ + "https://helpx.adobe.com/adobe-connect/firewall-proxy-server-configuration-adobe-connect.html" + ], + "Acknowledgement": [] + }, + { + "Name": "CloudFlare Tunnel", + "Description": "CloudFlare Tunnel is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "cloudflared.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "cloudflare.com/products/tunnel/" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/cloudflare_tunnel_network_sigma.yml", + "Description": "Detects potential network activity of CloudFlare Tunnel RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/cloudflare_tunnel_processes_sigma.yml", + "Description": "Detects potential processes activity of CloudFlare Tunnel RMM tool" + } + ], + "References": [ + "cloudflare.com/products/tunnel/" + ], + "Acknowledgement": [] + }, + { + "Name": "DriveMaker", + "Description": "DriveMaker is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\*\\DriveMaker.exe", + "*\\DriveMaker.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/drivemaker_processes_sigma.yml", + "Description": "Detects potential processes activity of DriveMaker RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "mstsc", + "Description": "mstsc is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Windows\\System32\\mstsc.exe", + "*Windows\\System32\\mstsc.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/mstsc_processes_sigma.yml", + "Description": "Detects potential processes activity of mstsc RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Parallels Access", + "Description": "Parallels Access is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "parallelsaccess-*.exe", + "TSClient.exe", + "prl_deskctl_agent.exe", + "prl_deskctl_wizard.exe", + "prl_pm_service.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.parallels.com", + "parallels.com/products/ras/try" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/parallels_access_network_sigma.yml", + "Description": "Detects potential network activity of Parallels Access RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/parallels_access_processes_sigma.yml", + "Description": "Detects potential processes activity of Parallels Access RMM tool" + } + ], + "References": [ + "https://kb.parallels.com/en/129097" + ], + "Acknowledgement": [] + }, + { + "Name": "ConnectWise Control", + "Description": "ConnectWise Control is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "connectwisechat-customer.exe", + "connectwisecontrol.client.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "control.connectwise.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/connectwise_control_network_sigma.yml", + "Description": "Detects potential network activity of ConnectWise Control RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/connectwise_control_processes_sigma.yml", + "Description": "Detects potential processes activity of ConnectWise Control RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Devolutions Remote Desktop Manager", + "Description": "Devolutions Remote Desktop Manager is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "TigerVNC", + "Description": "TigerVNC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/26/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "tigervnc*.exe", + "winvnc4.exe", + "C:\\Program Files\\TightVNC\\*", + "*\\TightVNC\\*", + "*\\tvnserver.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/tigervnc_network_sigma.yml", + "Description": "Detects potential network activity of TigerVNC RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/tigervnc_processes_sigma.yml", + "Description": "Detects potential processes activity of TigerVNC RMM tool" + } + ], + "References": [ + "https://github.com/TigerVNC/tigervnc/releases" + ], + "Acknowledgement": [] + }, + { + "Name": "Rocket Remote Desktop", + "Description": "Rocket Remote Desktop is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "RDConsole.exe", + "RocketRemoteDesktop_Setup.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rocket_remote_desktop_processes_sigma.yml", + "Description": "Detects potential processes activity of Rocket Remote Desktop RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "NoteOn-desktop sharing", + "Description": "NoteOn-desktop sharing is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "nateon*.exe", + "nateon.exe", + "nateonmain.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/noteon-desktop_sharing_processes_sigma.yml", + "Description": "Detects potential processes activity of NoteOn-desktop sharing RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Bomgar", + "Description": "Bomgar is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "bomgar-scc.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "beyondtrust.com/brand/bomgar" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/bomgar_network_sigma.yml", + "Description": "Detects potential network activity of Bomgar RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/bomgar_processes_sigma.yml", + "Description": "Detects potential processes activity of Bomgar RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "pCloud", + "Description": "pCloud is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files (x86)\\pCloud Drive\\", + "*\\pCloud Drive\\", + "*\\pCloud.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pcloud_processes_sigma.yml", + "Description": "Detects potential processes activity of pCloud RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "HelpU", + "Description": "HelpU is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "helpu_install.exe", + "HelpuUpdater.exe", + "HelpuManager.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "helpu.co.kr", + "*.helpu.co.kr" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/helpu_network_sigma.yml", + "Description": "Detects potential network activity of HelpU RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/helpu_processes_sigma.yml", + "Description": "Detects potential processes activity of HelpU RMM tool" + } + ], + "References": [ + "https://helpu.co.kr/" + ], + "Acknowledgement": [] + }, + { + "Name": "Splashtop Remote", + "Description": "Splashtop Remote is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "strwinclt.exe", + "Splashtop_Streamer_Windows*.exe", + "SplashtopSOS.exe", + "sragent.exe", + "srmanager.exe", + "srserver.exe", + "srservice.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "splashtop.com", + "*.api.splashtop.com", + "*.relay.splashtop.com", + "*.api.splashtop.eu" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/splashtop_remote_network_sigma.yml", + "Description": "Detects potential network activity of Splashtop Remote RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/splashtop_remote_processes_sigma.yml", + "Description": "Detects potential processes activity of Splashtop Remote RMM tool" + } + ], + "References": [ + "https://support-splashtopbusiness.splashtop.com/hc/en-us/articles/115001811966-What-are-the-Firewall-Exceptions-and-IP-addresses-of-Splashtop-servers-Services" + ], + "Acknowledgement": [] + }, + { + "Name": "X2Go", + "Description": "X2Go is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Pocket Controller", + "Description": "Pocket Controller is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "pocketcontroller.exe", + "pocketcloudservice.exe", + "wysebrowser.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "soti.net/products/soti-pocket-controller" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pocket_controller_network_sigma.yml", + "Description": "Detects potential network activity of Pocket Controller RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pocket_controller_processes_sigma.yml", + "Description": "Detects potential processes activity of Pocket Controller RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Xshell", + "Description": "Xshell is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files (x86)\\NetSarang\\xShell\\*", + "*\\NetSarang\\xShell\\*", + "*\\xShell.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/xshell_processes_sigma.yml", + "Description": "Detects potential processes activity of Xshell RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Bitvise SSH Client", + "Description": "Bitvise SSH Client is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files (x86)\\Bitvise SSH Client\\*", + "*\\Bitvise SSH Client\\*", + "*\\BvSshClient-Inst.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/bitvise_ssh_client_processes_sigma.yml", + "Description": "Detects potential processes activity of Bitvise SSH Client RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Royal Server", + "Description": "Royal Server is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "royalapps.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/royal_server_network_sigma.yml", + "Description": "Detects potential network activity of Royal Server RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Remote Manipulator System", + "Description": "Remote Manipulator System is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "rfusclient.exe", + "rutserv.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.internetid.ru", + "rmansys.ru" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remote_manipulator_system_network_sigma.yml", + "Description": "Detects potential network activity of Remote Manipulator System RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remote_manipulator_system_processes_sigma.yml", + "Description": "Detects potential processes activity of Remote Manipulator System RMM tool" + } + ], + "References": [ + "https://rmansys.ru/files/" + ], + "Acknowledgement": [] + }, + { + "Name": "Manage Engine (Desktop Central)", + "Description": "Manage Engine (Desktop Central) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "dcagentservice.exe", + "dcagentregister.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "desktopcentral.manageengine.com", + "desktopcentral.manageengine.com.eu", + "desktopcentral.manageengine.cn", + "*.dms.zoho.com", + "*.dms.zoho.com.eu", + "*.-dms.zoho.com.cn" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/manage_engine__desktop_central__network_sigma.yml", + "Description": "Detects potential network activity of Manage Engine (Desktop Central) RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/manage_engine__desktop_central__processes_sigma.yml", + "Description": "Detects potential processes activity of Manage Engine (Desktop Central) RMM tool" + } + ], + "References": [ + "https://www.manageengine.com/products/desktop-central/help/domains-required-for-agent-communication.html" + ], + "Acknowledgement": [] + }, + { + "Name": "Auvik", + "Description": "Auvik is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "auvik.engine.exe", + "auvik.agent.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.my.auvik.com", + "*.auvik.com", + "auvik.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/auvik_network_sigma.yml", + "Description": "Detects potential network activity of Auvik RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/auvik_processes_sigma.yml", + "Description": "Detects potential processes activity of Auvik RMM tool" + } + ], + "References": [ + "https://support.auvik.com/hc/en-us/articles/204315700-What-protocols-and-ports-does-the-Auvik-collector-use" + ], + "Acknowledgement": [] + }, + { + "Name": "Basecamp", + "Description": "Basecamp is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "basecamp.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/basecamp_network_sigma.yml", + "Description": "Detects potential network activity of Basecamp RMM tool" + } + ], + "References": [ + "basecamp.com - No specific RMM tool listed" + ], + "Acknowledgement": [] + }, + { + "Name": "Free Tools Launcher", + "Description": "Free Tools Launcher is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files\\ManageEngine\\ManageEngine Free Tools\\Launcher\\*", + "*\\ManageEngine\\*" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "aws-cli", + "Description": "aws-cli is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files\\Amazon\\AWSCLI\\*", + "*\\Amazon\\AWSCLI\\*", + "*\\AWSCLIV*.msi", + "*\\AWSCLISetup.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/aws-cli_processes_sigma.yml", + "Description": "Detects potential processes activity of aws-cli RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "AnyDesk", + "Category": "RMM", + "Description": "AnyDesk is a popular remote desktop software that enables users to access and control a computer or device from a remote location. It was developed with the primary goal of facilitating remote work, technical support, and collaboration between individuals and teams.\n", + "Author": "Ali Alwashali, Nasreddine Bencherchali", + "Created": "2023-09-29", + "LastModified": "2024-08-02", + "Details": { + "Website": "https://anydesk.com/en", + "PEMetadata": [ + { + "Filename": "anydesk.exe", + "OriginalFileName": "AnyDesk.exe", + "Description": "AnyDesk", + "Product": "AnyDesk" + } + ], + "Privileges": "User", + "Free": true, + "Verification": false, + "SupportedOS": [ + "Android", + "ChromeOS", + "IOS", + "Linux", + "Mac", + "Windows" + ], + "Capabilities": [ + "File Transfer", + "File System Access", + "Remote Control", + "GUI Support", + "Command line Support" + ], + "Vulnerabilities": [ + "https://www.cvedetails.com/vulnerability-list/vendor_id-16953/product_id-40173/Anydesk-Anydesk.html" + ], + "InstallationPaths": [ + "C:\\Program Files (x86)\\AnyDesk\\*", + "C:\\Program Files\\AnyDesk\\*" + ] + }, + "Artifacts": { + "Disk": [ + { + "File": "%programdata%\\AnyDesk\\ad_svc.trace", + "Description": "AnyDesk service log file. As well as ad.trace, we can determine the IP address of the other participant and its AnyDesk ID when a connection is established.", + "OS": "Windows", + "Example": [ + "info 2022-08-23 10:20:11.969 gsvc 4628 3528 3 anynet.relay_conn - External address: 34.xx.xx.123:46798" + ] + }, + { + "File": "%programdata%\\AnyDesk\\connection_trace.txt", + "Description": "Incoming connection logs, contains IP Address of the remote machine and file transfer activity. Only generated on target side. The content indicates how the connection was approved (e.g. the local user authorized it, or a password was used)", + "OS": "Windows", + "Example": [ + "Incoming 2022-08-23, 10:23 Passwd 547911884 547911884", + "Incoming 2022-09-28, 12:39 User 442226597 442226597" + ] + }, + { + "File": "%APPDATA%\\AnyDesk\\connection_trace.txt", + "Description": "Incoming connection logs, contains IP Address of the remote machine and file transfer activity. Only generated on target side. The content indicates how the connection was approved (e.g. the local user authorized it, or a password was used)", + "OS": "Windows", + "Example": [ + "Incoming 2022-08-23, 10:23 Passwd 547911884 547911884", + "Incoming 2022-09-28, 12:39 User 442226597 442226597" + ] + }, + { + "File": "%APPDATA%\\AnyDesk\\ad.trace", + "Description": "AnyDesk user interface log file. In this log file, we can determine the IP address of the other participant and its AnyDesk ID. It is also possible to track events of file transfer. Below is the Client ID and external IP address of the remote participant.", + "OS": "Windows", + "Example": [ + "info 2022-09-28 12:39:26.845 lsvc 9952 9944 21 anynet.any_socket - Client-ID: 442226597 (FPR: 8e28a2a25b30).", + "info 2022-09-28 12:39:26.845 lsvc 9952 9944 21 anynet.any_socket - Logged in from 12.xx.xx.21:59562 on relay 80e496c0." + ] + }, + { + "File": "%APPDATA%\\AnyDesk\\chat\\*.txt", + "Description": "If the chat functionality is used, its entries will be printed in a text file in this folder.", + "OS": "Windows" + }, + { + "File": "%APPDATA%\\AnyDesk\\user.conf", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "%PROGRAMDATA%\\AnyDesk\\service.conf", + "Description": "Password can be set to auto-validate the session. The password will be saved in a salted hash format.", + "OS": "Windows" + }, + { + "File": "%APPDATA%\\AnyDesk\\service.conf", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "%APPDATA%\\AnyDesk\\system.conf", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "%PROGRAMDATA%\\AnyDesk\\system.conf", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "%PROGRAMDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\StartUp\\AnyDesk.lnk", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "%PROGRAMDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\AnyDesk\\Uninstall AnyDesk.lnk", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "C:\\Users\\*\\Videos\\AnyDesk\\*.anydesk", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "C:\\Windows\\SysWOW64\\config\\systemprofile\\AppData\\Roaming\\AnyDesk\\*", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "~/Library/Application Support/AnyDesk/Logs/", + "Description": "N/A", + "OS": "Mac" + }, + { + "File": "~/.config/AnyDesk/Logs/", + "Description": "N/A", + "OS": "Linux" + } + ], + "EventLog": [ + { + "EventID": 7045, + "ProviderName": "Service Control Manager", + "LogFile": "System.evtx", + "ServiceName": "AnyDesk Service", + "ImagePath": "\"C:\\\\Program Files (x86)\\\\AnyDesk\\\\AnyDesk.exe\" --service", + "Description": "Service installation event as result of AnyDesk installation." + } + ], + "Registry": [ + { + "Path": "HKLM\\SOFTWARE\\Clients\\Media\\AnyDesk", + "Description": "N/A" + }, + { + "Path": "HKLM\\SYSTEM\\CurrentControlSet\\Services\\AnyDesk", + "Description": "N/A" + }, + { + "Path": "HKLM\\SOFTWARE\\Classes\\.anydesk\\shell\\open\\command", + "Description": "N/A" + }, + { + "Path": "HKLM\\SOFTWARE\\Classes\\AnyDesk\\shell\\open\\command", + "Description": "N/A" + }, + { + "Path": "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Print\\Printers\\AnyDesk Printer\\*", + "Description": "N/A" + }, + { + "Path": "HKLM\\DRIVERS\\DriverDatabase\\DeviceIds\\USBPRINT\\AnyDesk", + "Description": "N/A" + }, + { + "Path": "HKLM\\DRIVERS\\DriverDatabase\\DeviceIds\\WSDPRINT\\AnyDesk", + "Description": "N/A" + }, + { + "Path": "HKLM\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\AnyDesk", + "Description": "N/A" + } + ], + "Network": [ + { + "Description": "During setup the boot.net.anydesk.com domain is request over port 443", + "Domains": [ + "boot.net.anydesk.com" + ], + "Ports": [ + 443 + ] + }, + { + "Description": "N/A", + "Domains": [ + "relay-[a-f0-9]{8}.net.anydesk.com:443" + ], + "Ports": [ + 443 + ] + }, + { + "Description": "N/A", + "Domains": [ + "*.anydesk.com" + ], + "Ports": [ + 443 + ] + } + ], + "Other": [ + { + "Type": "User-Agent", + "Value": "AnyDesk/*" + }, + { + "Type": "NamedPipe", + "Value": "adprinterpipe" + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/SigmaHQ/sigma/blob/43277f26fc1c81fc98fc79147b711189e901b757/rules/windows/builtin/system/service_control_manager/win_system_service_install_anydesk.yml", + "Description": "Anydesk Remote Access Software Service Installation" + }, + { + "Sigma": "https://github.com/SigmaHQ/sigma/blob/43277f26fc1c81fc98fc79147b711189e901b757/rules/windows/file/file_event/file_event_win_anydesk_artefact.yml", + "Description": "N/A" + }, + { + "Sigma": "https://github.com/SigmaHQ/sigma/blob/43277f26fc1c81fc98fc79147b711189e901b757/rules/windows/process_creation/proc_creation_win_remote_access_tools_anydesk.yml", + "Description": "N/A" + }, + { + "Sigma": "https://github.com/SigmaHQ/sigma/blob/782f0f524e6f797ea114fe0d87b22cb4abaa6b7c/rules/windows/process_creation/proc_creation_win_remote_access_tools_anydesk_silent_install.yml", + "Description": "Remote Access Tool - AnyDesk Silent Installation" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/anydesk_registry_sigma.yml", + "Description": "Detects potential registry activity of AnyDesk RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/anydesk_network_sigma.yml", + "Description": "Detects potential network activity of AnyDesk RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/anydesk_files_sigma.yml", + "Description": "Detects potential files activity of AnyDesk RMM tool" + } + ], + "References": [ + "https://support.anydesk.com/knowledge/firewall", + "https://www.synacktiv.com/publications/legitimate-rats-a-comprehensive-forensic-analysis-of-the-usual-suspects.html", + "https://github.com/mthcht/awesome-lists/tree/79ced75eebe53bcabf1235b3c17eb11788875482/Lists/RMM/anydesk", + "https://ruler-project.github.io/ruler-project/RULER/remote/AnyDesk/" + ], + "Acknowledgement": [ + { + "Person": "Théo Letailleur", + "Handle": "in/theosyn" + }, + { + "Person": "Ali Alwashali", + "Handle": "@ali_alwashali" + }, + { + "Person": "Nasreddine Bencherchali", + "Handle": "@nas_bench" + } + ] + }, + { + "Name": "AnyViewer", + "Description": "AnyViewer is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.\n", + "Author": "@kostastsale", + "Created": "2024-08-03", + "LastModified": "2024-08-03", + "Details": { + "Website": "https://www.anyviewer.com/", + "PEMetadata": [ + { + "Filename": "AnyViewer.exe", + "OriginalFileName": "AnyViewer", + "Description": "Splash Window" + }, + { + "Filename": "RCClient.exe", + "OriginalFileName": "RCClient.exe", + "Description": "AnyViewer Core" + }, + { + "Filename": "ScreanCap.exe", + "Description": "Screan capture" + }, + { + "Filename": "AVCore.exe" + }, + { + "Filename": "RCService.exe" + } + ], + "Privileges": "System", + "Free": "up to 10 devices", + "Verification": "None", + "SupportedOS": [ + "Windows" + ], + "Capabilities": [ + "Remote desktop", + "Remote file transfer", + "Remote monitoring and management", + "Remote shell open" + ], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files (x86)\\AnyViewer\\*" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [ + { + "EventID": 4688, + "ProviderName": "Microsoft-Security-Auditing", + "LogFile": "Security.evtx", + "CommandLine": "\"C:\\\\Program Files (x86)\\\\AnyViewer\\\\AVCore.exe\" -d", + "Description": "Taking actions on the remote machine such as opening a command prompt." + }, + { + "EventID": 7045, + "ProviderName": "Service Control Manager", + "LogFile": "System.evtx", + "ServiceName": "RCService", + "ImagePath": "C:\\\\Program Files (x86)\\\\AnyViewer\\\\RCService.exe", + "Description": "AnyViewer service installation service." + } + ], + "Registry": [], + "Network": [ + { + "Description": "N/A", + "Domains": [ + "*.anyviewer.com" + ], + "Ports": [ + 443 + ] + }, + { + "Description": "N/A", + "Domains": [ + "*.aomeisoftware.com" + ], + "Ports": [ + 443 + ] + } + ] + }, + "Detections": [ + { + "Name": "Arbitrary code execution and remote sessions via Action1 RMM", + "Description": "Threat hunting rule for detecting the execution of arbitrary code and remote sessions via Action1 RMM", + "author": "@kostastsale", + "Link": "https://github.com/tsale/Sigma_rules/blob/main/Threat%20Hunting%20Queries/Anyviewer.yml" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/anyviewer_network_sigma.yml", + "Description": "Detects potential network activity of AnyViewer RMM tool" + } + ], + "References": [ + "https://www.anyviewer.com/how-to/how-to-open-firewall-ports-for-remote-desktop-0427-gc.html", + "https://www.anyviewer.com/help/remote-technical-support.html" + ], + "Acknowledgement": [ + { + "Person": "Kostas", + "Handle": "@kostastsale" + } + ] + }, + { + "Name": "DW Service", + "Description": "DW Service is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "dwagent.exe", + "dwagsvc.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.dwservice.net" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/dw_service_network_sigma.yml", + "Description": "Detects potential network activity of DW Service RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/dw_service_processes_sigma.yml", + "Description": "Detects potential processes activity of DW Service RMM tool" + } + ], + "References": [ + "https://news.dwservice.net/dwservice-security-infrastructure/" + ], + "Acknowledgement": [] + }, + { + "Name": "Level", + "Description": "Level is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "level.io" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/level_network_sigma.yml", + "Description": "Detects potential network activity of Level RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Site24x7", + "Description": "Site24x7 is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/13/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "MEAgentHelper.exe", + "MonitoringAgent.exe", + "Site24x7WindowsAgentTrayIcon.exe", + "Site24x7PluginAgent.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "plus*.site24x7.com", + "plus*.site24x7.eu", + "plus*.site24x7.in", + "plus*.site24x7.cn", + "plus*.site24x7.net.au", + "site24x7.com/msp" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/site24x7_network_sigma.yml", + "Description": "Detects potential network activity of Site24x7 RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/site24x7_processes_sigma.yml", + "Description": "Detects potential processes activity of Site24x7 RMM tool" + } + ], + "References": [ + "https://support.site24x7.com/portal/en/kb/articles/which-ports-do-i-need-to-allow-access-in-my-firewall-to-use-site24x7-agent" + ], + "Acknowledgement": [] + }, + { + "Name": "Cloudsfer", + "Description": "Cloudsfer is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "ScreenConnect", + "Description": "ScreenConnect is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "Ali Alwashali, Nasreddine Bencherchali", + "Created": "2023-10-01", + "LastModified": "2024-08-03", + "Details": { + "Website": "https://www.connectwise.com", + "PEMetadata": [ + { + "Filename": "", + "OriginalFileName": "", + "Description": "" + } + ], + "Privileges": "", + "Free": "14-Days Free Trial", + "Verification": "", + "SupportedOS": [ + "Android", + "IOS", + "Linux", + "Mac", + "Windows" + ], + "Capabilities": [ + "Command Line Support", + "File Transfer", + "Install Windows updates", + "Receive notification when user performs a predefined event", + "Remote Command Line", + "Remote Control", + "Sound Capture", + "Start / Stop services", + "View event logs" + ], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files (x86)\\ScreenConnect Client (Random)\\ScreenConnect.ClientService.exe", + "Remote Workforce Client.exe", + "*\\*\\ScreenConnect.ClientService.exe", + "C:\\Program Files (x86)\\ScreenConnect Client ()\\*", + "*\\ScreenConnect Client*\\*", + "*\\*\\ScreenConnect.WindowsClient.exe", + "screenconnect*.exe", + "screenconnect.windowsclient.exe", + "Remote Workforce Client.exe", + "screenconnect*.exe", + "ConnectWiseControl*.exe", + "connectwise*.exe", + "screenconnect.windowsclient.exe", + "screenconnect.clientservice.exe" + ] + }, + "Artifacts": { + "Disk": [ + { + "File": "C:\\Program Files*\\ScreenConnect\\App_Data\\Session.db", + "Description": "ScreenConnect session database", + "OS": "Windows" + }, + { + "File": "C:\\Program Files*\\ScreenConnect\\App_Data\\User.xml", + "Description": "ScreenConnect user configuration", + "OS": "Windows" + }, + { + "File": "C:\\ProgramData\\ScreenConnect Client*\\user.config", + "Description": "ScreenConnect client user configuration", + "OS": "Windows" + } + ], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "control.connectwise.com", + "*.connectwise.com", + "*.screenconnect.