{ "type": "Domain", "indicator": "v.name", "general": { "sections": [ "general", "geo", "url_list", "passive_dns", "malware", "whois", "http_scans" ], "whois": "http://whois.domaintools.com/v.name", "alexa": "http://www.alexa.com/siteinfo/v.name", "indicator": "v.name", "type": "domain", "type_title": "Domain", "validation": [], "base_indicator": { "id": 2759760898, "indicator": "v.name", "type": "domain", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 22, "pulses": [ { "id": "6a135614ee83fa05ff58af66", "name": "Validated: Cybercrime - #Alberta Compromise", "description": "Validated: Cybercrime - UofA BEC/ATO -> UAlberta Alfresco & Edmonton Police Compromise (HR Files) & TX - 05.24.26 - edit", "modified": "2026-05-24T19:48:36.416000", "created": "2026-05-24T19:48:36.416000", "tags": [], "references": [ "https://www.virustotal.com/graph/embed/g3238715200b747f1a237e03037a4d5ff15d85564ee0740439750d8ff75347031?theme=dark" ], "public": 1, "adversary": "", "targeted_countries": [ "Canada", "United States of America" ], "malware_families": [], "attack_ids": [], "industries": [ "Education", "Technology", "Healthcare", "Government", "Telecommunications" ], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "UCP_GoA23", "id": "382539", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_382539/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 200, "FileHash-MD5": 60, "FileHash-SHA1": 59, "FileHash-SHA256": 1097, "IPv4": 397, "domain": 341, "hostname": 407 }, "indicator_count": 2561, "is_author": false, "is_subscribing": null, "subscriber_count": 18, "modified_text": "6 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6a10a079d3a0831710f3a0ab", "name": "Catastrophic DataBreach confirmed - UAlberta & Edmonton Police Services - 05.22.26", "description": "BEC/ATO (reported) and unauthorized use & abuse of Stolen Identity/Access/Credentials from the University of Alberta has been demonstrated as the cause of catastrophic Data-Breaches across the ualberta[.]ca domain and Edmonton Police Services (EPS).\nData is comprehensive, includes HR Records, PII/PHI, employment data, addresses, contact information.", "modified": "2026-05-22T18:29:13.092000", "created": "2026-05-22T18:29:13.092000", "tags": [], "references": [ "https://www.virustotal.com/graph/embed/g3238715200b747f1a237e03037a4d5ff15d85564ee0740439750d8ff75347031?theme=dark" ], "public": 1, "adversary": "", "targeted_countries": [ "Canada" ], "malware_families": [], "attack_ids": [], "industries": [ "Education", "Government", "Healthcare", "Technology" ], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 2, "follower_count": 0, "vote": 0, "author": { "username": "UCP_GoA23", "id": "382539", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_382539/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 200, "FileHash-MD5": 61, "FileHash-SHA1": 60, "FileHash-SHA256": 1032, "IPv4": 393, "domain": 340, "hostname": 387 }, "indicator_count": 2473, "is_author": false, "is_subscribing": null, "subscriber_count": 19, "modified_text": "8 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6a0bff94564a0098e02ab37d", "name": "Alfresco Archive // b257cc536324cd2566432555666307b43d27ee9cbda5e45707e3e97b61b3dff6 - 05.19.26", "description": "The full list of Edmonton police officers, officers and staff, as part of the city's Police Complaints Commission (PCC), has been released.", "modified": "2026-05-19T06:16:59.932000", "created": "2026-05-19T06:13:40.134000", "tags": [ "UAlberta", "Edmonton", "Edmontonpolice", "EPS", "YEG" ], "references": [ "https://www.virustotal.com/gui/collection/3f5e2fc684dd1957828c6f9c0d1b7d13524218c8402a4a0a91e9135fb662f127", "https://www.virustotal.com/gui/collection/3f5e2fc684dd1957828c6f9c0d1b7d13524218c8402a4a0a91e9135fb662f127/iocs", "https://www.virustotal.com/graph/embed/g3238715200b747f1a237e03037a4d5ff15d85564ee0740439750d8ff75347031?theme=dark", "b257cc536324cd2566432555666307b43d27ee9cbda5e45707e3e97b61b3dff6" ], "public": 1, "adversary": "", "targeted_countries": [ "Canada" ], "malware_families": [], "attack_ids": [], "industries": [ "Government", "Education", "Telecommunications" ], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "UCP_GoA23", "id": "382539", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_382539/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 58, "FileHash-SHA1": 57, "FileHash-SHA256": 952, "IPv4": 