Thank you,
contributors.
Thank you to the researchers and maintainers expanding community catalogs, documenting defensive indicators, and making source-backed research easier to explore.
The contributor ledger
Shared research. Stronger defenses.
Updated Thursday, October 1, 2026.
| Contributor | Project | Contribution | Source |
|---|---|---|---|
MHMichael Haag@MHaggis | LOLDrivers | Added IoDrv sample metadata and INC ransomware campaign references, distinguishing exact sample evidence from driver-family references. | PR #450 |
JEJose Enrique Hernandez@josehelps | LOLDrivers | Added a monthly driver-catalog growth chart with pointer, touch, and keyboard inspection, while keeping sample counts distinct from driver-entry counts. | PR #451 |
DDev101x@DevCop95 | LOLBAS | Expanded Fsutil documentation with file-creation behavior, disk-exhaustion context, and defensive telemetry references. | PR #525 |
MHMichael Haag@MHaggis | LOLRMM | Added fourteen remote-management catalog entries with pinned source and artifact references, qualified platform coverage, and scoped detection indicators. | PR #254 |
Ccyberbuff@cyberbuff | LOT Tunnels | Added suo5 coverage with HTTP proxy-tunneling behavior, component artifacts, and research references. | PR #37 |
Ccyberbuff@cyberbuff | LOT Tunnels | Added dnscat2 catalog coverage with DNS-tunneling indicators and supporting research references. | PR #32 |
Ccyberbuff@cyberbuff | LOT Tunnels | Added reGeorg coverage with proxy-tunneling behavior, component artifacts, and research references. | PR #36 |
Ccyberbuff@cyberbuff | LOT Tunnels | Added Neo-reGeorg coverage with proxy-tunneling behavior, component artifacts, and research references. | PR #35 |
Ccyberbuff@cyberbuff | LOT Tunnels | Added ligolo-ng coverage describing reverse-connection tunneling, component artifacts, and supporting research. | PR #34 |
Ccyberbuff@cyberbuff | LOT Tunnels | Added iodine catalog coverage with DNS-tunneling behavior, client/server artifacts, and research references. | PR #33 |
KSKamran Saifullah@deFr0ggy | LOT Tunnels | Updated the README’s project-maintenance attribution. | Commit 103917d |
KSKamran Saifullah@deFr0ggy | LOT Tunnels | Corrected the Tailscale entry’s command category to the catalog’s Access category. | Commit 1412fdb |
Project
LOLDriversContribution
Added IoDrv sample metadata and INC ransomware campaign references, distinguishing exact sample evidence from driver-family references.
Project
LOLDriversContribution
Added a monthly driver-catalog growth chart with pointer, touch, and keyboard inspection, while keeping sample counts distinct from driver-entry counts.
Project
LOLBASContribution
Expanded Fsutil documentation with file-creation behavior, disk-exhaustion context, and defensive telemetry references.
Project
LOLRMMContribution
Added fourteen remote-management catalog entries with pinned source and artifact references, qualified platform coverage, and scoped detection indicators.
Project
LOT TunnelsContribution
Added suo5 coverage with HTTP proxy-tunneling behavior, component artifacts, and research references.
Project
LOT TunnelsContribution
Added dnscat2 catalog coverage with DNS-tunneling indicators and supporting research references.
Project
LOT TunnelsContribution
Added reGeorg coverage with proxy-tunneling behavior, component artifacts, and research references.
Project
LOT TunnelsContribution
Added Neo-reGeorg coverage with proxy-tunneling behavior, component artifacts, and research references.
Project
LOT TunnelsContribution
Added ligolo-ng coverage describing reverse-connection tunneling, component artifacts, and supporting research.
Project
LOT TunnelsContribution
Added iodine catalog coverage with DNS-tunneling behavior, client/server artifacts, and research references.
Project
LOT TunnelsContribution
Updated the README’s project-maintenance attribution.
Project
LOT TunnelsContribution
Corrected the Tailscale entry’s command category to the catalog’s Access category.
Open research becomes real protection when defenders choose to share what they know.