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/screenconnect_network_sigma.yml", + "Description": "Detects potential network activity of ScreenConnect RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/screenconnect_files_sigma.yml", + "Description": "Detects potential files activity of ScreenConnect RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/screenconnect_processes_sigma.yml", + "Description": "Detects potential processes activity of ScreenConnect RMM tool" + } + ], + "References": [ + "https://thedfirreport.com/2023/09/25/from-screenconnect-to-hive-ransomware-in-61-hours/" + ], + "Acknowledgement": [] + }, + { + "Name": "SmartFTP", + "Description": "SmartFTP is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files (x86)\\SmartFTP Client\\en-US\\", + "*\\SmartFTP Client\\*", + "*\\SfShellTools.dll.mui" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "SpyAnywhere", + "Description": "SpyAnywhere is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "sysdiag.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.spytech-web.com", + "spyanywhere.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/spyanywhere_network_sigma.yml", + "Description": "Detects potential network activity of SpyAnywhere RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/spyanywhere_processes_sigma.yml", + "Description": "Detects potential processes activity of SpyAnywhere RMM tool" + } + ], + "References": [ + "https://www.spyanywhere.com/support.shtml" + ], + "Acknowledgement": [] + }, + { + "Name": "NinjaRMM", + "Description": "NinjaRMM is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "ninjarmmagent.exe", + "NinjaRMMAgent.exe", + "NinjaRMMAgenPatcher.exe", + "ninjarmm-cli.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.ninjarmm.com", + "*.ninjaone.com", + "resources.ninjarmm.com", + "ninjaone.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ninjarmm_network_sigma.yml", + "Description": "Detects potential network activity of NinjaRMM RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ninjarmm_processes_sigma.yml", + "Description": "Detects potential processes activity of NinjaRMM RMM tool" + } + ], + "References": [ + "https://www.ninjaone.com/faq/" + ], + "Acknowledgement": [] + }, + { + "Name": "CloudXplorer", + "Description": "CloudXplorer is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files\\ClumsyLeaf Software\\CloudXplorer\\*", + "*\\ClumsyLeaf Software\\CloudXplorer\\*", + "*\\clumsyleaf.cloudxplorer*.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/cloudxplorer_processes_sigma.yml", + "Description": "Detects potential processes activity of CloudXplorer RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "CruzControl", + "Description": "CruzControl is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [ + "https://resources.doradosoftware.com/cruz-rmm" + ], + "Acknowledgement": [] + }, + { + "Name": "SimpleHelp", + "Description": "SimpleHelp is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "simplehelpcustomer.exe", + "simpleservice.exe", + "simplegatewayservice.exe", + "remote access.exe", + "windowslauncher.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed", + "simple-help.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/simplehelp_network_sigma.yml", + "Description": "Detects potential network activity of SimpleHelp RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/simplehelp_processes_sigma.yml", + "Description": "Detects potential processes activity of SimpleHelp RMM tool" + } + ], + "References": [ + "https://simple-help.com/remote-support" + ], + "Acknowledgement": [] + }, + { + "Name": "EMCO Remote Console", + "Description": "EMCO Remote Console is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "remoteconsole.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed", + "emcosoftware.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/emco_remote_console_network_sigma.yml", + "Description": "Detects potential network activity of EMCO Remote Console RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/emco_remote_console_processes_sigma.yml", + "Description": "Detects potential processes activity of EMCO Remote Console RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "ngrok", + "Description": "ngrok is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "ngrok.exe", + "C:\\*\\ngrok.zip", + "*\\ngrok*" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed", + "ngrok.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ngrok_network_sigma.yml", + "Description": "Detects potential network activity of ngrok RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ngrok_processes_sigma.yml", + "Description": "Detects potential processes activity of ngrok RMM tool" + } + ], + "References": [ + "https://ngrok.com/docs/guides/running-behind-firewalls/" + ], + "Acknowledgement": [] + }, + { + "Name": "Apple Remote Desktop", + "Description": "Apple Remote Desktop is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/24/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "ARDAgent.app" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/apple_remote_desktop_network_sigma.yml", + "Description": "Detects potential network activity of Apple Remote Desktop RMM tool" + } + ], + "References": [ + "https://support.apple.com/guide/remote-desktop/install-and-set-up-remote-desktop-apdf49e03a4/mac" + ], + "Acknowledgement": [] + }, + { + "Name": "Netviewer (GoToMeet)", + "Description": "Netviewer (GoToMeet) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "nvClient.exe", + "netviewer.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/netviewer__gotomeet__processes_sigma.yml", + "Description": "Detects potential processes activity of Netviewer (GoToMeet) RMM tool" + } + ], + "References": [ + "Obsolute - found copy here: https://www.enviolet.com/en/service/online-consultant.html" + ], + "Acknowledgement": [] + }, + { + "Name": "NoMachine", + "Description": "NoMachine is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "nomachine*.exe", + "nxservice*.ese", + "nxd.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed", + "nomachine.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/nomachine_network_sigma.yml", + "Description": "Detects potential network activity of NoMachine RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/nomachine_processes_sigma.yml", + "Description": "Detects potential processes activity of NoMachine RMM tool" + } + ], + "References": [ + "https://kb.nomachine.com/AR04S01122" + ], + "Acknowledgement": [] + }, + { + "Name": "MioNet (WD Anywhere Access)", + "Description": "MioNet (WD Anywhere Access) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "mionet.exe", + "mionetmanager.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/mionet__wd_anywhere_access__processes_sigma.yml", + "Description": "Detects potential processes activity of MioNet (WD Anywhere Access) RMM tool" + } + ], + "References": [ + "https://en.wikipedia.org/wiki/WD_Anywhere_Access - DOA as of 2016" + ], + "Acknowledgement": [] + }, + { + "Name": "Splashtop", + "Description": "Splashtop is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "Nasreddine Bencherchali", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files (x86)\\Splashtop\\*", + "*\\Splashtop\\Splashtop Remote\\Client for RMM\\*", + "strwinclt.exe" + ] + }, + "Artifacts": { + "Disk": [ + { + "File": "C:\\windows\\System32\\winevt\\Logs\\Splashtop-Splashtop Streamer-Status%4Operational.evtx", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "C:\\windows\\System32\\winevt\\Logs\\Splashtop-Splashtop Streamer-Remote Session%4Operational.evtx", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "%PROGRAMDATA%\\Splashtop\\Temp\\log\\FTCLog.txt", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "C:\\Program Files (x86)\\Splashtop\\Splashtop Remote\\Server\\log\\agent_log.txt", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "C:\\Program Files (x86)\\Splashtop\\Splashtop Remote\\Server\\log\\SPLog.txt", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "C:\\Program Files (x86)\\Splashtop\\Splashtop Remote\\Server\\log\\svcinfo.txt", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "C:\\Program Files (x86)\\Splashtop\\Splashtop Remote\\Server\\log\\sysinfo.txt", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "C:\\Program Files (x86)\\Splashtop\\Splashtop Remote\\Server\\SRService.exe", + "Description": "Splashtop Remote Service", + "OS": "Windows" + }, + { + "File": "C:\\Program Files (x86)\\Splashtop\\Splashtop Remote\\Server\\SRAgent.exe", + "Description": "SplashTop Remote Agent", + "OS": "Windows" + }, + { + "File": "C:\\Program Files (x86)\\Splashtop\\Splashtop Software Updater\\SSUAgent.exe", + "Description": "Splashtop Updater", + "OS": "Windows" + }, + { + "File": "C:\\Program Files (x86)\\Splashtop\\Splashtop Remote\\Server\\SRUtility.exe", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "C:\\Program Files (x86)\\Splashtop\\Splashtop Remote\\Server\\SRFeature.exe", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "C:\\Program Files (x86)\\Splashtop\\Splashtop Remote\\Server\\db\\SRAgent.sqlite3", + "Description": "N/A", + "OS": "Windows" + } + ], + "EventLog": [ + { + "EventID": 7045, + "ProviderName": "Service Control Manager", + "LogFile": "System.evtx", + "ServiceName": "Splashtop Software Updater Service", + "ImagePath": "\"C:\\\\Program Files (x86)\\\\Splashtop\\\\Splashtop Software Updater\\\\SSUService.exe\"", + "Description": "Service installation event as result of Splashtop Software Updater Service installation." + }, + { + "EventID": 7045, + "ProviderName": "Service Control Manager", + "LogFile": "System.evtx", + "ServiceName": "Splashtop® Remote Service", + "ImagePath": "\"C:\\\\Program Files (x86)\\\\Splashtop\\\\Splashtop Remote\\\\Server\\\\SRService.exe\"", + "Description": "Service installation event as result of Splashtop Remote Service installation." + }, + { + "EventID": 7045, + "ProviderName": "Service Control Manager", + "LogFile": "System.evtx", + "ServiceName": "SplashtopRemoteService", + "ImagePath": "\"C:\\\\Program Files (x86)\\\\Splashtop\\\\Splashtop Remote\\\\Server\\\\SRService.exe\"", + "Description": "Service installation event as result of Splashtop Remote Service installation." + } + ], + "Registry": [ + { + "Path": "KLM\\SOFTWARE\\WOW6432Node\\Splashtop Inc.\\*", + "Description": "Splashtop Inc. registry key" + }, + { + "Path": "HKLM\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Splashtop Software Updater", + "Description": "Splashtop Software Updater uninstall key" + }, + { + "Path": "HKLM\\SYSTEM\\CurrentControlSet\\Services\\SplashtopRemoteService", + "Description": "Splashtop Remote Service registry key" + }, + { + "Path": "HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WINEVT\\Channels\\Splashtop-Splashtop Streamer-Remote Session/Operational", + "Description": "Splashtop Streamer Remote Session event log channel" + }, + { + "Path": "HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WINEVT\\Channels\\Splashtop-Splashtop Streamer-Status/Operational", + "Description": "Splashtop Streamer Status event log channel" + }, + { + "Path": "HKLM\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Splashtop Software Updater\\InstallRefCount", + "Description": "Splashtop Software Updater install reference count" + }, + { + "Path": "HKLM\\SYSTEM\\CurrentControlSet\\Control\\SafeBoot\\Network\\SplashtopRemoteService", + "Description": "Splashtop Remote Service safe boot configuration" + }, + { + "Path": "HKU\\.DEFAULT\\Software\\Splashtop Inc.\\*", + "Description": "Default user Splashtop Inc. registry key" + }, + { + "Path": "HKU\\SID\\Software\\Splashtop Inc.\\*", + "Description": "User-specific Splashtop Inc. registry key" + }, + { + "Path": "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Print\\Printers\\Splashtop PDF Remote Printer", + "Description": "Splashtop PDF Remote Printer configuration" + }, + { + "Path": "HKLM\\SOFTWARE\\WOW6432Node\\Splashtop Inc.\\Splashtop Remote Server\\ClientInfo\\*", + "Description": "Splashtop Remote Server client information" + } + ], + "Network": [ + { + "Description": "N/A", + "Domains": [ + "*.splashtop.com" + ], + "Ports": [ + "N/A" + ] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/splashtop_registry_sigma.yml", + "Description": "Detects potential registry activity of Splashtop RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/splashtop_network_sigma.yml", + "Description": "Detects potential network activity of Splashtop RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/splashtop_files_sigma.yml", + "Description": "Detects potential files activity of Splashtop RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/splashtop_processes_sigma.yml", + "Description": "Detects potential processes activity of Splashtop RMM tool" + } + ], + "References": [ + "https://www.synacktiv.com/publications/legitimate-rats-a-comprehensive-forensic-analysis-of-the-usual-suspects.html" + ], + "Acknowledgement": [ + { + "Person": "Théo Letailleur", + "Handle": "in/theosyn" + } + ] + }, + { + "Name": "RAdmin", + "Description": "RAdmin is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.\n", + "Author": "Nasreddine Bencherchali", + "Created": "2024-08-05", + "LastModified": "2024-08-05", + "Details": { + "Website": "https://www.radmin.com/", + "PEMetadata": [ + { + "Filename": "RServer3.exe", + "OriginalFileName": "RServer3.exe", + "InternalName": "RServer3", + "Description": "Radmin Server", + "Product": "Radmin Server", + "Comments": "Radmin - Remote Control Server" + }, + { + "Filename": "Radmin.exe", + "OriginalFileName": "Radmin.exe", + "InternalName": "Radmin", + "Description": "Radmin Viewer", + "Product": "Radmin Viewer", + "Comments": "Radmin Viewer" + } + ], + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [ + "Windows" + ], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files (x86)\\Radmin Viewer 3\\Radmin.exe", + "C:\\Windows\\SysWOW64\\rserver30\\rserver3.exe", + "C:\\Windows\\SysWOW64\\rserver30\\FamItrfc", + "C:\\Windows\\SysWOW64\\rserver30\\FamItrf2" + ] + }, + "Artifacts": { + "Disk": [ + { + "File": "C:\\Windows\\SysWOW64\\rserver30\\Radm_log.htm", + "Description": "RAdmin log file (32-bit)", + "OS": "Windows" + }, + { + "File": "C:\\Windows\\System32\\rserver30\\Radm_log.htm", + "Description": "RAdmin log file (64-bit)", + "OS": "Windows" + }, + { + "File": "C:\\Windows\\System32\\rserver30\\CHATLOGS\\*\\*.htm", + "Description": "RAdmin chat logs", + "OS": "Windows" + }, + { + "File": "C:\\Users\\*\\Documents\\ChatLogs\\*\\*.htm", + "Description": "RAdmin user chat logs", + "OS": "Windows" + } + ], + "EventLog": [], + "Registry": [ + { + "Path": "HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\Radmin\\v3.0\\Server\\Parameters\\Radmin Security", + "Description": "N/A" + } + ], + "Network": [ + { + "Description": "N/A", + "Domains": [ + "radmin.com" + ], + "Ports": [ + 443 + ] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/SigmaHQ/sigma/blob/782f0f524e6f797ea114fe0d87b22cb4abaa6b7c/rules/windows/process_creation/proc_creation_win_pua_radmin.yml", + "Description": "PUA - Radmin Viewer Utility Execution" + }, + { + "Sigma": "https://github.com/SigmaHQ/sigma/blob/782f0f524e6f797ea114fe0d87b22cb4abaa6b7c/rules/windows/process_creation/proc_creation_win_registry_enumeration_for_credentials_cli.yml", + "Description": "Enumeration for 3rd Party Creds From CLI" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/radmin_registry_sigma.yml", + "Description": "Detects potential registry activity of RAdmin RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/radmin_network_sigma.yml", + "Description": "Detects potential network activity of RAdmin RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/radmin_files_sigma.yml", + "Description": "Detects potential files activity of RAdmin RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/radmin_processes_sigma.yml", + "Description": "Detects potential processes activity of RAdmin RMM tool" + } + ], + "References": [ + "https://radmin-club.com/radmin/how-to-establish-a-connection-outside-of-lan/", + "https://helpdesk.radmin.com/radmin3help/", + "https://helpdesk.radmin.com/radmin3help/files/viewercmd.htm", + "https://helpdesk.radmin.com/radmin3help/files/cmd.htm" + ], + "Acknowledgement": [ + { + "Person": "Nasreddine Bencherchali", + "Handle": "@nas_bench" + } + ] + }, + { + "Name": "LANDesk", + "Description": "LANDesk is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "issuser.exe", + "landeskagentbootstrap.exe", + "LANDeskPortalManager.exe", + "ldinv32.exe", + "ldsensors.exe", + "C:\\Program Files (x86)\\LANDesk\\*", + "*\\LANDesk\\*", + "*\\issuser.exe", + "*\\softmon.exe", + "*\\tmcsvc.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.ivanticloud.com", + "*.ivanti.com", + "ivanti.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/landesk_network_sigma.yml", + "Description": "Detects potential network activity of LANDesk RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/landesk_processes_sigma.yml", + "Description": "Detects potential processes activity of LANDesk RMM tool" + } + ], + "References": [ + "https://forums.ivanti.com/s/article/URL-exception-list-for-Ivanti-Security-Controls?language=en_US" + ], + "Acknowledgement": [] + }, + { + "Name": "SuperOps", + "Description": "SuperOps is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "superopsticket.exe", + "superops.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.superopsbeta.com", + "superops.ai", + "serv.superopsalpha.com", + "*.superops.ai", + "*.superopsalpha.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/superops_network_sigma.yml", + "Description": "Detects potential network activity of SuperOps RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/superops_processes_sigma.yml", + "Description": "Detects potential processes activity of SuperOps RMM tool" + } + ], + "References": [ + "https://support.superops.com/en/articles/6632028-how-to-download-and-deploy-the-agent" + ], + "Acknowledgement": [] + }, + { + "Name": "Lite Manager", + "Description": "Lite Manager is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files\\LiteManager Pro – Viewer\\*", + "*\\LiteManager Pro – Viewer\\*", + "*\\LMNoIpServer.exe." + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Raidrive", + "Description": "Raidrive is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\*\\OpenBoxLab\\RaiDrive\\*", + "*\\OpenBoxLab\\RaiDrive\\*", + "service = raidrive_*", + "Computer\\HKEY_LOCAL_MACHINE\\SOFTWARE\\OpenBoxLab\\RaiDrive\\Drives" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Datto", + "Description": "Datto is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "datto.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/datto_network_sigma.yml", + "Description": "Detects potential network activity of Datto RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Supremo", + "Description": "Supremo is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/13/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "supremo.exe", + "supremoservice.exe", + "supremosystem.exe", + "supremohelper.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "supremocontrol.com", + "*.supremocontrol.com", + "* .nanosystems.it" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/supremo_network_sigma.yml", + "Description": "Detects potential network activity of Supremo RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/supremo_processes_sigma.yml", + "Description": "Detects potential processes activity of Supremo RMM tool" + } + ], + "References": [ + "https://www.supremocontrol.com/frequently-asked-questions/" + ], + "Acknowledgement": [] + }, + { + "Name": "Chicken (of the VNC)", + "Description": "Chicken (of the VNC) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Quick Assist", + "Description": "Quick Assist is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "quickassist.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/quick_assist_processes_sigma.yml", + "Description": "Detects potential processes activity of Quick Assist RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "KHelpDesk", + "Description": "KHelpDesk is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/26/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "KHelpDesk.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.khelpdesk.com.br" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/khelpdesk_network_sigma.yml", + "Description": "Detects potential network activity of KHelpDesk RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/khelpdesk_processes_sigma.yml", + "Description": "Detects potential processes activity of KHelpDesk RMM tool" + } + ], + "References": [ + "https://www.khelpdesk.com.br/en-us" + ], + "Acknowledgement": [] + }, + { + "Name": "TurboMeeting", + "Description": "TurboMeeting is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/14/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "pcstarter.exe", + "turbomeeting.exe", + "turbomeetingstarter.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed", + "acceo.com/turbomeeting/" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/turbomeeting_network_sigma.yml", + "Description": "Detects potential network activity of TurboMeeting RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/turbomeeting_processes_sigma.yml", + "Description": "Detects potential processes activity of TurboMeeting RMM tool" + } + ], + "References": [ + "http://sourcing.rhubcom.com/v5/faqs.html#collapsetwentysix2-topdiv" + ], + "Acknowledgement": [] + }, + { + "Name": "RPort", + "Description": "RPort is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "rport.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed", + "rport.io" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rport_network_sigma.yml", + "Description": "Detects potential network activity of RPort RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rport_processes_sigma.yml", + "Description": "Detects potential processes activity of RPort RMM tool" + } + ], + "References": [ + "https://kb.rport.io/using-the-remote-access" + ], + "Acknowledgement": [] + }, + { + "Name": "CloudBerry Explorer", + "Description": "CloudBerry Explorer is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files\\CloudBerryLab\\CloudBerry Drive\\*", + "*\\CloudBerryLab\\CloudBerry Drive\\*" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "ExpanDrive", + "Description": "ExpanDrive is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Users\\*\\ExpanDrive.exe", + "*\\ExpanDrive.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/expandrive_processes_sigma.yml", + "Description": "Detects potential processes activity of ExpanDrive RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "MioNet (Also known as WD Anywhere Access)", + "Description": "MioNet (Also known as WD Anywhere Access) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "mionet.exe", + "mionetmanager.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/mionet__also_known_as_wd_anywhere_access__processes_sigma.yml", + "Description": "Detects potential processes activity of MioNet (Also known as WD Anywhere Access) RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "OCS inventory", + "Description": "OCS inventory is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "ocsinventory.exe", + "ocsservice.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed", + "ocsinventory-ng.org" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ocs_inventory_network_sigma.yml", + "Description": "Detects potential network activity of OCS inventory RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ocs_inventory_processes_sigma.yml", + "Description": "Detects potential processes activity of OCS inventory RMM tool" + } + ], + "References": [ + "https://ocsinventory-ng.org/?page_id=878&lang=en" + ], + "Acknowledgement": [] + }, + { + "Name": "RemotePass", + "Description": "RemotePass is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "remotepass-access.exe", + "rpaccess.exe", + "rpwhostscr.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "remotepass.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remotepass_network_sigma.yml", + "Description": "Detects potential network activity of RemotePass RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remotepass_processes_sigma.yml", + "Description": "Detects potential processes activity of RemotePass RMM tool" + } + ], + "References": [ + "https://www.remotepass.com/rpaccess.html - DOA as of 2024" + ], + "Acknowledgement": [] + }, + { + "Name": "Air Explorer", + "Description": "Air Explorer is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files\\airexplorer\\*", + "*\\airexplorer\\*", + "*\\airexplorer.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/air_explorer_processes_sigma.yml", + "Description": "Detects potential processes activity of Air Explorer RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "GoToAssist (GoTo Resolve)", + "Description": "GoToAssist (GoTo Resolve) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\ProgramFiles*\\GoTo Machine Installer\\*", + "*\\GoTo Machine Installer\\*", + "*\\GoTo\\*" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Comodo RMM", + "Description": "Comodo RMM is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "itsmagent.exe", + "rviewer.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.itsm-us1.comodo.com", + "*mdmsupport.comodo.com", + "one.comodo.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/comodo_rmm_network_sigma.yml", + "Description": "Detects potential network activity of Comodo RMM RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/comodo_rmm_processes_sigma.yml", + "Description": "Detects potential processes activity of Comodo RMM RMM tool" + } + ], + "References": [ + "https://help.itarian.com/topic-459-1-1005-14776-Appendix-1b---Endpoint-Manager-Services---IP-Nos,-Host-Names-and-Port-Details---US-Customers.html" + ], + "Acknowledgement": [] + }, + { + "Name": "ShowMyPC", + "Description": "ShowMyPC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "SMPCSetup.exe", + "showmypc*.exe", + "showmypc.exe", + "smpcsetup.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.showmypc.com", + "showmypc.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/showmypc_network_sigma.yml", + "Description": "Detects potential network activity of ShowMyPC RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/showmypc_processes_sigma.yml", + "Description": "Detects potential processes activity of ShowMyPC RMM tool" + } + ], + "References": [ + "https://showmypc.com/service/faq/ShowMyPCSecurityOverview1.pdf" + ], + "Acknowledgement": [] + }, + { + "Name": "ToDesk", + "Description": "ToDesk is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/14/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "todesk.exe", + "ToDesk_Service.exe", + "ToDesk_Setup.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "todesk.com", + "*.todesk.com", + "*.todesk.com", + "todesktop.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/todesk_network_sigma.yml", + "Description": "Detects potential network activity of ToDesk RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/todesk_processes_sigma.yml", + "Description": "Detects potential processes activity of ToDesk RMM tool" + } + ], + "References": [ + "https://www.todesk.com/" + ], + "Acknowledgement": [] + }, + { + "Name": "RunSmart", + "Description": "RunSmart is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "runsmart.io" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/runsmart_network_sigma.yml", + "Description": "Detects potential network activity of RunSmart RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "VNC Connect", + "Description": "VNC Connect is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files\\RealVNC\\VNC Server\\*", + "*\\RealVNC\\VNC Server\\*" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Echoware", + "Description": "Echoware is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "echoserver*.exe", + "echoware.dll" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/echoware_processes_sigma.yml", + "Description": "Detects potential processes activity of Echoware RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Alpemix", + "Description": "Alpemix is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.\n", + "Author": "Nasreddine Bencherchali", + "Created": "2024-08-05", + "LastModified": "2024-08-05", + "Details": { + "Website": "https://www.alpemix.com/en/Home", + "PEMetadata": [ + { + "Filename": "Alpemix.exe", + "OriginalFileName": "Alpemix", + "Description": "Alpemix", + "Product": "Alpemix", + "InternalName": "Alpemix" + } + ], + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [ + "Windows", + "Linux", + "Android", + "Mac", + "IOS" + ], + "Capabilities": [ + "5 Different Solutions for Remote Support", + "Access to Unattended Computers", + "Access to User Account Control (UAC) Screens", + "Add Your Own Logo", + "Auto Sizing", + "Automatic Update", + "Clipboard Transfer", + "Computer Independent Licensing", + "Contact List and Groups", + "Encrypted Communication", + "External Communication Barrier", + "File Transfer", + "Instant Messaging", + "Multi-Platform Support", + "Multiple Chat", + "Multiple Connections", + "No Port Forwarding Required", + "Peer to Peer Connection (p2p)", + "Receiving Offline Message", + "Remote Restart", + "ReportingRestricting The Authority", + "Screen Sharing", + "Sending Announcement Message", + "Sharing a certain part of the screen", + "Video Recording", + "Voice Communication", + "Who is currently supporting?", + "Working in Black Screen Mode" + ], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\AlpemixService.exe", + "C:\\AlpemixSrvc\\" + ] + }, + "Artifacts": { + "Disk": [ + { + "File": "%localappdata%\\Alpemix\\Alpemix.ini", + "Description": "N/A", + "OS": "Windows" + } + ], + "EventLog": [ + { + "EventID": 7045, + "ProviderName": "Service Control Manager", + "LogFile": "System.evtx", + "ServiceName": "AlpemixSrvc", + "ImagePath": "*\\Alpemix.exe servicestartxxx", + "Description": "Service installation event as result of Alpemix installation." + } + ], + "Registry": [ + { + "Path": "HKLM\\SYSTEM\\CurrentControlSet\\Services\\AlpemixSrvcx", + "Description": "N/A" + } + ], + "Network": [ + { + "Domains": [ + "*.alpemix.com" + ], + "Ports": [ + 443 + ], + "Description": "N/A" + }, + { + "Domains": [ + "*.teknopars.com" + ], + "Ports": [ + 80 + ], + "Description": "N/A" + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/alpemix_registry_sigma.yml", + "Description": "Detects potential registry activity of Alpemix RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/alpemix_network_sigma.yml", + "Description": "Detects potential network activity of Alpemix RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/alpemix_files_sigma.yml", + "Description": "Detects potential files activity of Alpemix RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/alpemix_processes_sigma.yml", + "Description": "Detects potential processes activity of Alpemix RMM tool" + } + ], + "References": [ + "https://www.alpemix.com/en/remote-access" + ], + "Acknowledgement": [ + { + "Person": "Nasreddine Bencherchali", + "Handle": "@nas_bench" + } + ] + }, + { + "Name": "Royal TS", + "Description": "Royal TS is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "royalts.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "royalapps.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/royal_ts_network_sigma.yml", + "Description": "Detects potential network activity of Royal TS RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/royal_ts_processes_sigma.yml", + "Description": "Detects potential processes activity of Royal TS RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "DragonDisk", + "Description": "DragonDisk is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files (x86)\\Almageste\\DragonDisk\\*", + "*\\Almageste\\DragonDisk\\*", + "*\\DragonDisk.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/dragondisk_processes_sigma.yml", + "Description": "Detects potential processes activity of DragonDisk RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Pcvisit", + "Description": "Pcvisit is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "pcvisit.exe", + "pcvisit_client.exe", + "pcvisit-easysupport.exe", + "pcvisit_service_client.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.pcvisit.de", + "pcvisit.de" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pcvisit_network_sigma.yml", + "Description": "Detects potential network activity of Pcvisit RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pcvisit_processes_sigma.yml", + "Description": "Detects potential processes activity of Pcvisit RMM tool" + } + ], + "References": [ + "https://www.pcvisit.de/" + ], + "Acknowledgement": [] + }, + { + "Name": "Connectwise Automate (LabTech)", + "Description": "Connectwise Automate (LabTech) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "ltsvc.exe", + "ltsvcmon.exe", + "lttray.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.hostedrmm.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/connectwise_automate__labtech__network_sigma.yml", + "Description": "Detects potential network activity of Connectwise Automate (LabTech) RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/connectwise_automate__labtech__processes_sigma.yml", + "Description": "Detects potential processes activity of Connectwise Automate (LabTech) RMM tool" + } + ], + "References": [ + "https://www.connectwise.com/company/announcements/labtech-now-connectwise-automate" + ], + "Acknowledgement": [] + }, + { + "Name": "DameWare", + "Description": "DameWare is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "SolarWinds-Dameware-DRS*.exe", + "DameWare Mini Remote Control*.exe", + "C:\\Windows\\dwrcs\\*\n c:\\Program File\\SolarWinds\\Dameware Mini Remote Control\\*", + "dwrcs.exe", + "*\\dwrcs\\*", + "*\\dwrcst.exe", + "DameWare Remote Support.exe", + "SolarWinds-Dameware-MRC*.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/dameware_processes_sigma.yml", + "Description": "Detects potential processes activity of DameWare RMM tool" + } + ], + "References": [ + "https://documentation.solarwinds.com/en/success_center/dameware/content/install-standalone-port-requirements.htm" + ], + "Acknowledgement": [] + }, + { + "Name": "Onionshare", + "Description": "Onionshare is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files (x86)\\OnionShare\\*", + "*\\OnionShare\\*", + "*\\onionshare*.exe", + "OnionShare-win*.msi" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/onionshare_processes_sigma.yml", + "Description": "Detects potential processes activity of Onionshare RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Tailscale", + "Description": "Tailscale is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/14/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "tailscale-*.exe", + "tailscaled.exe", + "tailscale-ipn.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.tailscale.com", + "*.tailscale.io", + "tailscale.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/tailscale_network_sigma.yml", + "Description": "Detects potential network activity of Tailscale RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/tailscale_processes_sigma.yml", + "Description": "Detects potential processes activity of Tailscale RMM tool" + } + ], + "References": [ + "https://tailscale.com/kb/1023/troubleshooting" + ], + "Acknowledgement": [] + }, + { + "Name": "Senso.cloud", + "Description": "Senso.cloud is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "SensoClient.exe", + "SensoService.exe", + "aadg.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.senso.cloud", + "senso.cloud" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/senso.cloud_network_sigma.yml", + "Description": "Detects potential network activity of Senso.cloud RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/senso.cloud_processes_sigma.yml", + "Description": "Detects potential processes activity of Senso.cloud RMM tool" + } + ], + "References": [ + "https://support.senso.cloud/support/solutions/articles/79000116305-firewall-and-content-filter-configuration" + ], + "Acknowledgement": [] + }, + { + "Name": "Proton Drive", + "Description": "Proton Drive is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "UltraViewer", + "Description": "UltraViewer is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/14/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "UltraViewer_Service.exe", + "UltraViewer_setup*", + "UltraViewer_Desktop.exe", + "ultraviewer.exe", + "C:\\Program Files (x86)\\UltraViewer\\UltraViewer_Desktop.exe", + "*\\UltraViewer\\", + "*\\UltraViewer_Desktop.exe", + "ultraviewer_desktop.exe", + "ultraviewer_service.exe", + "UltraViewer_Desktop.exe", + "UltraViewer_setup*", + "UltraViewer_Service.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "* .ultraviewer.net", + "ultraviewer.net" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ultraviewer_network_sigma.yml", + "Description": "Detects potential network activity of UltraViewer RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ultraviewer_processes_sigma.yml", + "Description": "Detects potential processes activity of UltraViewer RMM tool" + } + ], + "References": [ + "https://www.ultraviewer.net/en/200000026-summary-of-ultraviewer-s-security-information.html" + ], + "Acknowledgement": [] + }, + { + "Name": "KickIdler", + "Description": "KickIdler is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "grabberEM.*msi", + "grabberTT*.msi" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "kickidler.com", + "my.kickidler.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/kickidler_network_sigma.yml", + "Description": "Detects potential network activity of KickIdler RMM tool" + } + ], + "References": [ + "https://www.kickidler.com/for-it/faq/" + ], + "Acknowledgement": [] + }, + { + "Name": "Remmina", + "Description": "Remmina is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "eHorus", + "Description": "eHorus is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "ehorus standalone.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "ehorus.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ehorus_network_sigma.yml", + "Description": "Detects potential network activity of eHorus RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ehorus_processes_sigma.yml", + "Description": "Detects potential processes activity of eHorus RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Quick Assist", + "Description": "Quick Assist is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "quickassist.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.support.services.microsoft.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/quick_assist_network_sigma.yml", + "Description": "Detects potential network activity of Quick Assist RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/quick_assist_processes_sigma.yml", + "Description": "Detects potential processes activity of Quick Assist RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "N-Able Advanced Monitoring Agent", + "Description": "N-Able Advanced Monitoring Agent is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "Agent_*_RW.exe", + "BASEClient.exe", + "BASupApp.exe", + "BASupSrvc.exe", + "BASupSrvcCnfg.exe", + "BASupTSHelper.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*remote.management", + "*.logicnow.com", + "*systemmonitor.us", + "*systemmonitor.eu.com", + "*system-monitor.com", + "systemmonitor.us.cdn.cloudflare.net", + "*cloudbackup.management", + "*systemmonitor.co.uk", + "*.n-able.com", + "*.beanywhere.com ", + "*.swi-tc.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/n-able_advanced_monitoring_agent_network_sigma.yml", + "Description": "Detects potential network activity of N-Able Advanced Monitoring Agent RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/n-able_advanced_monitoring_agent_processes_sigma.yml", + "Description": "Detects potential processes activity of N-Able Advanced Monitoring Agent RMM tool" + } + ], + "References": [ + "https://documentation.n-able.com/takecontrol/troubleshooting/Content/kb/Take-Control-Standalone-Ports-and-Domains-Firewall-and-AV-Exclusions.htm" + ], + "Acknowledgement": [] + }, + { + "Name": "KiTTY", + "Description": "KiTTY is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\*\\kitty.exe", + "*\\kitty.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/kitty_processes_sigma.yml", + "Description": "Detects potential processes activity of KiTTY RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "AweRay (AweSun)", + "Description": "AweRay (AweSun) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "aweray_remote*.exe", + "AweSun.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "asapi-us.aweray.net", + "asapi.aweray.net" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/aweray__awesun__network_sigma.yml", + "Description": "Detects potential network activity of AweRay (AweSun) RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/aweray__awesun__processes_sigma.yml", + "Description": "Detects potential processes activity of AweRay (AweSun) RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "FleetDeck", + "Description": "FleetDeck is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "fleetdeck_agent_svc.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "fleetdeck.io" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/fleetdeck_network_sigma.yml", + "Description": "Detects potential network activity of FleetDeck RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/fleetdeck_processes_sigma.yml", + "Description": "Detects potential processes activity of FleetDeck RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "TeleDesktop", + "Description": "TeleDesktop is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/14/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "pstlaunch.exe", + "ptdskclient.exe", + "ptdskhost.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed", + "tele-desk.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/teledesktop_network_sigma.yml", + "Description": "Detects potential network activity of TeleDesktop RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/teledesktop_processes_sigma.yml", + "Description": "Detects potential processes activity of TeleDesktop RMM tool" + } + ], + "References": [ + "http://potomacsoft.com/ - DOA as of 2024" + ], + "Acknowledgement": [] + }, + { + "Name": "Remote Utilities", + "Description": "Remote Utilities is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "rutview.exe", + "rutserv.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.internetid.ru" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remote_utilities_network_sigma.yml", + "Description": "Detects potential network activity of Remote Utilities RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remote_utilities_processes_sigma.yml", + "Description": "Detects potential processes activity of Remote Utilities RMM tool" + } + ], + "References": [ + "https://www.remoteutilities.com/download/" + ], + "Acknowledgement": [] + }, + { + "Name": "Cloud Explorer", + "Description": "Cloud Explorer is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "NetSupport Manager", + "Description": "NetSupport Manager is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "pcictlui.exe", + "pcicfgui.exe", + "client32.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.netsupportmanager.com", + "netsupportmanager.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/netsupport_manager_network_sigma.yml", + "Description": "Detects potential network activity of NetSupport Manager RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/netsupport_manager_processes_sigma.yml", + "Description": "Detects potential processes activity of NetSupport Manager RMM tool" + } + ], + "References": [ + "https://www.netsupportmanager.com/resources/" + ], + "Acknowledgement": [] + }, + { + "Name": "GotoHTTP", + "Description": "GotoHTTP is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "GotoHTTP_x64.exe", + "gotohttp.exe", + "GotoHTTP*.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.gotohttp.com", + "gotohttp.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/gotohttp_network_sigma.yml", + "Description": "Detects potential network activity of GotoHTTP RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/gotohttp_processes_sigma.yml", + "Description": "Detects potential processes activity of GotoHTTP RMM tool" + } + ], + "References": [ + "https://gotohttp.com/goto/help.12x" + ], + "Acknowledgement": [] + }, + { + "Name": "RemoteUtilities", + "Description": "RemoteUtilities is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "rutview.exe", + "*\\Remote Manipulator System - Server\\*", + "C:\\Program Files\\Remote Utilities\\*", + "*\\Remote Utilities\\*", + "rutserv.exe", + "*\\rutserv.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "remoteutilities.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remoteutilities_network_sigma.yml", + "Description": "Detects potential network activity of RemoteUtilities RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remoteutilities_processes_sigma.yml", + "Description": "Detects potential processes activity of RemoteUtilities RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "GoToMyPC", + "Description": "GoToMyPC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.\n", + "Author": "Nasreddine Bencherchali", + "Created": "2024-08-05", + "LastModified": "2024-08-05", + "Details": { + "Website": "", + "PEMetadata": [ + { + "Filename": "AppCore.exe" + }, + { + "Filename": "g2comm.exe" + }, + { + "Filename": "g2file*.exe" + }, + { + "Filename": "g2fileh.exe" + }, + { + "Filename": "g2host.exe" + }, + { + "Filename": "g2m_download.exe" + }, + { + "Filename": "g2mainh.exe" + }, + { + "Filename": "G2MChat.exe" + }, + { + "Filename": "G2MCodecInstExtractor.exe" + }, + { + "Filename": "G2MComm.exe" + }, + { + "Filename": "G2MCoreInstExtractor.exe" + }, + { + "Filename": "G2MFeedback.exe" + }, + { + "Filename": "G2MHost.exee" + }, + { + "Filename": "G2MInstaller.exe" + }, + { + "Filename": "G2MInstallerExtractor.exe" + }, + { + "Filename": "G2MInstHigh.exe" + }, + { + "Filename": "G2MLauncher.exe" + }, + { + "Filename": "G2MMatchMaking.exe" + }, + { + "Filename": "G2MMaterials.exe" + }, + { + "Filename": "G2MPolling.exe" + }, + { + "Filename": "G2MQandA.exe" + }, + { + "Filename": "G2MRecorder.exe" + }, + { + "Filename": "G2MScrUtil64.exe" + }, + { + "Filename": "G2MSessionControl.exe" + }, + { + "Filename": "G2MStart.exe" + }, + { + "Filename": "G2MTesting.exe" + }, + { + "Filename": "G2MTranscoder.exe" + }, + { + "Filename": "G2MUI.exe" + }, + { + "Filename": "G2MUninstall.exe" + }, + { + "Filename": "g2mupload.exe" + }, + { + "Filename": "g2mvideoconference.exe" + }, + { + "Filename": "G2MView.exe" + }, + { + "Filename": "g2printh.exe" + }, + { + "Filename": "g2quick.exe" + }, + { + "Filename": "g2svc.exe" + }, + { + "Filename": "g2tray.exe" + }, + { + "Filename": "gopcsrv.exe" + }, + { + "Filename": "GoToScrUtils.exe" + }, + { + "Filename": "GoTo.exe", + "OriginalFileName": "", + "Description": "" + } + ], + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files (x86)\\GoToMyPC\\*" + ] + }, + "Artifacts": { + "Disk": [ + { + "File": "%AppData%\\GoTo\\Logs\\goto.log", + "Description": "N/A", + "OS": "Windows" + } + ], + "EventLog": [], + "Registry": [ + { + "Path": "HKEY_LOCAL_MACHINE\\WOW6432Node\\Citrix\\GoToMyPc", + "Description": "Configuration settings including registration email" + }, + { + "Path": "HKEY_LOCAL_MACHINE\\WOW6432Node\\Citrix\\GoToMyPc\\GuestInvite", + "Description": "Guest invites send to connect" + }, + { + "Path": "HKEY_CURRENT_USER\\SOFTWARE\\Citrix\\GoToMyPc\\FileTransfer\\history", + "Description": "hostname of the computer making connections and location of transferred files" + }, + { + "Path": "HKEY_USERS\\\\SOFTWARE\\Citrix\\GoToMyPc\\FileTransfer\\history", + "Description": "hostname of the computer making connections and location of transferred files" + } + ], + "Network": [ + { + "Description": "N/A", + "Domains": [ + "*.GoToMyPC.com" + ], + "Ports": [ + "N/A" + ] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/gotomypc_registry_sigma.yml", + "Description": "Detects potential registry activity of GoToMyPC RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/gotomypc_network_sigma.yml", + "Description": "Detects potential network activity of GoToMyPC RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/gotomypc_files_sigma.yml", + "Description": "Detects potential files activity of GoToMyPC RMM tool" + } + ], + "References": [ + "https://support.logmeininc.com/gotomypc/help/what-are-the-optimal-firewall-configurations#", + "https://support.goto.com/training/help/how-do-i-configure-gototraining-to-work-with-firewalls", + "https://ruler-project.github.io/ruler-project/RULER/remote/Citrix%20GoToMyPC/" + ], + "Acknowledgement": [ + { + "Person": "Phill Moore", + "Handle": "@phillmoore" + } + ] + }, + { + "Name": "SmartCode Web VNC", + "Description": "SmartCode Web VNC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files\\TightVNC\\*", + "*\\TightVNC\\*" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Seetrol", + "Description": "Seetrol is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "seetrolcenter.exe", + "seetrolclient.exe", + "seetrolmyservice.exe", + "seetrolremote.exe", + "seetrolsetting.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "seetrol.co.kr" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/seetrol_network_sigma.yml", + "Description": "Detects potential network activity of Seetrol RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/seetrol_processes_sigma.yml", + "Description": "Detects potential processes activity of Seetrol RMM tool" + } + ], + "References": [ + "http://www.seetrol.com/en/features/features3.php" + ], + "Acknowledgement": [] + }, + { + "Name": "RDPView", + "Description": "RDPView is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "dwrcs.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed", + "systemmanager.ru/dntu.en/rdp_view.htm" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rdpview_network_sigma.yml", + "Description": "Detects potential network activity of RDPView RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rdpview_processes_sigma.yml", + "Description": "Detects potential processes activity of RDPView RMM tool" + } + ], + "References": [ + "systemmanager.ru/dntu.en/rdp_view.htm - Same as Damware" + ], + "Acknowledgement": [] + }, + { + "Name": "Zoho Assist", + "Description": "Zoho Assist is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/14/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "zaservice.exe", + "ZMAgent.exe", + "C:\\*\\ZA_Access.exe", + "ZohoMeeting.exe", + "Zohours.exe", + "zohotray.exe", + "ZohoURSService.exe", + "*\\ZA_Access.exe", + "Zaservice.exe", + "za_connect.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.zoho.com.au", + "*.zohoassist.jp", + "assist.zoho.com", + "zoho.com/assist/", + "*.zoho.in", + "downloads.zohodl.com.cn", + "*.zohoassist.com", + "downloads.zohocdn.com", + "gateway.zohoassist.com", + "*.zohoassist.com.cn", + "*.zoho.com.cn", + "*.zoho.com", + "*.zoho.eu" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/zoho_assist_network_sigma.yml", + "Description": "Detects potential network activity of Zoho Assist RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/zoho_assist_processes_sigma.yml", + "Description": "Detects potential processes activity of Zoho Assist RMM tool" + } + ], + "References": [ + "https://www.zoho.com/assist/kb/firewall-configuration.html" + ], + "Acknowledgement": [] + }, + { + "Name": "Xpra", + "Description": "Xpra is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files (x86)\\Xpra\\*", + "*\\Xpra\\*", + "*\\Xpra-Launcher.exe", + "*\\Xpra-x86_64_Setup.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/xpra_processes_sigma.yml", + "Description": "Detects potential processes activity of Xpra RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "CloudBuckIt", + "Description": "CloudBuckIt is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files (x86)\\CloudBuckIt\\*", + "*\\CloudBuckIt\\*", + "*\\CloudBuckIt*.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/cloudbuckit_processes_sigma.yml", + "Description": "Detects potential processes activity of CloudBuckIt RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "DeskNets", + "Description": "DeskNets is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/26/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [ + "https://www.desknets.com/en/download.html" + ], + "Acknowledgement": [] + }, + { + "Name": "ODrive", + "Description": "ODrive is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Users\\*\\current\\", + "*Users\\*\\.odrive", + "*\\Odriveapp.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/odrive_processes_sigma.yml", + "Description": "Detects potential processes activity of ODrive RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "XRDP", + "Description": "XRDP is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "ManageEngine", + "Description": "ManageEngine is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "InstallShield Setup.exe", + "ManageEngine_Remote_Access_Plus.exe", + "*\\dcagentservice.exe", + "C:\\Program Files (x86)\\DesktopCentral_Agent\\bin\\*", + "*\\DesktopCentral_Agent\\bin\\*" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/manageengine_processes_sigma.yml", + "Description": "Detects potential processes activity of ManageEngine RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Impero Connect", + "Description": "Impero Connect is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "ImperoClientSVC.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "imperosoftware.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/impero_connect_network_sigma.yml", + "Description": "Detects potential network activity of Impero Connect RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/impero_connect_processes_sigma.yml", + "Description": "Detects potential processes activity of Impero Connect RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Remcos", + "Description": "Remcos is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "remcos*.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remcos_processes_sigma.yml", + "Description": "Detects potential processes activity of Remcos RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "PDQ Connect", + "Description": "PDQ Connect is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/26/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "pdq-connect*.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "app.pdq.com", + "cfcdn.pdq.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pdq_connect_network_sigma.yml", + "Description": "Detects potential network activity of PDQ Connect RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pdq_connect_processes_sigma.yml", + "Description": "Detects potential processes activity of PDQ Connect RMM tool" + } + ], + "References": [ + "https://connect.pdq.com/hc/en-us/articles/9518992071707-Network-Requirements" + ], + "Acknowledgement": [] + }, + { + "Name": "Terminals", + "Description": "Terminals is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Air Live Drive", + "Description": "Air Live Drive is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files\\AirLiveDrive\\*", + "*\\AirLiveDrive\\*", + "*\\AirLiveDrive.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/air_live_drive_processes_sigma.yml", + "Description": "Detects potential processes activity of Air Live Drive RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Syncro", + "Description": "Syncro is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/13/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "Syncro.Installer.exe", + "Kabuto.App.Runner.exe", + "Syncro.Overmind.Service.exe", + "Kabuto.Installer.exe", + "KabutoSetup.exe", + "Syncro.Service.exe", + "Kabuto.Service.Runner.exe", + "Syncro.App.Runner.exe", + "SyncroLive.Service.exe", + "SyncroLive.Agent.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "kabuto.io", + "*.syncromsp.com", + "*.syncroapi.com", + "syncromsp.com", + "servably.com", + "ld.aurelius.host", + "app.kabuto.io ", + "*.kabutoservices.com", + "repairshopr.com", + "kabutoservices.com", + "attachments.servably.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/syncro_network_sigma.yml", + "Description": "Detects potential network activity of Syncro RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/syncro_processes_sigma.yml", + "Description": "Detects potential processes activity of Syncro RMM tool" + } + ], + "References": [ + "https://community.syncromsp.com/t/syncro-exceptions-and-allowlists/2004" + ], + "Acknowledgement": [] + }, + { + "Name": "247ithelp.com (ConnectWise)", + "Description": "247ithelp.com (ConnectWise) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "Remote Workforce Client.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.247ithelp.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/247ithelp.com__connectwise__network_sigma.yml", + "Description": "Detects potential network activity of 247ithelp.com (ConnectWise) RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/247ithelp.com__connectwise__processes_sigma.yml", + "Description": "Detects potential processes activity of 247ithelp.com (ConnectWise) RMM tool" + } + ], + "References": [ + "Similar / replaced by ScreenConnect" + ], + "Acknowledgement": [] + }, + { + "Name": "Netviewer", + "Description": "Netviewer is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "netviewer*.exe", + "netviewer.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "download.cnet.com/Net-Viewer/3000-2370_4-10034828.html" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/netviewer_network_sigma.yml", + "Description": "Detects potential network activity of Netviewer RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/netviewer_processes_sigma.yml", + "Description": "Detects potential processes activity of Netviewer RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Syspectr", + "Description": "Syspectr is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/26/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "oo-syspectr*.exe", + "OOSysAgent.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "atled.syspectr.com", + "app.syspectr.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/syspectr_network_sigma.yml", + "Description": "Detects potential network activity of Syspectr RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/syspectr_processes_sigma.yml", + "Description": "Detects potential processes activity of Syspectr RMM tool" + } + ], + "References": [ + "https://www.syspectr.com/en/installation-in-a-network" + ], + "Acknowledgement": [] + }, + { + "Name": "I'm InTouch", + "Description": "I'm InTouch is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "iit.exe", + "intouch.exe", + "I'm InTouch Go Installer.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.01com.com", + "01com.com/imintouch-remote-pc-desktop" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/i'm_intouch_network_sigma.yml", + "Description": "Detects potential network activity of I'm InTouch RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/i'm_intouch_processes_sigma.yml", + "Description": "Detects potential processes activity of I'm InTouch RMM tool" + } + ], + "References": [ + "https://www.01com.com/mobile/imintouch-remote-pc-desktop/faqs/remote-access/" + ], + "Acknowledgement": [] + }, + { + "Name": "aria2", + "Description": "aria2 is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\ProgramData\\CentraStage\\AEMAgent\\*", + "*ProgramData\\CentraStage\\AEMAgent\\*", + "*\\Steinberg\\Download Assistant\\3rd Party\\optional\\aria2\\*", + "*\\aria2c.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/aria2_processes_sigma.yml", + "Description": "Detects potential processes activity of aria2 RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "ISL Light", + "Description": "ISL Light is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "islalwaysonmonitor.exe", + "isllight.exe", + "isllightservice.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "islonline.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/isl_light_network_sigma.yml", + "Description": "Detects potential network activity of ISL Light RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/isl_light_processes_sigma.yml", + "Description": "Detects potential processes activity of ISL Light RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Mocha VNC Lite", + "Description": "Mocha VNC Lite is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "This installs a modified VNC and cannot be blocked by path separate from VNC", + "This installs a modified VNC and cannot be blocked by path separate from VNC", + "*\\RealVNC\\VNC4\\*" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Ericom Connect", + "Description": "Ericom Connect is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "EricomConnectRemoteHost*.exe", + "ericomconnnectconfigurationtool.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed", + "ericom.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ericom_connect_network_sigma.yml", + "Description": "Detects potential network activity of Ericom Connect RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ericom_connect_processes_sigma.yml", + "Description": "Detects potential processes activity of Ericom Connect RMM tool" + } + ], + "References": [ + "https://www.ericom.com/connect-accessnow/" + ], + "Acknowledgement": [] + }, + { + "Name": "Yandex.Disk", + "Description": "Yandex.Disk is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files (x86)\\Yandex\\*", + "*\\Yandex\\*", + "*\\YandexDisk2.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/yandex.disk_processes_sigma.yml", + "Description": "Detects potential processes activity of Yandex.Disk RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "LiteManager", + "Description": "LiteManager is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "lmnoipserver.exe", + "ROMFUSClient.exe", + "romfusclient.exe", + "romviewer.exe", + "romserver.exe", + "ROMServer.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.litemanager.ru", + "*.litemanager.com", + "litemanager.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/litemanager_network_sigma.yml", + "Description": "Detects potential network activity of LiteManager RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/litemanager_processes_sigma.yml", + "Description": "Detects potential processes activity of LiteManager RMM tool" + } + ], + "References": [ + "https://www.litemanager.com/articles/LiteManager_remote_access_to_a_desktop_via_the_Internet_or_LAN/" + ], + "Acknowledgement": [] + }, + { + "Name": "BeAnyWhere", + "Description": "BeAnyWhere is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "basuptshelper.exe", + "basupsrvcupdate.exe", + "BASupApp.exe", + "BASupSysInf.exe", + "BASupAppSrvc.exe", + "TakeControl.exe", + "BASupAppElev.exe", + "basupsrvc.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "beanywhere.en.uptodown.com/windows", + "beanywhere.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/beanywhere_network_sigma.yml", + "Description": "Detects potential network activity of BeAnyWhere RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/beanywhere_processes_sigma.yml", + "Description": "Detects potential processes activity of BeAnyWhere RMM tool" + } + ], + "References": [ + "https://www.shouldiremoveit.com/beanywhere-support-service-40908-program.aspx" + ], + "Acknowledgement": [] + }, + { + "Name": "Jump Cloud", + "Description": "Jump Cloud is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/26/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "JumpCloud*.exe " + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.api.jumpcloud.com", + "*.assist.jumpcloud.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/jump_cloud_network_sigma.yml", + "Description": "Detects potential network activity of Jump Cloud RMM tool" + } + ], + "References": [ + "https://jumpcloud.com/support/understand-remote-assist-agent" + ], + "Acknowledgement": [] + }, + { + "Name": "Remote Desktop Manager (Devolutions)", + "Description": "Remote Desktop Manager (Devolutions) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "AweRay", + "Description": "AweRay is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "aweray_remote*.exe", + "AweSun.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "asapi*.aweray.net", + "client-api.aweray.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/aweray_network_sigma.yml", + "Description": "Detects potential network activity of AweRay RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/aweray_processes_sigma.yml", + "Description": "Detects potential processes activity of AweRay RMM tool" + } + ], + "References": [ + "https://sun.aweray.com/help" + ], + "Acknowledgement": [] + }, + { + "Name": "Remobo", + "Description": "Remobo is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "remobo.exe", + "remobo_client.exe", + "remobo_tracker.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed", + "remobo.en.softonic.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remobo_network_sigma.yml", + "Description": "Detects potential network activity of Remobo RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remobo_processes_sigma.yml", + "Description": "Detects potential processes activity of Remobo RMM tool" + } + ], + "References": [ + "https://www.remobo.com - DOA as of 2024" + ], + "Acknowledgement": [] + }, + { + "Name": "ESET Remote Administrator", + "Description": "ESET Remote Administrator is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "era.exe", + "einstaller.exe", + "ezhelp*.exe", + "eratool.exe", + "ERAAgent.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed", + "eset.com/me/business/remote-management/remote-administrator/" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/eset_remote_administrator_network_sigma.yml", + "Description": "Detects potential network activity of ESET Remote Administrator RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/eset_remote_administrator_processes_sigma.yml", + "Description": "Detects potential processes activity of ESET Remote Administrator RMM tool" + } + ], + "References": [ + "eset.com/me/business/remote-management/remote-administrator/" + ], + "Acknowledgement": [] + }, + { + "Name": "BeyondTrust (Bomgar)", + "Description": "BeyondTrust (Bomgar) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "bomgar-scc.exe", + "bomgar-rdp.exe", + "bomgar-scc-*.exe", + "bomgar-pac-*.exe", + "bomgar-pac.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "bomgarcloud.com", + "*.bomgarcloud.com", + "*.beyondtrustcloud.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/beyondtrust__bomgar__network_sigma.yml", + "Description": "Detects potential network activity of BeyondTrust (Bomgar) RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/beyondtrust__bomgar__processes_sigma.yml", + "Description": "Detects potential processes activity of BeyondTrust (Bomgar) RMM tool" + } + ], + "References": [ + "https://www.beyondtrust.com/docs/remote-support/getting-started/deployment/cloud/network.htm" + ], + "Acknowledgement": [] + }, + { + "Name": "Ultra VNC", + "Description": "Ultra VNC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files\\uvnc bvba\\UltraVNC\\*", + "*\\uvnc bvba\\UltraVNC\\*", + "*\\UVNC_Launch.exe", + "*\\winvnc.exe", + "*\\vncviewer.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ultra_vnc_processes_sigma.yml", + "Description": "Detects potential processes activity of Ultra VNC RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "pcAnywhere", + "Description": "pcAnywhere is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "awhost32.exe", + "awrem32.exe", + "pcaquickconnect.exe", + "winaw32.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pcanywhere_network_sigma.yml", + "Description": "Detects potential network activity of pcAnywhere RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pcanywhere_processes_sigma.yml", + "Description": "Detects potential processes activity of pcAnywhere RMM tool" + } + ], + "References": [ + "https://en.wikipedia.org/wiki/PcAnywhere" + ], + "Acknowledgement": [] + }, + { + "Name": "Remote.it", + "Description": "Remote.it is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "remote-it-installer.exe", + "remote.it.exe", + "remoteit.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "auth.api.remote.it", + "api.remote.it", + "remote.it" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remote.it_network_sigma.yml", + "Description": "Detects potential network activity of Remote.it RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remote.it_processes_sigma.yml", + "Description": "Detects potential processes activity of Remote.it RMM tool" + } + ], + "References": [ + "https://docs.remote.it/introduction/get-started" + ], + "Acknowledgement": [] + }, + { + "Name": "Cruz", + "Description": "Cruz is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "resources.doradosoftware.com/cruz-rmm" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/cruz_network_sigma.yml", + "Description": "Detects potential network activity of Cruz RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Guacamole", + "Description": "Guacamole is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "guacd.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed", + "guacamole.apache.org" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/guacamole_network_sigma.yml", + "Description": "Detects potential network activity of Guacamole RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/guacamole_processes_sigma.yml", + "Description": "Detects potential processes activity of Guacamole RMM tool" + } + ], + "References": [ + "guacamole.apache.org" + ], + "Acknowledgement": [] + }, + { + "Name": "Addigy", + "Description": "Addigy is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/27/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "addigy-*.pkg" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "prod.addigy.com", + "grtmprod.addigy.com", + "agents.addigy.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/addigy_network_sigma.yml", + "Description": "Detects potential network activity of Addigy RMM tool" + } + ], + "References": [ + "https://addigy.com/" + ], + "Acknowledgement": [] + }, + { + "Name": "AeroAdmin", + "Description": "AeroAdmin is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "aeroadmin.exe", + "AeroAdmin.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "auth*.aeroadmin.com", + "aeroadmin.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/aeroadmin_network_sigma.yml", + "Description": "Detects potential network activity of AeroAdmin RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/aeroadmin_processes_sigma.yml", + "Description": "Detects potential processes activity of AeroAdmin RMM tool" + } + ], + "References": [ + "https://support.aeroadmin.com/kb/faq.php?id=58" + ], + "Acknowledgement": [] + }, + { + "Name": "FleetDesk.io", + "Description": "FleetDesk.io is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "fleetdeck_agent_svc.exe", + "fleetdeck_commander_svc.exe", + "fleetdeck_installer.exe", + "fleetdeck_agent.exe", + "fleetdeck_commander_launcher.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.fleetdeck.io", + "cognito-idp.us-west-2.amazonaws.com", + "fleetdeck.io" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/fleetdesk.io_network_sigma.yml", + "Description": "Detects potential network activity of FleetDesk.io RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/fleetdesk.io_processes_sigma.yml", + "Description": "Detects potential processes activity of FleetDesk.io RMM tool" + } + ], + "References": [ + "https://fleetdeck.io/faq/" + ], + "Acknowledgement": [] + }, + { + "Name": "Dameware-mini remote control Protocol", + "Description": "Dameware-mini remote control Protocol is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "dntus*.exe", + "dwrcs.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "dameware.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/dameware-mini_remote_control_protocol_network_sigma.yml", + "Description": "Detects potential network activity of Dameware-mini remote control Protocol RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/dameware-mini_remote_control_protocol_processes_sigma.yml", + "Description": "Detects potential processes activity of Dameware-mini remote control Protocol RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Access Remote PC", + "Description": "Access Remote PC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "rpcgrab.exe", + "rpcsetup.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/access_remote_pc_processes_sigma.yml", + "Description": "Detects potential processes activity of Access Remote PC RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Acronic Cyber Protect (Remotix)", + "Description": "Acronic Cyber Protect (Remotix) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/26/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "AcronisCyberProtectConnectQuickAssist*.exe", + "AcronisCyberProtectConnectAgent.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "cloud.acronis.com", + "agents*-cloud.acronis.com", + "gw.remotix.com", + "connect.acronis.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/acronic_cyber_protect__remotix__network_sigma.yml", + "Description": "Detects potential network activity of Acronic Cyber Protect (Remotix) RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/acronic_cyber_protect__remotix__processes_sigma.yml", + "Description": "Detects potential processes activity of Acronic Cyber Protect (Remotix) RMM tool" + } + ], + "References": [ + "https://kb.acronis.com/content/47189" + ], + "Acknowledgement": [] + }, + { + "Name": "Instant Housecall", + "Description": "Instant Housecall is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "hsloader.exe", + "InstantHousecall.exe", + "ihcserver.exe", + "instanthousecall.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.instanthousecall.com", + "secure.instanthousecall.com", + "*.instanthousecall.net", + "instanthousecall.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/instant_housecall_network_sigma.yml", + "Description": "Detects potential network activity of Instant Housecall RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/instant_housecall_processes_sigma.yml", + "Description": "Detects potential processes activity of Instant Housecall RMM tool" + } + ], + "References": [ + "https://instanthousecall.com/features/" + ], + "Acknowledgement": [] + }, + { + "Name": "SkyFex", + "Description": "SkyFex is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "Deskroll.exe", + "DeskRollUA.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "skyfex.com", + "deskroll.com", + "*.deskroll.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/skyfex_network_sigma.yml", + "Description": "Detects potential network activity of SkyFex RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/skyfex_processes_sigma.yml", + "Description": "Detects potential processes activity of SkyFex RMM tool" + } + ], + "References": [ + "https://skyfex.com/" + ], + "Acknowledgement": [] + }, + { + "Name": "PSEXEC", + "Description": "PSEXEC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "psexec.exe", + "psexecsvc.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/psexec_network_sigma.yml", + "Description": "Detects potential network activity of PSEXEC RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/psexec_processes_sigma.yml", + "Description": "Detects potential processes activity of PSEXEC RMM tool" + } + ], + "References": [ + "https://learn.microsoft.com/en-us/sysinternals/downloads/psexec" + ], + "Acknowledgement": [] + }, + { + "Name": "MSP360", + "Description": "MSP360 is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "Online Backup.exe", + "CBBackupPlan.exe", + "Cloud.Backup.Scheduler.exe", + "Cloud.Backup.RM.Service.exe", + "cbb.exe", + "CloudRaService.exe", + "CloudRaSd.exe", + "CloudRaCmd.exe", + "CloudRaUtilities.exe", + "Remote Desktop.exe", + "Connect.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.cloudberrylab.com", + "*.msp360.com", + "*.mspbackups.com", + "msp360.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/msp360_network_sigma.yml", + "Description": "Detects potential network activity of MSP360 RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/msp360_processes_sigma.yml", + "Description": "Detects potential processes activity of MSP360 RMM tool" + } + ], + "References": [ + "https://kb.msp360.com/managed-backup-service/mbs-tcp-ports-configuration#" + ], + "Acknowledgement": [] + }, + { + "Name": "SecureCRT", + "Description": "SecureCRT is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\*\\SecureCRT.EXE", + "*\\SecureCRT.EXE", + "*\\VanDyke Software\\ClientPack\\*" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/securecrt_processes_sigma.yml", + "Description": "Detects potential processes activity of SecureCRT RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "VNC", + "Description": "VNC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/14/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "winvnc*.exe", + "vncserver.exe", + "winwvc.exe", + "winvncsc.exe", + "vncserverui.exe", + "vncviewer.exe", + "winvnc.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed", + "realvnc.com/en/connect/download/vnc" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/vnc_network_sigma.yml", + "Description": "Detects potential network activity of VNC RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/vnc_processes_sigma.yml", + "Description": "Detects potential processes activity of VNC RMM tool" + } + ], + "References": [ + "https://realvnc.com/en/connect/download/vnc" + ], + "Acknowledgement": [] + }, + { + "Name": "Panorama9", + "Description": "Panorama9 is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "p9agent*.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "trusted.panorama9.com", + "changes.panorama9.com", + "panorama9.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/panorama9_network_sigma.yml", + "Description": "Detects potential network activity of Panorama9 RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/panorama9_processes_sigma.yml", + "Description": "Detects potential processes activity of Panorama9 RMM tool" + } + ], + "References": [ + "https://support.panorama9.com/en/articles/1859605-what-ports-and-hosts-does-the-p9-agent-communicate-with" + ], + "Acknowledgement": [] + }, + { + "Name": "FixMe", + "Description": "FixMe is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "FixMeit Client.exe", + "TiExpertStandalone.exe", + "FixMeitClient*.exe", + "TiExpertCore.exe", + "FixMeit Unattended Access Setup.exe", + "FixMeit Expert Setup.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "fixme.it" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/fixme_network_sigma.yml", + "Description": "Detects potential network activity of FixMe RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/fixme_processes_sigma.yml", + "Description": "Detects potential processes activity of FixMe RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "ISL Online", + "Description": "ISL Online is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "*\\ISLLight.exe", + "isllight.exe", + "ISLLightClient.exe", + "C:\\Program Files (x86)\\ISL Online\\ISL Light*", + "*\\ISL Online\\ISL Light*", + "ISLLight.exe", + "isllightservice.exe", + "islalwaysonmonitor.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.islonline.com", + "*.islonline.net" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/isl_online_network_sigma.yml", + "Description": "Detects potential network activity of ISL Online RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/isl_online_processes_sigma.yml", + "Description": "Detects potential processes activity of ISL Online RMM tool" + } + ], + "References": [ + "https://help.islonline.com/19818/165940" + ], + "Acknowledgement": [] + }, + { + "Name": "RES Automation Manager", + "Description": "RES Automation Manager is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "wisshell*.exe", + "wmc.exe", + "wmc_deployer.exe", + "wmcsvc.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed", + "ivanti.com/" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/res_automation_manager_network_sigma.yml", + "Description": "Detects potential network activity of RES Automation Manager RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/res_automation_manager_processes_sigma.yml", + "Description": "Detects potential processes activity of RES Automation Manager RMM tool" + } + ], + "References": [ + "https://forums.ivanti.com/s/article/INFO-Which-ports-does-Ivanti-Automation-use?language=en_US&ui-force-components-controllers-recordGlobalValueProvider.RecordGvp.getRecord=1" + ], + "Acknowledgement": [] + }, + { + "Name": "rclone", + "Description": "rclone is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "portable tool. No install path", + "portable tool. No install path", + "rclone*.zip", + "*\\rclone.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rclone_processes_sigma.yml", + "Description": "Detects potential processes activity of rclone RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Atera", + "Description": "Atera is a remote monitoring and management (RMM) tool. It is used by threat actors to deploy ransomware or facilitate command execution and lateral movement.\n", + "Created": "2024/08/03", + "LastModified": "", + "Details": { + "Website": "https://www.atera.com/", + "PEMetadata": [ + { + "Filename": "AteraAgent.exe", + "OriginalFileName": "AteraAgent.exe", + "Description": "AteraAgent" + } + ], + "Privileges": "SYSTEM", + "Free": "30 day trial", + "Verification": "None", + "SupportedOS": [ + "Windows", + "MacOS", + "Linux" + ], + "Capabilities": [ + "Integrated remote access with Splashtop and AnyDesk", + "Remote monitoring and management", + "Patch management", + "Network discovery", + "Backup and disaster recovery", + "Helpdesk and ticketing", + "Reporting and analytics", + "Billing and invoicing", + "Customer portal", + "Mobile app" + ], + "Vulnerabilities": [ + "CVE-2023-26078", + "CVE-2023-26077" + ], + "InstallationPaths": [ + "*\\AgentPackageNetworkDiscovery.exe", + "*\\AgentPackageTaskScheduler.exe", + "*\\ATERA Networks\\AteraAgent\\*", + "*\\AteraAgent.exe", + "atera_agent.exe", + "atera_agent.exe", + "ateraagent.exe", + "C:\\Program Files\\ATERA Networks\\AteraAgent\\*", + "C:\\Program Files\\Atera Networks", + "C:\\Program Files (x86)\\Atera Networks", + "syncrosetup.exe" + ] + }, + "Artifacts": { + "Disk": [ + { + "File": "C:\\Program Files\\ATERA Networks\\AteraAgent\\Packages\\AgentPackageRunCommandInteractive\\log.txt", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "C:\\Program Files\\ATERA Networks\\AteraAgent\\Packages\\*", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "C:\\Program Files\\ATERA Networks\\AteraAgent\\AteraAgent.exe", + "Description": "Atera service binary", + "OS": "Windows" + }, + { + "File": "C:\\Program Files\\Atera Networks\\AlphaAgent.exe", + "Description": "Atera service binary", + "OS": "Windows" + }, + { + "File": "C:\\Program Files\\ATERA Networks\\AteraAgent\\Packages\\AgentPackageSTRemote\\AgentPackageSTRemote.exe", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "C:\\Program Files\\ATERA Networks\\AteraAgent\\Packages\\AgentPackageMonitoring\\AgentPackageMonitoring.exe", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "C:\\Program Files\\ATERA Networks\\AteraAgent\\Packages\\AgentPackageHeartbeat\\AgentPackageHeartbeat.exe", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "C:\\Program Files\\ATERA Networks\\AteraAgent\\Packages\\AgentPackageFileExplorer\\AgentPackageFileExplorer.exe", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "C:\\Program Files\\ATERA Networks\\AteraAgent\\Packages\\AgentPackageRunCommandInteractive\\AgentPackageRunCommandInteractive.exe", + "Description": "N/A", + "OS": "Windows" + } + ], + "EventLog": [ + { + "EventID": 7045, + "ProviderName": "Service Control Manager", + "LogFile": "System.evtx", + "ServiceName": "AteraAgent", + "ImagePath": "\"C:\\\\Program Files (x86)\\\\ATERA Networks\\\\AteraAgent\\\\AteraAgent.exe\"", + "Description": "Service installation event as result of AteraAgent installation." + }, + { + "EventID": 7045, + "ProviderName": "Service Control Manager", + "LogFile": "System.evtx", + "ServiceName": "WinRing0_1_2_0", + "ImagePath": "\"C:\\\\Program Files (x86)\\\\ATERA Networks\\\\AteraAgent\\\\Packages\\\\AgentPackageMonitoring\\\\OpenHardwareMonitorLib.sys\"", + "Description": "Service installation event as result of Atera pakcage manager installation." + }, + { + "EventID": 11707, + "ProviderName": "MsiInstaller", + "LogFile": "Application.evtx", + "Data": "Product: AteraAgent -- Installation completed successfully.", + "Description": "Service installation event as result of AteraAgent installation." + }, + { + "EventID": 4688, + "ProviderName": "Microsoft-Security-Auditing", + "LogFile": "Security.evtx", + "CommandLine": "C:\\\\Program Files\\\\ATERA Networks\\\\AteraAgent\\\\Packages\\\\AgentPackageFileExplorer\\\\AgentPackageFileExplorer.exe XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXX XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXX agent-api.atera.com/Production 443 [BASE64BLOB]", + "Description": "Service installation event as result of AteraAgent installation." + } + ], + "Registry": [ + { + "Path": "HKLM\\SOFTWARE\\ATERA Networks\\AlphaAgent", + "Description": null + }, + { + "Path": "HKLM\\SYSTEM\\CurrentControlSet\\Services\\AteraAgent", + "Description": null + }, + { + "Path": "KLM\\SOFTWARE\\WOW6432Node\\Splashtop Inc.", + "Description": null + }, + { + "Path": "HKLM\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Splashtop Software Updater", + "Description": null + }, + { + "Path": "HKLM\\SYSTEM\\ControlSet\\Services\\EventLog\\Application\\AlphaAgent", + "Description": null + }, + { + "Path": "HKLM\\SYSTEM\\ControlSet\\Services\\EventLog\\Application\\AteraAgent", + "Description": null + }, + { + "Path": "HKLM\\SOFTWARE\\Microsoft\\Tracing\\AteraAgent_RASAPI32", + "Description": null + }, + { + "Path": "HKLM\\SOFTWARE\\Microsoft\\Tracing\\AteraAgent_RASMANCS", + "Description": null + }, + { + "Path": "HKLM\\SOFTWARE\\ATERA Networks\\*", + "Description": null + } + ], + "Network": [ + { + "Description": "N/A", + "Domains": [ + "pubsub.atera.com" + ], + "Ports": [ + "N/A" + ] + }, + { + "Description": "N/A", + "Domains": [ + "pubsub.pubnub.com" + ], + "Ports": [ + "N/A" + ] + }, + { + "Description": "N/A", + "Domains": [ + "agentreporting.atera.com" + ], + "Ports": [ + "N/A" + ] + }, + { + "Description": "N/A", + "Domains": [ + "getalphacontrol.com" + ], + "Ports": [ + "N/A" + ] + }, + { + "Description": "N/A", + "Domains": [ + "app.atera.com" + ], + "Ports": [ + "N/A" + ] + }, + { + "Description": "N/A", + "Domains": [ + "agenthb.atera.com" + ], + "Ports": [ + "N/A" + ] + }, + { + "Description": "N/A", + "Domains": [ + "packagesstore.blob.core.windows.net" + ], + "Ports": [ + "N/A" + ] + }, + { + "Description": "N/A", + "Domains": [ + "ps.pndsn.com" + ], + "Ports": [ + "N/A" + ] + }, + { + "Description": "N/A", + "Domains": [ + "agent-api.atera.com" + ], + "Ports": [ + "N/A" + ] + }, + { + "Description": "N/A", + "Domains": [ + "cacerts.thawte.com" + ], + "Ports": [ + "N/A" + ] + }, + { + "Description": "N/A", + "Domains": [ + "agentreportingstore.blob.core.windows.net" + ], + "Ports": [ + "N/A" + ] + }, + { + "Description": "N/A", + "Domains": [ + "atera-agent-heartbeat.servicebus.windows.net" + ], + "Ports": [ + "N/A" + ] + }, + { + "Description": "N/A", + "Domains": [ + "ps.atera.com" + ], + "Ports": [ + "N/A" + ] + }, + { + "Description": "N/A", + "Domains": [ + "atera.pubnubapi.com" + ], + "Ports": [ + "N/A" + ] + }, + { + "Description": "N/A", + "Domains": [ + "appcdn.atera.com" + ], + "Ports": [ + "N/A" + ] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/The-DFIR-Report/Sigma-Rules/blob/d67407d357ad32b247e2a303abc5a38bb30fd576/rules/windows/process_creation/proc_creation_win_ateraagent_malicious_installations.yml", + "Name": "AteraAgent malicious installations", + "Description": "Detects AteraAgent installations with suspicious command line arguments." + }, + { + "Sigma": "https://github.com/SigmaHQ/sigma/blob/782f0f524e6f797ea114fe0d87b22cb4abaa6b7c/rules/windows/builtin/application/msiinstaller/win_software_atera_rmm_agent_install.yml", + "Name": "Atera Agent Installation", + "Description": "Detects Atera Agent installation." + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/atera_registry_sigma.yml", + "Description": "Detects potential registry activity of Atera RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/atera_network_sigma.yml", + "Description": "Detects potential network activity of Atera RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/atera_files_sigma.yml", + "Description": "Detects potential files activity of Atera RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/atera_processes_sigma.yml", + "Description": "Detects potential processes activity of Atera RMM tool" + } + ], + "References": [ + "https://support.atera.com/hc/en-us/articles/360015461139-Firewall-Settings-for-Atera-s-Integrations", + "https://support.atera.com/hc/en-us/articles/215955967-Troubleshoot-Atera-s-Windows-agent", + "https://support.atera.com/hc/en-us/articles/115015619747-Release-Notes-February-2018", + "https://thedfirreport.com/?s=ateraagent" + ], + "Acknowledgement": [ + { + "Person": "Théo Letailleur", + "Handle": "in/theosyn" + }, + { + "Person": "Nasreddine Bencherchali", + "Handle": "@nas_bench" + }, + { + "Person": "Kostas", + "Handle": "@kostastsale" + } + ] + }, + { + "Name": "CrossLoop", + "Description": "CrossLoop is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "crossloopservice.exe", + "CrossLoopConnect.exe", + "WinVNCStub.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.crossloop.com", + "crossloop.en.softonic.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/crossloop_network_sigma.yml", + "Description": "Detects potential network activity of CrossLoop RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/crossloop_processes_sigma.yml", + "Description": "Detects potential processes activity of CrossLoop RMM tool" + } + ], + "References": [ + "www.CrossLoop.com -> redirects to avast.com" + ], + "Acknowledgement": [] + }, + { + "Name": "Level.io", + "Description": "Level.io is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "level-windows-amd64.exe", + "level.exe", + "level-remote-control-ffmpeg.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "level.io", + "*.level.io" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/level.io_network_sigma.yml", + "Description": "Detects potential network activity of Level.io RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/level.io_processes_sigma.yml", + "Description": "Detects potential processes activity of Level.io RMM tool" + } + ], + "References": [ + "https://docs.level.io/1.0/admin-guides/troubleshooting-agent-issues" + ], + "Acknowledgement": [] + }, + { + "Name": "Tactical RMM", + "Description": "Tactical RMM is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/14/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "tacticalrmm.exe", + "tacticalrmm.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "login.tailscale.com", + "login.tailscale.com", + "docs.tacticalrmm.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/tactical_rmm_network_sigma.yml", + "Description": "Detects potential network activity of Tactical RMM RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/tactical_rmm_processes_sigma.yml", + "Description": "Detects potential processes activity of Tactical RMM RMM tool" + } + ], + "References": [ + "docs.tacticalrmm.com" + ], + "Acknowledgement": [] + }, + { + "Name": "Fortra", + "Description": "Fortra is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "fortra.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/fortra_network_sigma.yml", + "Description": "Detects potential network activity of Fortra RMM tool" + } + ], + "References": [ + "https://www.fortra.com - No free/cloud RMM softwars listed" + ], + "Acknowledgement": [] + }, + { + "Name": "Sorillus", + "Description": "Sorillus is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "Sorillus-Launcher*.exe", + "Sorillus Launcher.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.sorillus.com", + "sorillus.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/sorillus_network_sigma.yml", + "Description": "Detects potential network activity of Sorillus RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/sorillus_processes_sigma.yml", + "Description": "Detects potential processes activity of Sorillus RMM tool" + } + ], + "References": [ + "https://sorillus.com/" + ], + "Acknowledgement": [] + }, + { + "Name": "RemoteCall", + "Description": "RemoteCall is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "rcengmgru.exe", + "rcmgrsvc.exe", + "rxstartsupport.exe", + "rcstartsupport.exe", + "raautoup.exe", + "agentu.exe", + "remotesupportplayeru.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.remotecall.com", + "*.startsupport.com", + "remotecall.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remotecall_network_sigma.yml", + "Description": "Detects potential network activity of RemoteCall RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remotecall_processes_sigma.yml", + "Description": "Detects potential processes activity of RemoteCall RMM tool" + } + ], + "References": [ + "https://help.remotecall.com/hc/en-us/articles/360005128814--RemoteCall-Server-List-For-Firewall" + ], + "Acknowledgement": [] + }, + { + "Name": "Laplink Everywhere", + "Description": "Laplink Everywhere is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "laplink.exe", + "laplink-everywhere-setup*.exe", + "laplinkeverywhere.exe", + "llrcservice.exe", + "serverproxyservice.exe", + "OOSysAgent.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "everywhere.laplink.com", + "le.laplink.com", + "atled.syspectr.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/laplink_everywhere_network_sigma.yml", + "Description": "Detects potential network activity of Laplink Everywhere RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/laplink_everywhere_processes_sigma.yml", + "Description": "Detects potential processes activity of Laplink Everywhere RMM tool" + } + ], + "References": [ + "https://everywhere.laplink.com/docs" + ], + "Acknowledgement": [] + }, + { + "Name": "MEGAsync", + "Description": "MEGAsync is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Users\\*\\AppData\\Local\\MEGAsync\\*", + "*Users\\*\\AppData\\Local\\MEGAsync\\*", + "*Users\\*\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", + "*ProgramData\\MEGAsync\\*", + "*\\MEGAsyncSetup64.exe", + "*\\MEGAupdater.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/megasync_processes_sigma.yml", + "Description": "Detects potential processes activity of MEGAsync RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Neturo", + "Description": "Neturo is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "neturo*.exe", + "ntrntservice.exe", + "neturo.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "neturo.uplus.co.kr" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/neturo_network_sigma.yml", + "Description": "Detects potential network activity of Neturo RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/neturo_processes_sigma.yml", + "Description": "Detects potential processes activity of Neturo RMM tool" + } + ], + "References": [ + "Obscure, located an older copy here: http://www.iconpos.com/pos/home/iconpos/bbs.php?id=file&q=view&uid=2" + ], + "Acknowledgement": [] + }, + { + "Name": "Distant Desktop", + "Description": "Distant Desktop is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "distant-desktop.exe", + "dd.exe", + "ddsystem.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.distantdesktop.com", + "*signalserver.xyz" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/distant_desktop_network_sigma.yml", + "Description": "Detects potential network activity of Distant Desktop RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/distant_desktop_processes_sigma.yml", + "Description": "Detects potential processes activity of Distant Desktop RMM tool" + } + ], + "References": [ + "https://www.distantdesktop.com/manual/first-start.htm" + ], + "Acknowledgement": [] + }, + { + "Name": "rsync", + "Description": "rsync is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Anyplace Control", + "Description": "Anyplace Control is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "apc_host.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "anyplace-control.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/anyplace_control_network_sigma.yml", + "Description": "Detects potential network activity of Anyplace Control RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/anyplace_control_processes_sigma.yml", + "Description": "Detects potential processes activity of Anyplace Control RMM tool" + } + ], + "References": [ + "http://www.anyplace-control.com/anyplace-control/help/faq.htm" + ], + "Acknowledgement": [] + }, + { + "Name": "JollysFastVNC", + "Description": "JollysFastVNC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "ExtraPuTTY", + "Description": "ExtraPuTTY is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Users\\*\\ExtraPuTTY-0.30-2016-01-28-installer.exe", + "*Users\\*\\ExtraPuTTY-0.30-2016-01-28-installer.exe", + "*\\ExtraPuTTY-0.30-2016-01-28-installer.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/extraputty_processes_sigma.yml", + "Description": "Detects potential processes activity of ExtraPuTTY RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "rdpwrap", + "Description": "rdpwrap is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "RDPWInst.exe", + "RDPCheck.exe", + "RDPConf.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed", + "github.com/stascorp/rdpwrap" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rdpwrap_network_sigma.yml", + "Description": "Detects potential network activity of rdpwrap RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rdpwrap_processes_sigma.yml", + "Description": "Detects potential processes activity of rdpwrap RMM tool" + } + ], + "References": [ + "github.com/stascorp/rdpwrap" + ], + "Acknowledgement": [] + }, + { + "Name": "N-ABLE Remote Access Software", + "Description": "N-ABLE Remote Access Software is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "n-able.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/n-able_remote_access_software_network_sigma.yml", + "Description": "Detects potential network activity of N-ABLE Remote Access Software RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Google Drive", + "Description": "Google Drive is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files\\Google\\Drive File Stream\\*", + "*\\Google\\Drive File Stream\\*", + "*Users\\*\\AppData\\*\\Google\\DriveFS*", + "G:\\My Drive*", + "*\\GoogleDriveFS.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/google_drive_processes_sigma.yml", + "Description": "Detects potential processes activity of Google Drive RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Solar-PuTTY", + "Description": "Solar-PuTTY is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files\\Solar-Putty-v4\\*", + "*\\Solar-Putty-v4\\*", + "*\\Solar-PuTTY.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/solar-putty_processes_sigma.yml", + "Description": "Detects potential processes activity of Solar-PuTTY RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "TeamViewer", + "Description": "TeamViewer is a remote monitoring and management (RMM) tool.\n", + "Author": "Nasreddine Bencherchali, Michael Haag", + "Created": "2024-08-02", + "LastModified": "2024-08-02", + "Details": { + "Website": "https://www.teamviewer.com/en", + "PEMetadata": [ + { + "Filename": "TeamViewer.exe", + "OriginalFileName": "", + "Description": "", + "Product": "TeamViewer" + } + ], + "Privileges": "user", + "Free": true, + "Verification": false, + "SupportedOS": [ + "Android", + "ChromeOS", + "IOS", + "Linux", + "Mac", + "Windows" + ], + "Capabilities": [], + "Vulnerabilities": [ + "https://www.cvedetails.com/vulnerability-list/vendor_id-11100/product_id-19942/Teamviewer-Teamviewer.html" + ], + "InstallationPaths": [ + "C:\\Program Files\\TeamViewer\\", + "teamviewer_desktop.exe", + "teamviewer_service.exe", + "teamviewerhost" + ] + }, + "Artifacts": { + "Disk": [ + { + "File": "C:\\Users\\\\AppData\\Local\\Temp\\TeamViewer\\TV15Install.log", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "TeamViewer\\d\\d_Logfile\\.log", + "Description": "N/A", + "OS": "Windows", + "Type": "Regex" + }, + { + "File": "C:\\Program Files\\TeamViewer\\Connections_incoming.txt", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "C:\\Program Files\\TeamViewer\\TVNetwork.log", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "%LOCALAPPDATA%\\Temp\\TeamViewer\\TV15Install.log", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "%APPDATA%\\\\TeamViewer\\\\TeamViewer\\d\\d_Logfile\\.log", + "Description": "N/A", + "OS": "Windows", + "Type": "Regex" + }, + { + "File": "teamviewerqs.exe", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "tv_w32.exe", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "tv_w64.exe", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "tv_x64.exe", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "teamviewer.exe", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "teamviewer_service.exe", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "%LOCALAPPDATA%\\TeamViewer\\Database\\tvchatfilecache.db", + "Description": "SQlite 3 database storing cache about TeamViewer chat", + "OS": "Windows" + }, + { + "File": "%LOCALAPPDATA%\\TeamViewer\\RemotePrinting\\tvprint.db", + "Description": "SQlite 3 database storing TeamViewer print jobs", + "OS": "Windows" + }, + { + "File": "%PROGRAMDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\TeamViewer.lnk", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "C:\\Program Files*\\TeamViewer\\connections*.txt", + "Description": "N/A", + "OS": "Windows" + }, + { + "File": "C:\\Users\\*\\AppData\\Roaming\\TeamViewer\\MRU\\RemoteSupport\\*tvc", + "Description": "N/A", + "OS": "Windows" + } + ], + "EventLog": [ + { + "EventID": 7045, + "ProviderName": "Service Control Manager", + "LogFile": "System.evtx", + "ServiceName": "TeamViewer", + "ImagePath": "\"C:\\\\Program Files\\\\TeamViewer\\\\TeamViewer_Service.exe\"", + "Description": "Service installation event as result of TeamViewer installation." + } + ], + "Registry": [ + { + "Path": "HKLM\\SOFTWARE\\TeamViewer\\*", + "Description": "N/A" + }, + { + "Path": "HKU\\\\SOFTWARE\\TeamViewer\\*", + "Description": "N/A" + }, + { + "Path": "HKLM\\SYSTEM\\CurrentControlSet\\Services\\TeamViewer\\*", + "Description": "N/A" + }, + { + "Path": "HKLM\\SOFTWARE\\TeamViewer\\ConnectionHistory", + "Description": "N/A" + }, + { + "Path": "HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\TeamViewer\\*", + "Description": "N/A" + }, + { + "Path": "HKU\\SID\\SOFTWARE\\TeamViewer\\MainWindowHandle", + "Description": "N/A" + }, + { + "Path": "HKU\\SID\\SOFTWARE\\TeamViewer\\DesktopWallpaperSingleImage", + "Description": "N/A" + }, + { + "Path": "HKU\\SID\\SOFTWARE\\TeamViewer\\DesktopWallpaperSingleImagePath", + "Description": "N/A" + }, + { + "Path": "HKU\\SID\\SOFTWARE\\TeamViewer\\DesktopWallpaperSingleImagePosition", + "Description": "N/A" + }, + { + "Path": "HKU\\SID\\SOFTWARE\\TeamViewer\\MinimizeToTray", + "Description": "N/A" + }, + { + "Path": "HKU\\SID\\SOFTWARE\\TeamViewer\\MultiMedia\\AudioUserSelectedCapturingEndpoint", + "Description": "N/A" + }, + { + "Path": "HKU\\SID\\SOFTWARE\\TeamViewer\\MultiMedia\\AudioSendingVolumeV2", + "Description": "N/A" + }, + { + "Path": "HKU\\SID\\SOFTWARE\\TeamViewer\\MultiMedia\\AudioUserSelectedRenderingEndpoint", + "Description": "N/A" + }, + { + "Path": "HKLM\\SOFTWARE\\TeamViewer\\ConnectionHistory", + "Description": "N/A" + }, + { + "Path": "HKU\\SID\\SOFTWARE\\TeamViewer\\ClientWindow_Mode", + "Description": "N/A" + }, + { + "Path": "HKU\\SID\\SOFTWARE\\TeamViewer\\ClientWindowPositions", + "Description": "N/A" + } + ], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.teamviewer.com" + ], + "Ports": [] + }, + { + "Description": "N/A", + "Domains": [ + "router15.teamviewer.com" + ], + "Ports": [ + 443 + ] + }, + { + "Description": "N/A", + "Domains": [ + "client.teamviewer.com" + ], + "Ports": [ + 443 + ] + }, + { + "Description": "N/A", + "Domains": [ + "taf.teamviewer.com" + ], + "Ports": [ + 443 + ] + } + ], + "Other": [ + { + "Type": "Mutex", + "Value": "TeamViewer_LogMutex" + }, + { + "Type": "Mutex", + "Value": "TeamViewerHooks_DynamicMemMutex" + }, + { + "Type": "Mutex", + "Value": "TeamViewer3_Win32_Instance_Mutex" + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/teamviewer_registry_sigma.yml", + "Description": "Detects potential registry activity of TeamViewer RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/teamviewer_network_sigma.yml", + "Description": "Detects potential network activity of TeamViewer RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/teamviewer_files_sigma.yml", + "Description": "Detects potential files activity of TeamViewer RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/teamviewer_processes_sigma.yml", + "Description": "Detects potential processes activity of TeamViewer RMM tool" + } + ], + "References": [ + "https://community.teamviewer.com/English/kb/articles/4139-ports-used-by-teamviewer", + "https://arista.my.site.com/AristaCommunity/s/article/Security-Analysis-TeamViewer#", + "https://www.teamviewer.com/en/global/support/knowledge-base/teamviewer-classic/troubleshooting/log-file-reading-incoming-connection/", + "https://www.synacktiv.com/publications/legitimate-rats-a-comprehensive-forensic-analysis-of-the-usual-suspects.html", + "https://github.com/Purp1eW0lf/Blue-Team-Notes" + ], + "Acknowledgement": [ + { + "Person": "Théo Letailleur", + "Handle": "in/theosyn" + } + ] + }, + { + "Name": "Itarian", + "Description": "Itarian is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "ITSMAgent.exe", + "RViewer.exe", + "ItsmRsp.exe", + "RAccess.exe", + "RmmService.exe", + "ITarianRemoteAccessSetup.exe", + "RDesktop.exe", + "ComodoRemoteControl.exe", + "ITSMService.exe", + "RHost.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "mdmsupport.comodo.com", + "*.itsm-us1.comodo.com", + "*.cmdm.comodo.com", + "remoteaccess.itarian.com", + "servicedesk.itarian.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/itarian_network_sigma.yml", + "Description": "Detects potential network activity of Itarian RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/itarian_processes_sigma.yml", + "Description": "Detects potential processes activity of Itarian RMM tool" + } + ], + "References": [ + "https://help.itarian.com/topic-459-1-1005-14776-Appendix-1b---Endpoint-Manager-Services---IP-Nos,-Host-Names-and-Port-Details---US-Customers.html" + ], + "Acknowledgement": [] + }, + { + "Name": "Visual Studio Dev Tunnel", + "Description": "Visual Studio Dev Tunnel is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "global.rel.tunnels.api.visualstudio.com", + "*.rel.tunnels.api.visualstudio.com", + "*.devtunnels.ms" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/visual_studio_dev_tunnel_network_sigma.yml", + "Description": "Detects potential network activity of Visual Studio Dev Tunnel RMM tool" + } + ], + "References": [ + "https://learn.microsoft.com/en-us/azure/developer/dev-tunnels/security" + ], + "Acknowledgement": [] + }, + { + "Name": "ITSupport247 (ConnectWise)", + "Description": "ITSupport247 (ConnectWise) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "saazapsc.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.itsupport247.net" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/itsupport247__connectwise__network_sigma.yml", + "Description": "Detects potential network activity of ITSupport247 (ConnectWise) RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/itsupport247__connectwise__processes_sigma.yml", + "Description": "Detects potential processes activity of ITSupport247 (ConnectWise) RMM tool" + } + ], + "References": [ + "https://control.itsupport247.net/" + ], + "Acknowledgement": [] + }, + { + "Name": "LogMeIn", + "Description": "LogMeIn is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.\n", + "Author": "Nasreddine Bencherchali", + "Created": "2024-08-05", + "LastModified": "2024-08-05", + "Details": { + "Website": "https://www.logmein.com/", + "PEMetadata": [ + { + "Filename": "lmiguardiansvc.exe" + }, + { + "Filename": "lmiignition.exe" + }, + { + "Filename": "logmeinsystray.exe" + }, + { + "Filename": "logmein.exe", + "OriginalFileName": "", + "Company": "LogMeIn, Inc.", + "Description": "LMIGuardianSvc", + "Product": "LMIGuardianSvc" + } + ], + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": null + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "N/A", + "Domains": [ + "logmein-gateway.com" + ], + "Ports": [ + 443 + ] + }, + { + "Description": "N/A", + "Domains": [ + "*.logmein.com" + ], + "Ports": [ + 443 + ] + }, + { + "Description": "N/A", + "Domains": [ + "*.logmein.eu" + ], + "Ports": [ + 443 + ] + }, + { + "Description": "N/A", + "Domains": [ + "logmeinrescue.com" + ], + "Ports": [ + 443 + ] + }, + { + "Description": "N/A", + "Domains": [ + "*.logmeininc.com" + ], + "Ports": [ + 443 + ] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/SigmaHQ/sigma/blob/782f0f524e6f797ea114fe0d87b22cb4abaa6b7c/rules/windows/dns_query/dns_query_win_remote_access_software_domains_non_browsers.yml", + "Description": "DNS Query To Remote Access Software Domain From Non-Browser App" + }, + { + "Sigma": "https://github.com/SigmaHQ/sigma/blob/782f0f524e6f797ea114fe0d87b22cb4abaa6b7c/rules/windows/process_creation/proc_creation_win_remote_access_tools_logmein.yml", + "Description": "Remote Access Tool - LogMeIn Execution" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/logmein_network_sigma.yml", + "Description": "Detects potential network activity of LogMeIn RMM tool" + } + ], + "References": [ + "https://support.logmeininc.com/central/help/allowlisting-and-firewall-configuration" + ], + "Acknowledgement": [ + { + "Person": "Nasreddine Bencherchali", + "Handle": "@nas_bench" + } + ] + }, + { + "Name": "Cyberduck", + "Description": "Cyberduck is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files\\Cyberduck\\*", + "*\\Cyberduck\\*", + "*\\Cyberduck.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/cyberduck_processes_sigma.yml", + "Description": "Detects potential processes activity of Cyberduck RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Electric", + "Description": "Electric is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "electric.ai" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/electric_network_sigma.yml", + "Description": "Detects potential network activity of Electric RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "PuTTY", + "Description": "PuTTY is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "TeraCLOUD", + "Description": "TeraCLOUD is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "c:\\*\\TeraCloud.Client*", + "*\\TeraCloud.Client*", + "*\\Livedrive-Setup.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/teracloud_processes_sigma.yml", + "Description": "Detects potential processes activity of TeraCLOUD RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Netreo", + "Description": "Netreo is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "charon.netreo.net", + "activation.netreo.net", + "*.api.netreo.com", + "netreo.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/netreo_network_sigma.yml", + "Description": "Detects potential network activity of Netreo RMM tool" + } + ], + "References": [ + "https://solutions.netreo.com/docs/firewall-requirements" + ], + "Acknowledgement": [] + }, + { + "Name": "Netop Remote Control (Impero Connect)", + "Description": "Netop Remote Control (Impero Connect) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "nhostsvc.exe", + "nhstw32.exe", + "ngstw32.exe", + "Netop Ondemand.exe", + "nldrw32.exe", + "rmserverconsolemediator.exe", + "ImperoInit.exe", + "Connect.Backdrop.cloud*.exe", + "ImperoClientSVC.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.connect.backdrop.cloud", + "*.netop.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/netop_remote_control__impero_connect__network_sigma.yml", + "Description": "Detects potential network activity of Netop Remote Control (Impero Connect) RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/netop_remote_control__impero_connect__processes_sigma.yml", + "Description": "Detects potential processes activity of Netop Remote Control (Impero Connect) RMM tool" + } + ], + "References": [ + "https://kb.netop.com/article/firewall-and-proxy-server-considerations-when-using-netop-portal-communication-373.html" + ], + "Acknowledgement": [] + }, + { + "Name": "Splashtop (Beta)", + "Description": "Splashtop (Beta) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "SRServer.exe", + "SplashtopSOS.exe", + "Splashtop_Streamer_Windows*.exe", + "SRManager.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "splashtop.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/splashtop__beta__network_sigma.yml", + "Description": "Detects potential network activity of Splashtop (Beta) RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/splashtop__beta__processes_sigma.yml", + "Description": "Detects potential processes activity of Splashtop (Beta) RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "FastViewer", + "Description": "FastViewer is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "fastclient.exe", + "fastmaster.exe", + "FastViewer.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.fastviewer.com", + "fastviewer.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/fastviewer_network_sigma.yml", + "Description": "Detects potential network activity of FastViewer RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/fastviewer_processes_sigma.yml", + "Description": "Detects potential processes activity of FastViewer RMM tool" + } + ], + "References": [ + "https://fastviewer.com/demo/EN_FastViewer_Server%20Installation%20Configuration.pdf" + ], + "Acknowledgement": [] + }, + { + "Name": "RustDesk", + "Description": "RustDesk is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "rustdesk*.exe", + "rustdesk.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "rustdesk.com", + "user_managed", + "web.rustdesk.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rustdesk_network_sigma.yml", + "Description": "Detects potential network activity of RustDesk RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rustdesk_processes_sigma.yml", + "Description": "Detects potential processes activity of RustDesk RMM tool" + } + ], + "References": [ + "https://rustdesk.com/docs/en/" + ], + "Acknowledgement": [] + }, + { + "Name": "MobaXterm", + "Description": "MobaXterm is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\*\\MobaXterm_installer_12.1.msi", + "*\\MobaXterm_installer_*.msi", + "*\\Mobatek\\MobaXterm\\*" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "GoToAssist", + "Description": "GoToAssist is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "gotoassist.exe", + "g2a*.exe", + "GoTo Assist Opener.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "goto.com", + "*.getgo.com", + "*.fastsupport.com", + "*.gotoassist.com", + "helpme.net", + "*.gotoassist.me", + "*.gotoassist.at", + "*.desktopstreaming.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/gotoassist_network_sigma.yml", + "Description": "Detects potential network activity of GoToAssist RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/gotoassist_processes_sigma.yml", + "Description": "Detects potential processes activity of GoToAssist RMM tool" + } + ], + "References": [ + "https://help.gotoassist.com/remote-support/help/what-should-i-allow-on-my-firewall-for-gotoassist-remote-support-v5" + ], + "Acknowledgement": [] + }, + { + "Name": "Free Ping Tool", + "Description": "Free Ping Tool is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "can't find this one", + "can't find this one" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "HelpBeam", + "Description": "HelpBeam is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "helpbeam*.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "helpbeam.software.informer.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/helpbeam_network_sigma.yml", + "Description": "Detects potential network activity of HelpBeam RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/helpbeam_processes_sigma.yml", + "Description": "Detects potential processes activity of HelpBeam RMM tool" + } + ], + "References": [ + "https://www.helpbeam.com domain for sale in 2024" + ], + "Acknowledgement": [] + }, + { + "Name": "NTR Remote", + "Description": "NTR Remote is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/26/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "NTRsupportPro_EN.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.ntrsupport.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ntr_remote_network_sigma.yml", + "Description": "Detects potential network activity of NTR Remote RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ntr_remote_processes_sigma.yml", + "Description": "Detects potential processes activity of NTR Remote RMM tool" + } + ], + "References": [ + "DOA as of 2024" + ], + "Acknowledgement": [] + }, + { + "Name": "ServerEye", + "Description": "ServerEye is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "servereye*.exe", + "ServiceProxyLocalSys.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.server-eye.de" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/servereye_network_sigma.yml", + "Description": "Detects potential network activity of ServerEye RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/servereye_processes_sigma.yml", + "Description": "Detects potential processes activity of ServerEye RMM tool" + } + ], + "References": [ + "https://www.servereye.de/wp-content/uploads/Anleitung-zur-Erstinstallation_aktuell.pdf" + ], + "Acknowledgement": [] + }, + { + "Name": "WebRDP", + "Description": "WebRDP is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/14/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "webrdp.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed", + "github.com/Mikej81/WebRDP" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/webrdp_network_sigma.yml", + "Description": "Detects potential network activity of WebRDP RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/webrdp_processes_sigma.yml", + "Description": "Detects potential processes activity of WebRDP RMM tool" + } + ], + "References": [ + "github.com/Mikej81/WebRDP" + ], + "Acknowledgement": [] + }, + { + "Name": "GoTo Opener", + "Description": "GoTo Opener is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files (x86)\\GoTo Opener", + "*\\GoTo Opener" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "S3 Browser", + "Description": "S3 Browser is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files (x86)\\S3 Browser\\*", + "*\\S3 Browser\\*", + "*\\s3browser*.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/s3_browser_processes_sigma.yml", + "Description": "Detects potential processes activity of S3 Browser RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Any Support", + "Description": "Any Support is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/27/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "ManualLauncher.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.anysupport.net" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/any_support_network_sigma.yml", + "Description": "Detects potential network activity of Any Support RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/any_support_processes_sigma.yml", + "Description": "Detects potential processes activity of Any Support RMM tool" + } + ], + "References": [ + "https://www.anysupport.net/introduce_howto.php" + ], + "Acknowledgement": [] + }, + { + "Name": "BeamYourScreen", + "Description": "BeamYourScreen is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "beamyourscreen.exe", + "beamyourscreen-host.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "beamyourscreen.com", + "*.beamyourscreen.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/beamyourscreen_network_sigma.yml", + "Description": "Detects potential network activity of BeamYourScreen RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/beamyourscreen_processes_sigma.yml", + "Description": "Detects potential processes activity of BeamYourScreen RMM tool" + } + ], + "References": [ + "beamyourscreen redirects to https://www.mikogo.com/" + ], + "Acknowledgement": [] + }, + { + "Name": "Sophos-Remote Management System", + "Description": "Sophos-Remote Management System is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "clientmrinit.exe", + "mgntsvc.exe", + "routernt.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.sophos.com", + "*.sophosupd.com", + "*.sophosupd.net", + "community.sophos.com/on-premise-endpoint/f/sophos-endpoint-software/5725/sophos-remote-management-system" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/sophos-remote_management_system_network_sigma.yml", + "Description": "Detects potential network activity of Sophos-Remote Management System RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/sophos-remote_management_system_processes_sigma.yml", + "Description": "Detects potential processes activity of Sophos-Remote Management System RMM tool" + } + ], + "References": [ + "community.sophos.com/on-premise-endpoint/f/sophos-endpoint-software/5725/sophos-remote-management-system" + ], + "Acknowledgement": [] + }, + { + "Name": "Amazon (Cloud) Drive", + "Description": "Amazon (Cloud) Drive is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Users\\*\\AppData\\Local\\Amazon\\Cloud Drive\\*", + "*\\AppData\\Local\\Amazon\\Cloud Drive\\*", + "*\\AmazonCloudDrive.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/amazon__cloud__drive_processes_sigma.yml", + "Description": "Detects potential processes activity of Amazon (Cloud) Drive RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Desktop Central", + "Description": "Desktop Central is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "dcagentservice.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "desktopcentral.manageengine.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/desktop_central_network_sigma.yml", + "Description": "Detects potential network activity of Desktop Central RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/desktop_central_processes_sigma.yml", + "Description": "Detects potential processes activity of Desktop Central RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "PSEXEC (Clone)", + "Description": "PSEXEC (Clone) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "paexec.exe", + "PAExec-*.exe", + "csexec.exe ", + "remcom.exe", + "remcomsvc.exe", + "xcmd.exe", + "xcmdsvc.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/psexec__clone__network_sigma.yml", + "Description": "Detects potential network activity of PSEXEC (Clone) RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/psexec__clone__processes_sigma.yml", + "Description": "Detects potential processes activity of PSEXEC (Clone) RMM tool" + } + ], + "References": [ + "https://www.poweradmin.com/paexec/" + ], + "Acknowledgement": [] + }, + { + "Name": "GetScreen", + "Description": "GetScreen is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "GetScreen.exe", + "getscreen.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "getscreen.me", + "GetScreen.me", + "*.getscreen.me" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/getscreen_network_sigma.yml", + "Description": "Detects potential network activity of GetScreen RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/getscreen_processes_sigma.yml", + "Description": "Detects potential processes activity of GetScreen RMM tool" + } + ], + "References": [ + "https://docs.getscreen.me/self-hosted/system-requirements/" + ], + "Acknowledgement": [] + }, + { + "Name": "RemotePC", + "Description": "RemotePC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files (x86)\\RemotePC\\*", + "Idrive.File-Transfer", + "*\\RemotePC\\*", + "remotepcservice.exe", + "RemotePC.exe", + "remotepchost.exe", + "idrive.RemotePCAgent", + "rpcsuite.exe", + "*\\RemotePCService.exe", + "RemotePCService.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.remotedesktop.com", + "*.remotepc.com", + "www.remotepc.com", + "remotepc.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remotepc_network_sigma.yml", + "Description": "Detects potential network activity of RemotePC RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remotepc_processes_sigma.yml", + "Description": "Detects potential processes activity of RemotePC RMM tool" + } + ], + "References": [ + "https://www.remotedesktop.com/helpdesk/faq-firewall" + ], + "Acknowledgement": [] + }, + { + "Name": "Tanium", + "Description": "Tanium is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/14/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "TaniumClient.exe", + "TaniumCX.exe", + "TaniumExecWrapper.exe", + "TaniumFileInfo.exe", + "TPowerShell.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "cloud.tanium.com", + "*.cloud.tanium.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/tanium_network_sigma.yml", + "Description": "Detects potential network activity of Tanium RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/tanium_processes_sigma.yml", + "Description": "Detects potential processes activity of Tanium RMM tool" + } + ], + "References": [ + "https://help.tanium.com/bundle/ug_client_cloud/page/client/platform_connections.html" + ], + "Acknowledgement": [] + }, + { + "Name": "GoodSync", + "Description": "GoodSync is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "installation requires paid version of GoodSync Server", + "installation requires paid version of GoodSync Server", + "GoodSync-vsub-Setup.exe", + "A40B81B36CDC2D24910FC58816E50DCDE21BD1A9" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/goodsync_processes_sigma.yml", + "Description": "Detects potential processes activity of GoodSync RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "LabTeach (Connectwise Automate)", + "Description": "LabTeach (Connectwise Automate) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "ltsvc.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/labteach__connectwise_automate__processes_sigma.yml", + "Description": "Detects potential processes activity of LabTeach (Connectwise Automate) RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "RemoteView", + "Description": "RemoteView is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "remoteview.exe", + "rv.exe", + "rvagent.exe", + "rvagtray.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*content.rview.com", + "*.rview.com", + "content.rview.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remoteview_network_sigma.yml", + "Description": "Detects potential network activity of RemoteView RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remoteview_processes_sigma.yml", + "Description": "Detects potential processes activity of RemoteView RMM tool" + } + ], + "References": [ + "https://help.rview.com/hc/en-us/articles/360005175994--RemoteView-Server-list-for-firewall" + ], + "Acknowledgement": [] + }, + { + "Name": "UltraVNC", + "Description": "UltraVNC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/14/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "UltraVNC*.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "ultravnc.com", + "user_managed" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ultravnc_network_sigma.yml", + "Description": "Detects potential network activity of UltraVNC RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ultravnc_processes_sigma.yml", + "Description": "Detects potential processes activity of UltraVNC RMM tool" + } + ], + "References": [ + "https://uvnc.com/docs/uvnc-server/49-UltraVNC-server-configuration.html" + ], + "Acknowledgement": [] + }, + { + "Name": "SmarTTY", + "Description": "SmarTTY is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "c:\\Program Files (x86)\\Sysprogs\\SmarTTY\\*", + "*\\Sysprogs\\SmarTTY\\*", + "*\\SmarTTY.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/smartty_processes_sigma.yml", + "Description": "Detects potential processes activity of SmarTTY RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Absolute (Computrace)", + "Description": "Absolute (Computrace) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "6/18/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "rpcnet.exe", + "ctes.exe", + "ctespersitence.exe", + "cteshostsvc.exe", + "rpcld.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*search.namequery.com", + "*server.absolute.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/absolute__computrace__network_sigma.yml", + "Description": "Detects potential network activity of Absolute (Computrace) RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/absolute__computrace__processes_sigma.yml", + "Description": "Detects potential processes activity of Absolute (Computrace) RMM tool" + } + ], + "References": [ + "https://community.absolute.com/s/article/Understanding-Absolutes-Endpoint-Agents-Rpcnet-CTES-and-search-namequery-com" + ], + "Acknowledgement": [] + }, + { + "Name": "Quest KACE Agent (formerly Dell KACE)", + "Description": "Quest KACE Agent (formerly Dell KACE) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "konea.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.kace.com", + "www.quest.com/kace/" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/quest_kace_agent__formerly_dell_kace__network_sigma.yml", + "Description": "Detects potential network activity of Quest KACE Agent (formerly Dell KACE) RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/quest_kace_agent__formerly_dell_kace__processes_sigma.yml", + "Description": "Detects potential processes activity of Quest KACE Agent (formerly Dell KACE) RMM tool" + } + ], + "References": [ + "https://support.quest.com/kb/4211365/which-network-ports-and-urls-are-required-for-the-kace-sma-appliance-to-function" + ], + "Acknowledgement": [] + }, + { + "Name": "DeskShare", + "Description": "DeskShare is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/26/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "TeamTaskManager.exe", + "DSGuest.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/deskshare_network_sigma.yml", + "Description": "Detects potential network activity of DeskShare RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/deskshare_processes_sigma.yml", + "Description": "Detects potential processes activity of DeskShare RMM tool" + } + ], + "References": [ + "https://www.deskshare.com/help/fml/Active-and-Passive-connection-mode.aspx" + ], + "Acknowledgement": [] + }, + { + "Name": "Pocket Cloud (Wyse)", + "Description": "Pocket Cloud (Wyse) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "pocketcloud*.exe", + "pocketcloudservice.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pocket_cloud__wyse__processes_sigma.yml", + "Description": "Detects potential processes activity of Pocket Cloud (Wyse) RMM tool" + } + ], + "References": [ + "https://wyse-pocketcloud.informer.com/2.1/" + ], + "Acknowledgement": [] + }, + { + "Name": "ESET Remote Administrator", + "Description": "ESET Remote Administrator is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "einstaller.exe", + "era.exe", + "ERAAgent.exe", + "ezhelp*.exe", + "eratool.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed", + "eset.com/me/business/remote-management/remote-administrator/" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/eset_remote_administrator_network_sigma.yml", + "Description": "Detects potential network activity of ESET Remote Administrator RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/eset_remote_administrator_processes_sigma.yml", + "Description": "Detects potential processes activity of ESET Remote Administrator RMM tool" + } + ], + "References": [ + "eset.com/me/business/remote-management/remote-administrator/" + ], + "Acknowledgement": [] + }, + { + "Name": "Pilixo", + "Description": "Pilixo is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "rdp.exe", + "Pilixo_Installer*.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "pilixo.com", + "download.pilixo.com", + "*.pilixo.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pilixo_network_sigma.yml", + "Description": "Detects potential network activity of Pilixo RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pilixo_processes_sigma.yml", + "Description": "Detects potential processes activity of Pilixo RMM tool" + } + ], + "References": [ + "https://pilixo.freshdesk.com/support/solutions/articles/9000141879-device-connectivity-and-firewalls" + ], + "Acknowledgement": [] + }, + { + "Name": "CloudMounter", + "Description": "CloudMounter is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files\\CloudMounter\\*", + "*\\CloudMounter\\*", + "*\\CloudMounter\\*", + "*\\cloudmounter.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/cloudmounter_processes_sigma.yml", + "Description": "Detects potential processes activity of CloudMounter RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Mikogo", + "Description": "Mikogo is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "mikogo.exe", + "mikogo-starter.exe", + "mikogo-service.exe", + "mikogolauncher.exe", + "C:\\Users\\*\\AppData\\Roaming\\Mikogo\\*", + "*Users\\*\\AppData\\Roaming\\Mikogo\\*", + "*\\Mikogo-Service.exe", + "*\\Mikogo-Screen-Service.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.real-time-collaboration.com", + "*.mikogo4.com", + "*.mikogo.com", + "mikogo.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/mikogo_network_sigma.yml", + "Description": "Detects potential network activity of Mikogo RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/mikogo_processes_sigma.yml", + "Description": "Detects potential processes activity of Mikogo RMM tool" + } + ], + "References": [ + "https://mikogo.zendesk.com/hc/en-us/articles/214072478-Which-IP-addresses-do-we-use-for-our-services" + ], + "Acknowledgement": [] + }, + { + "Name": "WebEx (Remote Access)", + "Description": "WebEx (Remote Access) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/14/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [ + "https://help.webex.com/en-us/article/nyc3q0b/Set-Up-a-Computer-for-Remote-Access" + ], + "Acknowledgement": [] + }, + { + "Name": "Koofr", + "Description": "Koofr is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Duplicati", + "Description": "Duplicati is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "c:\\Program Files\\*\\Duplicati.Server.exe", + "*\\*\\Duplicati.Server.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/duplicati_processes_sigma.yml", + "Description": "Detects potential processes activity of Duplicati RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "ManageEngine RMM Central", + "Description": "ManageEngine RMM Central is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "manageengine.com/remote-monitoring-management/" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/manageengine_rmm_central_network_sigma.yml", + "Description": "Detects potential network activity of ManageEngine RMM Central RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "WinSCP", + "Description": "WinSCP is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Users\\IEUser\\Downloads\\WinSCP-5.21.6-Portable\\*", + "*\\WinSCP*Portable\\*", + "*\\WinSCP.exe", + "*\\WinSCP\\*" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/winscp_processes_sigma.yml", + "Description": "Detects potential processes activity of WinSCP RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "GatherPlace-desktop sharing", + "Description": "GatherPlace-desktop sharing is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "gp3.exe", + "gp4.exe", + "gp5.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.gatherplace.com", + "*.gatherplace.net", + "gatherplace.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/gatherplace-desktop_sharing_network_sigma.yml", + "Description": "Detects potential network activity of GatherPlace-desktop sharing RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/gatherplace-desktop_sharing_processes_sigma.yml", + "Description": "Detects potential processes activity of GatherPlace-desktop sharing RMM tool" + } + ], + "References": [ + "https://www.gatherplace.com/kb?id=136377" + ], + "Acknowledgement": [] + }, + { + "Name": "Laplink Gold", + "Description": "Laplink Gold is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "tsircusr.exe", + "laplink.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed", + "wen.laplink.com/product/laplink-gold" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/laplink_gold_network_sigma.yml", + "Description": "Detects potential network activity of Laplink Gold RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/laplink_gold_processes_sigma.yml", + "Description": "Detects potential processes activity of Laplink Gold RMM tool" + } + ], + "References": [ + "wen.laplink.com/product/laplink-gold" + ], + "Acknowledgement": [] + }, + { + "Name": "Centurion", + "Description": "Centurion is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "ctiserv.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "centuriontech.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/centurion_network_sigma.yml", + "Description": "Detects potential network activity of Centurion RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/centurion_processes_sigma.yml", + "Description": "Detects potential processes activity of Centurion RMM tool" + } + ], + "References": [ + "https://data443.atlassian.net/servicedesk/customer/portal/20" + ], + "Acknowledgement": [] + }, + { + "Name": "Ivanti Remote Control", + "Description": "Ivanti Remote Control is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "IvantiRemoteControl.exe", + "ArcUI.exe", + "AgentlessRC.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.ivanticloud.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ivanti_remote_control_network_sigma.yml", + "Description": "Detects potential network activity of Ivanti Remote Control RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ivanti_remote_control_processes_sigma.yml", + "Description": "Detects potential processes activity of Ivanti Remote Control RMM tool" + } + ], + "References": [ + "https://rc1.ivanticloud.com/" + ], + "Acknowledgement": [] + }, + { + "Name": "NordLocker", + "Description": "NordLocker is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Cloud Turtle", + "Description": "Cloud Turtle is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files (x86)\\Genie9\\*", + "*\\Genie9\\*" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "CloudExplorer", + "Description": "CloudExplorer is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "CloudHQ", + "Description": "CloudHQ is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Xeox", + "Description": "Xeox is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/14/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "xeox-agent_x64.exe", + "xeox_service_windows.exe", + "xeox-agent_*.exe", + "xeox-agent_x86.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.xeox.com", + "xeox.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/xeox_network_sigma.yml", + "Description": "Detects potential network activity of Xeox RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/xeox_processes_sigma.yml", + "Description": "Detects potential processes activity of Xeox RMM tool" + } + ], + "References": [ + "https://help.xeox.com/knowledge-base/gSuyNfDH6u79M82utnswf2/firewall-settings-xeox-agent-and-integrations/47T7S9tZJ2L1Z2W5gwuXoW" + ], + "Acknowledgement": [] + }, + { + "Name": "ezHelp", + "Description": "ezHelp is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "ezhelpclientmanager.exe", + "ezHelpManager.exe", + "ezhelpclient.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.ezhelp.co.kr", + "ezhelp.co.kr" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ezhelp_network_sigma.yml", + "Description": "Detects potential network activity of ezHelp RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/ezhelp_processes_sigma.yml", + "Description": "Detects potential processes activity of ezHelp RMM tool" + } + ], + "References": [ + "https://www.exhelp.co.kr" + ], + "Acknowledgement": [] + }, + { + "Name": "Level.io", + "Description": "Level.io is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "level-windows-amd64.exe", + "level.exe", + "level-remote-control-ffmpeg.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "level.io", + "*.level.io" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/level.io_network_sigma.yml", + "Description": "Detects potential network activity of Level.io RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/level.io_processes_sigma.yml", + "Description": "Detects potential processes activity of Level.io RMM tool" + } + ], + "References": [ + "https://docs.level.io/1.0/admin-guides/troubleshooting-agent-issues" + ], + "Acknowledgement": [] + }, + { + "Name": "MultCloud", + "Description": "MultCloud is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "requires sign up", + "requires sign up" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "CloudGopher", + "Description": "CloudGopher is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Synergy", + "Description": "Synergy is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/26/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/synergy_network_sigma.yml", + "Description": "Detects potential network activity of Synergy RMM tool" + } + ], + "References": [ + "https://symless.com/synergy" + ], + "Acknowledgement": [] + }, + { + "Name": "ConnectWise Control", + "Description": "ConnectWise Control is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "screenconnect.clientservice.exe", + "connectwisecontrol.client.exe", + "screenconnect.windowsclient.exe", + "connectwisechat-customer.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "live.screenconnect.com", + "control.connectwise.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/connectwise_control_network_sigma.yml", + "Description": "Detects potential network activity of ConnectWise Control RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/connectwise_control_processes_sigma.yml", + "Description": "Detects potential processes activity of ConnectWise Control RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "OptiTune", + "Description": "OptiTune is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/26/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "OTService.exe", + "OTPowerShell.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.optitune.us", + "*.opti-tune.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/optitune_network_sigma.yml", + "Description": "Detects potential network activity of OptiTune RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/optitune_processes_sigma.yml", + "Description": "Detects potential processes activity of OptiTune RMM tool" + } + ], + "References": [ + "https://www.bravurasoftware.com/optitune/support/faq.aspx" + ], + "Acknowledgement": [] + }, + { + "Name": "Netop", + "Description": "Netop is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files\\Danware Data\\NetOp Packn Deploy\\*", + "*\\Danware Data\\NetOp Packn Deploy\\*", + "*\\Netop Remote Control\\*" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "ConnectWise", + "Description": "ConnectWise is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files (x86)\\ScreenConnect Client ()\\*", + "*\\ScreenConnect*Client*\\*" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Encapto", + "Description": "Encapto is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "encapto.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/encapto_network_sigma.yml", + "Description": "Detects potential network activity of Encapto RMM tool" + } + ], + "References": [ + "https://www.encapto.com - used to manage Cisco services" + ], + "Acknowledgement": [] + }, + { + "Name": "Action1", + "Description": "Action1 is a powerful Remote Monitoring and Management(RMM) tool that enables users to execute commands, scripts, and binaries. \nThrough the web interface of action1, the administrator must create a new policy or an app to establish remote execution and then points that the agent is installed.\n", + "Author": "@kostastsale", + "Created": "2024-08-03", + "LastModified": "2024-08-03", + "Details": { + "Website": "https://www.action1.com/", + "PEMetadata": [ + { + "Filename": "action1_connector.exe" + }, + { + "Filename": "action1_remote.exe" + }, + { + "Filename": "action1_update.exe" + }, + { + "Filename": "action1_agent.exe", + "OriginalFileName": "action1_agent.exe", + "Description": "Endpoint Agent" + } + ], + "Privileges": "SYSTEM", + "Free": "Yes", + "Verification": "Corporate email required although temporary email services are accepted", + "SupportedOS": [ + "Windows" + ], + "Capabilities": [ + "Backup and disaster recovery", + "Billing and invoicing", + "Customer portal", + "HelpDesk and ticketing", + "Mobile app", + "Network discovery", + "Patch management", + "Remote monitoring and management", + "Reporting and analytics" + ], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Windows\\Action1\\*" + ] + }, + "Artifacts": { + "Disk": [ + { + "File": "C:\\Windows\\Action1\\action1_agent.exe", + "Description": "Action1 service binary", + "OS": "Windows" + }, + { + "File": "C:\\Windows\\Action1\\*", + "Description": "Multiple files and binaries related to Action1 installation", + "OS": "Windows" + }, + { + "File": "C:\\Windows\\Action1\\scripts\\*", + "Description": "Multiple scripts related to Action1 installation", + "OS": "Windows" + }, + { + "File": "C:\\Windows\\Action1\\rule_data\\*", + "Description": "Files related to Action1 rules", + "OS": "Windows" + }, + { + "File": "C:\\Windows\\Action1\\action1_log_*.log", + "Description": "Contains history, errors, system notifications. Incoming and outgoing connections.", + "OS": "Windows" + } + ], + "EventLog": [ + { + "EventID": 7045, + "ProviderName": "Service Control Manager", + "LogFile": "System.evtx", + "ServiceName": "Action1 Agent", + "ImagePath": "\"C:\\\\Windows\\\\Action1\\\\action1_agent.exe\"", + "Description": "Service installation event as result of Action1 installation." + }, + { + "EventID": 4688, + "ProviderName": "Microsoft-Security-Auditing", + "LogFile": "Security.evtx", + "CommandLine": "C:\\Windows\\Action1\\action1_agent.exe service", + "Description": "Service installation event as result of Action1 installation." + }, + { + "EventID": 4688, + "ProviderName": "Microsoft-Security-Auditing", + "LogFile": "Security.evtx", + "CommandLine": "C:\\Windows\\Action1\\action1_agent.exe loggedonuser", + "Description": "Executing command to get logged on user." + } + ], + "Registry": [ + { + "Path": "HKLM\\System\\CurrentControlSet\\Services\\A1Agent", + "Description": "Service installation event as result of Action1 installation." + }, + { + "Path": "HKLM\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\Windows Error Reporting\\LocalDumps\\action1_agent.exe", + "Description": "Ensures that detailed crash information is available for analysis, which aids in maintaining the stability and reliability of the software." + }, + { + "Path": "HKLM\\SOFTWARE\\WOW6432Node\\Action1", + "Description": "Storing its configuration settings and other relevant information" + } + ], + "Network": [ + { + "Description": "N/A", + "Domains": [ + "*.action1.com" + ], + "Ports": [ + 443 + ] + }, + { + "Description": "N/A", + "Domains": [ + "a1-backend-packages.s3.amazonaws.com" + ], + "Ports": [ + 443 + ] + } + ] + }, + "Detections": [ + { + "Name": "Arbitrary code execution and remote sessions via Action1 RMM", + "Description": "Threat hunting rule for detecting the execution of arbitrary code and remote sessions via Action1 RMM", + "author": "@kostastsale", + "Link": "https://github.com/tsale/Sigma_rules/blob/ea87e4fc851207ca0f002ec043624f2b3bf1b2da/Threat%20Hunting%20Queries/Action1_RMM.yml" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/action1_registry_sigma.yml", + "Description": "Detects potential registry activity of Action1 RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/action1_network_sigma.yml", + "Description": "Detects potential network activity of Action1 RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/action1_files_sigma.yml", + "Description": "Detects potential files activity of Action1 RMM tool" + } + ], + "References": [ + "https://www.action1.com/documentation/firewall-configuration/", + "https://www.action1.com/documentation/", + "https://twitter.com/Kostastsale/status/1646256901506605063?s=20", + "https://ruler-project.github.io/ruler-project/RULER/remote/Action1/" + ], + "Acknowledgement": [ + { + "Person": "Kostas", + "Handle": "@kostastsale" + } + ] + }, + { + "Name": "FleetDeck.io", + "Description": "FleetDeck.io is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "fleetdeck_agent_svc.exe", + "fleetdeck_commander_svc.exe", + "fleetdeck_installer.exe", + "fleetdeck_commander_launcher.exe", + "fleetdeck_agent.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "fleetdeck.io" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/fleetdeck.io_network_sigma.yml", + "Description": "Detects potential network activity of FleetDeck.io RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/fleetdeck.io_processes_sigma.yml", + "Description": "Detects potential processes activity of FleetDeck.io RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "SuperPuTTY", + "Description": "SuperPuTTY is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Downloads\\SuperPuTTY\\*", + "*Downloads\\SuperPuTTY\\*", + "*\\superputty.exe", + "*\\SuperPuTTY\\*" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/superputty_processes_sigma.yml", + "Description": "Detects potential processes activity of SuperPuTTY RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Royal Apps", + "Description": "Royal Apps is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "royalserver.exe", + "royalts.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/royal_apps_network_sigma.yml", + "Description": "Detects potential network activity of Royal Apps RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/royal_apps_processes_sigma.yml", + "Description": "Detects potential processes activity of Royal Apps RMM tool" + } + ], + "References": [ + "https://www.royalapps.com/ts/win/download" + ], + "Acknowledgement": [] + }, + { + "Name": "Tanium Deploy", + "Description": "Tanium Deploy is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "tanium.com/products/tanium-deploy" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/tanium_deploy_network_sigma.yml", + "Description": "Detects potential network activity of Tanium Deploy RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Zabbix Agent", + "Description": "Zabbix Agent is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/14/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "zabbix_agent*.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed", + "zabbix.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/zabbix_agent_network_sigma.yml", + "Description": "Detects potential network activity of Zabbix Agent RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/zabbix_agent_processes_sigma.yml", + "Description": "Detects potential processes activity of Zabbix Agent RMM tool" + } + ], + "References": [ + "https://www.zabbix.com/documentation/current/en/manual/appendix/install/windows_agent" + ], + "Acknowledgement": [] + }, + { + "Name": "Weezo", + "Description": "Weezo is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/14/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "weezohttpd.exe", + "weezo.exe", + "weezo setup*.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.weezo.me", + "weezo.net", + "*.weezo.net", + "weezo.en.softonic.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/weezo_network_sigma.yml", + "Description": "Detects potential network activity of Weezo RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/weezo_processes_sigma.yml", + "Description": "Detects potential processes activity of Weezo RMM tool" + } + ], + "References": [ + "weezo.en.softonic.com" + ], + "Acknowledgement": [] + }, + { + "Name": "BeInSync", + "Description": "BeInSync is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/26/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "Beinsync*.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.beinsync.net", + "*.beinsync.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/beinsync_network_sigma.yml", + "Description": "Detects potential network activity of BeInSync RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/beinsync_processes_sigma.yml", + "Description": "Detects potential processes activity of BeInSync RMM tool" + } + ], + "References": [ + "https://en.wikipedia.org/wiki/Phoenix_Technologies" + ], + "Acknowledgement": [] + }, + { + "Name": "ScreenMeet", + "Description": "ScreenMeet is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "ScreenMeetSupport.exe", + "ScreenMeet.Support.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.screenmeet.com", + "*.scrn.mt" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/screenmeet_network_sigma.yml", + "Description": "Detects potential network activity of ScreenMeet RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/screenmeet_processes_sigma.yml", + "Description": "Detects potential processes activity of ScreenMeet RMM tool" + } + ], + "References": [ + "https://docs.screenmeet.com/docs/firewall-white-list" + ], + "Acknowledgement": [] + }, + { + "Name": "MyIVO", + "Description": "MyIVO is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "myivomgr.exe", + "myivomanager.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "myivo-server.software.informer.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/myivo_network_sigma.yml", + "Description": "Detects potential network activity of MyIVO RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/myivo_processes_sigma.yml", + "Description": "Detects potential processes activity of MyIVO RMM tool" + } + ], + "References": [ + "myivo.com - DOA as of 2024" + ], + "Acknowledgement": [] + }, + { + "Name": "LabTech RMM (Now ConnectWise Automate)", + "Description": "LabTech RMM (Now ConnectWise Automate) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "ltsvc.exe", + "ltsvcmon.exe", + "lttray.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "connectwise.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/labtech_rmm__now_connectwise_automate__network_sigma.yml", + "Description": "Detects potential network activity of LabTech RMM (Now ConnectWise Automate) RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/labtech_rmm__now_connectwise_automate__processes_sigma.yml", + "Description": "Detects potential processes activity of LabTech RMM (Now ConnectWise Automate) RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Kabuto", + "Description": "Kabuto is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "Kabuto.App.Runner.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.kabuto.io", + "repairtechsolutions.com/kabuto/" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/kabuto_network_sigma.yml", + "Description": "Detects potential network activity of Kabuto RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/kabuto_processes_sigma.yml", + "Description": "Detects potential processes activity of Kabuto RMM tool" + } + ], + "References": [ + "https://www.repairtechsolutions.com/documentation/kabuto/" + ], + "Acknowledgement": [] + }, + { + "Name": "FreeRDP", + "Description": "FreeRDP is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "ZOC", + "Description": "ZOC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files\\ZOC8\\*", + "*\\ZOC?\\*", + "*\\zoc.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/zoc_processes_sigma.yml", + "Description": "Detects potential processes activity of ZOC RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "AliWangWang-remote-control", + "Description": "AliWangWang-remote-control is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "alitask.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "wangwang.taobao.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/aliwangwang-remote-control_network_sigma.yml", + "Description": "Detects potential network activity of AliWangWang-remote-control RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/aliwangwang-remote-control_processes_sigma.yml", + "Description": "Detects potential processes activity of AliWangWang-remote-control RMM tool" + } + ], + "References": [ + "https://github.com/KKomarov/AliWangWangEng/blob/master/chs.locale" + ], + "Acknowledgement": [] + }, + { + "Name": "Goverlan", + "Description": "Goverlan is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "goverrmc.exe", + "govsrv*.exe", + "GovAgentInstallHelper.exe", + "GovAgentx64.exe", + "GovReachClient.exe", + "C:\\Program Files (x86)\\PJ Technologies\\GOVsrv\\*", + "*\\PJ Technologies\\GOVsrv\\*", + "*\\GovSrv.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed", + "goverlan.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/goverlan_network_sigma.yml", + "Description": "Detects potential network activity of Goverlan RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/goverlan_processes_sigma.yml", + "Description": "Detects potential processes activity of Goverlan RMM tool" + } + ], + "References": [ + "https://www.goverlan.com/pdf/Goverlan-Remote-Control-Software.pdf" + ], + "Acknowledgement": [] + }, + { + "Name": "Microsoft Quick Assist", + "Description": "Microsoft Quick Assist is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "quickassist.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/microsoft_quick_assist_network_sigma.yml", + "Description": "Detects potential network activity of Microsoft Quick Assist RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/microsoft_quick_assist_processes_sigma.yml", + "Description": "Detects potential processes activity of Microsoft Quick Assist RMM tool" + } + ], + "References": [ + "https://support.microsoft.com/en-us/windows/install-quick-assist-c17479b7-a49d-4d12-938c-dbfb97c88bca" + ], + "Acknowledgement": [] + }, + { + "Name": "N-Able Advanced Monitoring Agent", + "Description": "N-Able Advanced Monitoring Agent is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "BASupSrvc.exe", + "winagent.exe", + "BASupApp.exe", + "BASupTSHelper.exe", + "Agent_*_RW.exe", + "BASEClient.exe", + "BASupSrvcCnfg.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.beanywhere.com ", + "systemmonitor.co.uk", + "*system-monitor.com", + "cloudbackup.management", + "*systemmonitor.co.uk", + "n-able.com", + "systemmonitor.us", + "*systemmonitor.eu.com", + "*.logicnow.com", + "*.swi-tc.com", + "*remote.management", + "systemmonitor.us.cdn.cloudflare.net", + "*cloudbackup.management", + "remote.management", + "logicnow.com", + "system-monitor.com", + "*systemmonitor.us", + "systemmonitor.eu.com", + "*.n-able.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/n-able_advanced_monitoring_agent_network_sigma.yml", + "Description": "Detects potential network activity of N-Able Advanced Monitoring Agent RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/n-able_advanced_monitoring_agent_processes_sigma.yml", + "Description": "Detects potential processes activity of N-Able Advanced Monitoring Agent RMM tool" + } + ], + "References": [ + "https://documentation.n-able.com/takecontrol/troubleshooting/Content/kb/Take-Control-Standalone-Ports-and-Domains-Firewall-and-AV-Exclusions.htm" + ], + "Acknowledgement": [] + }, + { + "Name": "Ocamlfuse", + "Description": "Ocamlfuse is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "MyGreenPC", + "Description": "MyGreenPC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/26/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "mygreenpc.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*mygreenpc.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/mygreenpc_network_sigma.yml", + "Description": "Detects potential network activity of MyGreenPC RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/mygreenpc_processes_sigma.yml", + "Description": "Detects potential processes activity of MyGreenPC RMM tool" + } + ], + "References": [ + "http://www.mygreenpc.com/" + ], + "Acknowledgement": [] + }, + { + "Name": "Syncthing", + "Description": "Syncthing is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Users\\*\\AppData\\Roaming\\SyncTrayzor\\*", + "*Users\\*\\AppData\\Roaming\\SyncTrayzor\\*", + "*\\Syncthing.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/syncthing_processes_sigma.yml", + "Description": "Detects potential processes activity of Syncthing RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Chrome Remote Desktop", + "Description": "Chrome Remote Desktop is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "remote_host.exe", + "remoting_host.exe", + "C:\\Program Files (x86)\\Google\\Chrome Remote Desktop\\*", + "*\\Google\\Chrome Remote Desktop\\*", + "*\\remoting_host.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*remotedesktop.google.com", + "*remotedesktop-pa.googleapis.com", + "remotedesktop.google.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/chrome_remote_desktop_network_sigma.yml", + "Description": "Detects potential network activity of Chrome Remote Desktop RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/chrome_remote_desktop_processes_sigma.yml", + "Description": "Detects potential processes activity of Chrome Remote Desktop RMM tool" + } + ], + "References": [ + "https://support.google.com/chrome/a/answer/2799701?hl=en" + ], + "Acknowledgement": [] + }, + { + "Name": "Microsoft RDP", + "Description": "Microsoft RDP is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "termsrv.exe", + "mstsc.exe", + "Microsoft Remote Desktop" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/microsoft_rdp_processes_sigma.yml", + "Description": "Detects potential processes activity of Microsoft RDP RMM tool" + } + ], + "References": [ + "https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/clients/windows" + ], + "Acknowledgement": [] + }, + { + "Name": "Chrome Remote Desktop", + "Description": "Chrome Remote Desktop is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "remote_host.exe", + "remoting_host.exe", + "C:\\Program Files (x86)\\Google\\Chrome Remote Desktop\\*", + "*\\Google\\Chrome Remote Desktop\\*", + "*\\remoting_host.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*remotedesktop-pa.googleapis.com", + "*remotedesktop.google.com", + "remotedesktop.google.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/chrome_remote_desktop_network_sigma.yml", + "Description": "Detects potential network activity of Chrome Remote Desktop RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/chrome_remote_desktop_processes_sigma.yml", + "Description": "Detects potential processes activity of Chrome Remote Desktop RMM tool" + } + ], + "References": [ + "https://support.google.com/chrome/a/answer/2799701?hl=en" + ], + "Acknowledgement": [] + }, + { + "Name": "Remote Desktop Plus", + "Description": "Remote Desktop Plus is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "rdp.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "donkz.nl" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remote_desktop_plus_network_sigma.yml", + "Description": "Detects potential network activity of Remote Desktop Plus RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remote_desktop_plus_processes_sigma.yml", + "Description": "Detects potential processes activity of Remote Desktop Plus RMM tool" + } + ], + "References": [ + "https://www.donkz.nl/" + ], + "Acknowledgement": [] + }, + { + "Name": "NateOn-desktop sharing", + "Description": "NateOn-desktop sharing is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "nateon*.exe", + "nateon.exe", + "nateonmain.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.nate.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/nateon-desktop_sharing_network_sigma.yml", + "Description": "Detects potential network activity of NateOn-desktop sharing RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/nateon-desktop_sharing_processes_sigma.yml", + "Description": "Detects potential processes activity of NateOn-desktop sharing RMM tool" + } + ], + "References": [ + "http://rsupport.nate.com/rview/r8/main/index.aspx" + ], + "Acknowledgement": [] + }, + { + "Name": "Barracuda", + "Description": "Barracuda is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.islonline.net", + "rmm.barracudamsp.com", + "barracudamsp.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/barracuda_network_sigma.yml", + "Description": "Detects potential network activity of Barracuda RMM tool" + } + ], + "References": [ + "https://help.islonline.com/19799/166125" + ], + "Acknowledgement": [] + }, + { + "Name": "Dropbox", + "Description": "Dropbox is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files (x86)\\Dropbox\\Client\\*", + "*\\Dropbox\\Client\\*", + "*\\Dropbox.exe", + "*Users\\*\\Dropbox\\bin\\" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/dropbox_processes_sigma.yml", + "Description": "Detects potential processes activity of Dropbox RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "CrossTec Remote Control", + "Description": "CrossTec Remote Control is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "PCIVIDEO.EXE", + "supporttool.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed", + "crosstecsoftware.com/remotecontrol" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/crosstec_remote_control_network_sigma.yml", + "Description": "Detects potential network activity of CrossTec Remote Control RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/crosstec_remote_control_processes_sigma.yml", + "Description": "Detects potential processes activity of CrossTec Remote Control RMM tool" + } + ], + "References": [ + "www.crosstecsoftware.com/supporthome.html - domain DOA 2/1/2024" + ], + "Acknowledgement": [] + }, + { + "Name": "DeskDay", + "Description": "DeskDay is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "ultimate_*.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "deskday.ai", + "app.deskday.ai" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/deskday_network_sigma.yml", + "Description": "Detects potential network activity of DeskDay RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/deskday_processes_sigma.yml", + "Description": "Detects potential processes activity of DeskDay RMM tool" + } + ], + "References": [ + "https://support.deskday.ai/en/articles/8235973-installing-the-end-user-application-ultimate" + ], + "Acknowledgement": [] + }, + { + "Name": "mRemoteNG", + "Description": "mRemoteNG is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "mRemoteNG.exe", + "C:\\Program Files (x86)\\mRemoteNG\\*", + "*\\mRemoteNG\\*", + "*\\mRemoteNG.exe", + "c:\\Program Files (x86)%\\mRemoteNG", + "*%\\mRemoteNG", + "mRemoteNG-Installer-*.msi", + "*\\mRemoteNG.exe" + ] + }, + "Artifacts": { + "Disk": [ + { + "File": "C:\\Users\\*\\AppData\\Roaming\\mRemoteNG\\mRemoteNG.log", + "Description": "mRemoteNG log file", + "OS": "Windows" + }, + { + "File": "C:\\Users\\*\\AppData\\Roaming\\mRemoteNG\\confCons.xml", + "Description": "mRemoteNG configuration file", + "OS": "Windows" + }, + { + "File": "C:\\Users\\*\\AppData\\*\\mRemoteNG\\**10\\user.config", + "Description": "mRemoteNG user configuration file", + "OS": "Windows" + } + ], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed", + "mremoteng.org" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/mremoteng_network_sigma.yml", + "Description": "Detects potential network activity of mRemoteNG RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/mremoteng_files_sigma.yml", + "Description": "Detects potential files activity of mRemoteNG RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/mremoteng_processes_sigma.yml", + "Description": "Detects potential processes activity of mRemoteNG RMM tool" + } + ], + "References": [ + "https://github.com/mRemoteNG/mRemoteNG" + ], + "Acknowledgement": [] + }, + { + "Name": "FreeNX", + "Description": "FreeNX is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\*\\nxplayer.exe", + "*\\nxplayer.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/freenx_processes_sigma.yml", + "Description": "Detects potential processes activity of FreeNX RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "NetSupport Manager", + "Description": "NetSupport Manager is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "pcictlui.exe", + "client32.exe", + "pcicfgui.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "geo.netsupportsoftware.com", + "netsupportmanager.com", + "*.netsupportmanager.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/netsupport_manager_network_sigma.yml", + "Description": "Detects potential network activity of NetSupport Manager RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/netsupport_manager_processes_sigma.yml", + "Description": "Detects potential processes activity of NetSupport Manager RMM tool" + } + ], + "References": [ + "https://www.netsupportmanager.com/resources/" + ], + "Acknowledgement": [] + }, + { + "Name": "rdp2tcp", + "Description": "rdp2tcp is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "tdp2tcp.exe", + "rdp2tcp.py" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed", + "github.com/V-E-O/rdp2tcp" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rdp2tcp_network_sigma.yml", + "Description": "Detects potential network activity of rdp2tcp RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rdp2tcp_processes_sigma.yml", + "Description": "Detects potential processes activity of rdp2tcp RMM tool" + } + ], + "References": [ + "github.com/V-E-O/rdp2tcp" + ], + "Acknowledgement": [] + }, + { + "Name": "ITSupport247 (ConnectWise)", + "Description": "ITSupport247 (ConnectWise) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "saazapsc.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.itsupport247.net", + "itsupport247.net" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/itsupport247__connectwise__network_sigma.yml", + "Description": "Detects potential network activity of ITSupport247 (ConnectWise) RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/itsupport247__connectwise__processes_sigma.yml", + "Description": "Detects potential processes activity of ITSupport247 (ConnectWise) RMM tool" + } + ], + "References": [ + "https://control.itsupport247.net/" + ], + "Acknowledgement": [] + }, + { + "Name": "Pulseway", + "Description": "Pulseway is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "PCMonitorManager.exe", + "pcmonitorsrv.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "pulseway.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pulseway_network_sigma.yml", + "Description": "Detects potential network activity of Pulseway RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pulseway_processes_sigma.yml", + "Description": "Detects potential processes activity of Pulseway RMM tool" + } + ], + "References": [ + "https://intercom.help/pulseway/en/" + ], + "Acknowledgement": [] + }, + { + "Name": "Naverisk", + "Description": "Naverisk is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "AgentSetup-*.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed", + "naverisk.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/naverisk_network_sigma.yml", + "Description": "Detects potential network activity of Naverisk RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/naverisk_processes_sigma.yml", + "Description": "Detects potential processes activity of Naverisk RMM tool" + } + ], + "References": [ + "http://kb.naverisk.com/en/articles/2811223-deploying-naverisk-agents" + ], + "Acknowledgement": [] + }, + { + "Name": "Total Software Deployment", + "Description": "Total Software Deployment is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\ProgramData\\Total Software Deployment\\*", + "*\\Total Software Deployment\\*", + "*\\tniwinagent.exe", + "*\\Tsdservice.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/total_software_deployment_processes_sigma.yml", + "Description": "Detects potential processes activity of Total Software Deployment RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "ISL Online", + "Description": "ISL Online is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "islalwaysonmonitor.exe", + "isllight.exe", + "isllightservice.exe", + "ISLLightClient.exe", + "C:\\Program Files (x86)\\ISL Online\\ISL Light*", + "*\\ISL Online\\ISL Light*", + "*\\ISLLight.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.islonline.com", + "*.islonline.net" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/isl_online_network_sigma.yml", + "Description": "Detects potential network activity of ISL Online RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/isl_online_processes_sigma.yml", + "Description": "Detects potential processes activity of ISL Online RMM tool" + } + ], + "References": [ + "https://help.islonline.com/19818/165940" + ], + "Acknowledgement": [] + }, + { + "Name": "NinjaOne (formerly NinjaRMM)", + "Description": "NinjaOne (formerly NinjaRMM) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "*ProgramData\\NinjaRMMAgent\\*" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Microsoft OneDrive", + "Description": "Microsoft OneDrive is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "QQ IM-remote assistance", + "Description": "QQ IM-remote assistance is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "qq.exe", + "QQProtect.exe", + "qqpcmgr.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.mdt.qq.com", + "*.desktop.qq.com", + "upload_data.qq.com", + "qq-messenger.en.softonic.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/qq_im-remote_assistance_network_sigma.yml", + "Description": "Detects potential network activity of QQ IM-remote assistance RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/qq_im-remote_assistance_processes_sigma.yml", + "Description": "Detects potential processes activity of QQ IM-remote assistance RMM tool" + } + ], + "References": [ + "https://en.wikipedia.org/wiki/Tencent_QQ" + ], + "Acknowledgement": [] + }, + { + "Name": "Distant Desktop", + "Description": "Distant Desktop is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "ddsystem.exe", + "dd.exe", + "distant-desktop.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.distantdesktop.com", + "*signalserver.xyz" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/distant_desktop_network_sigma.yml", + "Description": "Detects potential network activity of Distant Desktop RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/distant_desktop_processes_sigma.yml", + "Description": "Detects potential processes activity of Distant Desktop RMM tool" + } + ], + "References": [ + "https://www.distantdesktop.com/manual/first-start.htm" + ], + "Acknowledgement": [] + }, + { + "Name": "FixMe.it", + "Description": "FixMe.it is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "FixMeit Unattended Access Setup.exe", + "TiExpertStandalone.exe", + "FixMeitClient*.exe", + "FixMeit Client.exe", + "FixMeit Expert Setup.exe", + "TiExpertCore.exe", + "fixmeitclient.exe", + "TiClientCore.exe", + "TiClientHelper*.exe", + "no installation required | recommend blocking fixme[.]it SaaS portal", + "no installation required | recommend blocking fixme[.]it SaaS portal", + "9380CC75B872221A7425D7503565B67580407F60" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.fixme.it", + "*.techinline.net", + "fixme.it", + "*set.me", + "*setme.net" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/fixme.it_network_sigma.yml", + "Description": "Detects potential network activity of FixMe.it RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/fixme.it_processes_sigma.yml", + "Description": "Detects potential processes activity of FixMe.it RMM tool" + } + ], + "References": [ + "https://docs.fixme.it/general-questions/which-ports-and-servers-does-fixme-it-use" + ], + "Acknowledgement": [] + }, + { + "Name": "FileZilla", + "Description": "FileZilla is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files\\FileZilla FTP Client\\*", + "*\\FileZilla FTP Client\\*", + "*\\FileZilla.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/filezilla_processes_sigma.yml", + "Description": "Detects potential processes activity of FileZilla RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Microsoft RDP", + "Description": "Microsoft RDP is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "mstsc.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/microsoft_rdp_processes_sigma.yml", + "Description": "Detects potential processes activity of Microsoft RDP RMM tool" + } + ], + "References": [ + "https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/clients/windows" + ], + "Acknowledgement": [] + }, + { + "Name": "RuDesktop", + "Description": "RuDesktop is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/9/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "rd.exe", + "rudesktop*.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.rudesktop.ru", + "rudesktop.ru" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rudesktop_network_sigma.yml", + "Description": "Detects potential network activity of RuDesktop RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rudesktop_processes_sigma.yml", + "Description": "Detects potential processes activity of RuDesktop RMM tool" + } + ], + "References": [ + "https://rudesktop.ru" + ], + "Acknowledgement": [] + }, + { + "Name": "BeyondTrust (Bomgar)", + "Description": "BeyondTrust (Bomgar) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "bomgar-scc-*.exe", + "bomgar-scc.exe", + "bomgar-pac-*.exe", + "bomgar-pac.exe", + "bomgar-rdp.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.beyondtrustcloud.com", + "*.bomgarcloud.com", + "bomgarcloud.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/beyondtrust__bomgar__network_sigma.yml", + "Description": "Detects potential network activity of BeyondTrust (Bomgar) RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/beyondtrust__bomgar__processes_sigma.yml", + "Description": "Detects potential processes activity of BeyondTrust (Bomgar) RMM tool" + } + ], + "References": [ + "https://www.beyondtrust.com/docs/remote-support/getting-started/deployment/cloud/network.htm" + ], + "Acknowledgement": [] + }, + { + "Name": "FreeFileSync", + "Description": "FreeFileSync is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files\\FreeFileSync\\*", + "*\\FreeFileSync\\*", + "*\\FreeFileSync.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/freefilesync_processes_sigma.yml", + "Description": "Detects potential processes activity of FreeFileSync RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "TightVNC", + "Description": "TightVNC is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/14/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "tvnviewer.exe", + "TightVNCViewerPortable*.exe", + "tvnserver.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed", + "tightvnc.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/tightvnc_network_sigma.yml", + "Description": "Detects potential network activity of TightVNC RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/tightvnc_processes_sigma.yml", + "Description": "Detects potential processes activity of TightVNC RMM tool" + } + ], + "References": [ + "https://www.tightvnc.com/doc/win/TightVNC_for_Windows-Installation_and_Getting_Started.pdf" + ], + "Acknowledgement": [] + }, + { + "Name": "MeshCentral", + "Description": "MeshCentral is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "meshcentral*.exe", + "mesh*.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "user_managed", + "meshcentral.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/meshcentral_network_sigma.yml", + "Description": "Detects potential network activity of MeshCentral RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/meshcentral_processes_sigma.yml", + "Description": "Detects potential processes activity of MeshCentral RMM tool" + } + ], + "References": [ + "https://ylianst.github.io/MeshCentral/meshcentral/" + ], + "Acknowledgement": [] + }, + { + "Name": "CuteFTP", + "Description": "CuteFTP is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files (x86)\\Globalscape\\CuteFTP\\*", + "*\\Globalscape\\CuteFTP\\*", + "*\\cuteftppro.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/cuteftp_processes_sigma.yml", + "Description": "Detects potential processes activity of CuteFTP RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Dev Tunnels (aka Visual Studio Dev Tunnel)", + "Description": "Dev Tunnels (aka Visual Studio Dev Tunnel) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "learn.microsoft.com/en-us/azure/developer/dev-tunnels/overview" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/dev_tunnels__aka_visual_studio_dev_tunnel__network_sigma.yml", + "Description": "Detects potential network activity of Dev Tunnels (aka Visual Studio Dev Tunnel) RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "CarotDAV", + "Description": "CarotDAV is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files (x86)\\Rei Software\\CarotDAV\\*", + "*\\Rei Software\\CarotDAV\\*", + "*\\CarotDAV.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/carotdav_processes_sigma.yml", + "Description": "Detects potential processes activity of CarotDAV RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Bitvise SSH Server", + "Description": "Bitvise SSH Server is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "C:\\Program Files\\Bitvise SSH Server\\*", + "*\\Bitvise SSH Server\\*", + "*\\BvSshServer-Inst.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/bitvise_ssh_server_processes_sigma.yml", + "Description": "Detects potential processes activity of Bitvise SSH Server RMM tool" + } + ], + "References": [], + "Acknowledgement": [] + }, + { + "Name": "Pandora RC (eHorus)", + "Description": "Pandora RC (eHorus) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "ehorus standalone.exe", + "ehorus_agent.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "portal.ehorus.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pandora_rc__ehorus__network_sigma.yml", + "Description": "Detects potential network activity of Pandora RC (eHorus) RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pandora_rc__ehorus__processes_sigma.yml", + "Description": "Detects potential processes activity of Pandora RC (eHorus) RMM tool" + } + ], + "References": [ + "https://pandorafms.com/manual/!current/en/documentation/09_pandora_rc/01_pandora_rc_introduction" + ], + "Acknowledgement": [] + }, + { + "Name": "DW Service", + "Description": "DW Service is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/7/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "dwagsvc.exe", + "dwagent.exe", + "dwagsvc.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.dwservice.net" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/dw_service_network_sigma.yml", + "Description": "Detects potential network activity of DW Service RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/dw_service_processes_sigma.yml", + "Description": "Detects potential processes activity of DW Service RMM tool" + } + ], + "References": [ + "https://news.dwservice.net/dwservice-security-infrastructure/" + ], + "Acknowledgement": [] + }, + { + "Name": "Iperius Remote", + "Description": "Iperius Remote is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.", + "Author": "", + "Created": "", + "LastModified": "2/8/2024", + "Details": { + "Website": "", + "PEMetadata": { + "Filename": "", + "OriginalFileName": "", + "Description": "" + }, + "Privileges": "", + "Free": "", + "Verification": "", + "SupportedOS": [], + "Capabilities": [], + "Vulnerabilities": [], + "InstallationPaths": [ + "iperius.exe", + "iperiusremote.exe" + ] + }, + "Artifacts": { + "Disk": [], + "EventLog": [], + "Registry": [], + "Network": [ + { + "Description": "Known remote domains", + "Domains": [ + "*.iperiusremote.com", + "*.iperius.com", + "*.iperius-rs.com", + "iperiusremote.com" + ], + "Ports": [] + } + ] + }, + "Detections": [ + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/iperius_remote_network_sigma.yml", + "Description": "Detects potential network activity of Iperius Remote RMM tool" + }, + { + "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/iperius_remote_processes_sigma.yml", + "Description": "Detects potential processes activity of Iperius Remote RMM tool" + } + ], + "References": [ + "https://www.iperiusremote.com/download-iperius-remote-desktop-windows.aspx" + ], + "Acknowledgement": [] + } +] \ No newline at end of file