393, "URL": 200, "domain": 340, "hostname": 367 }, "indicator_count": 2367, "is_author": false, "is_subscribing": null, "subscriber_count": 19, "modified_text": "12 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6a09b3b462c09a8bf0daa85b", "name": "Credit: Disable_Duck [\"UAlberta alfresco management\"]", "description": "", "modified": "2026-05-17T12:25:24.282000", "created": "2026-05-17T12:25:24.282000", "tags": [ "note", "home", "lucene paths", "json descriptor", "lucene path", "company home", "actividades", "pageuser", "sie knnen", "sie auf", "link klicken", "recente", "u kunt", "attivit", "possibile", "activits", "vous", "report", "web link", "cvs report", "link", "chs placement", "chs student", "placement", "team", "google form", "university", "alberta", "automation", "please", "following", "followers", "ihnen", "mitarbeitern", "mitarbeiter", "hello", "foreign visitor", "fvca", "human resource", "fvca assessment", "incomplete", "regards", "klik", "wachtwoord", "mijn profiel", "klik op", "hoogachtend", "alfresco", "bonjour", "cliquez sur", "nous", "pour ce", "mon profil", "changer", "invito", "caro", "fare", "password", "il mio", "cambia password", "per rifiutare", "cordiali saluti", "my profile", "change password", "konto", "sie erstellt", "passwort", "wir legen", "ihnen nahe", "passwort bei", "anmeldung zu", "ndern", "gehen sie", "mmm yyyy", "nome utente", "nombre", "contrasea", "para hacerlo", "mi perfil", "atentamente", "account", "alfresco share", "hola", "haga", "los datos", "y seleccione", "si desea", "click", "einladung von", "hallo", "sie eingeladen", "site", "klicken sie", "konto fr", "alfresco client", "kofax index", "inhaltselement", "zur site", "gren alfresco", "pledged gift", "office", "advancement", "datetime", "university vpn", "date", "shared", "support", "auxiliary", "process", "priority", "medium high", "pay action", "sincerely", "uofa ecm", "link um", "aufgaben stehen", "verfgung", "prioritt", "niedrig mittel", "hoch", "klicken", "aufgabe zu", "il seguente", "disponibile", "priorit", "bassa media", "alta", "clicca", "clicca su", "la tche", "tre rcupre", "basse moyenne", "leve", "cliquez", "cordialement", "prioriteit", "laag gemiddeld", "hoog", "la siguiente", "prioridad", "media alta", "saludos", "kb content", "links content", "content url", "download url", "webdav url", "ttulo", "descripcin", "ninguno", "ninguna", "creador", "creado", "modificador", "modificado", "tamao", "webdav", "titre", "aucun", "aucune", "modificateur", "modifi", "taille", "ko liens", "du contenu", "dossier du", "url webdav", "titolo", "nessuno", "nessuna", "creato", "modificato", "dimensioni", "kb link", "al contenuto", "cartella", "ingen", "beskrivelse", "tittel", "opprettet", "modifikator", "modifisert", "strrelse", "lenker for", "innhold mappe", "descrio", "nome", "nenhum", "nenhuma", "criador", "criado", "tamanho", "geen", "beschrijving", "titel", "maker", "gemaakt", "gewijzigd", "grootte", "contenturl", "downloadurl", "beschreibung", "url zum", "keiner", "keine", "ersteller", "erstellt", "bearbeiter", "gendert", "kb links", "download", "navigatebrowse", "pagesite", "readme file", "yesno", "user name", "main", "function", "log debug", "record", "sample rm", "import", "njson", "forms", "sites", "documenttype", "commonfolder", "error", "value", "jsonfile", "service", "false", "moving", "prop", "null", "bearer", "uappol", "uappol function", "contentid", "param", "id var", "call", "post request", "json", "config", "coveo", "uappol metadata", "content id", "and not", "loads", "update", "uploader", "inbox", "rnrn", "create", "contenteml", "inbox folder", "number", "normal", "textpart", "backup", "createchildren", "backupname", "childlist", "name", "content", "array", "write", "childname2", "childname3", "childname4", "reviewgroup", "groupsite", "starting", "started", "delete email", "command", "found", "create content", "resources", "unknown command", "globals", "var title", "rnrncopyright", "copyright", "csvtoarray", "regexp", "jsonstr", "daily", "review", "az09", "format", "hrsfilescanner", "hrs document", "fromscanner", "not type", "matches1", "employee id", "third", "tempfilename", "ldap", "version", "this", "file share", "folder", "trimlr", "namearr", "personid", "document name", "ales file", "scanned", "shared drive", "last", "document type", "document", "advising notes", "debug", "debugstr", "schedule", "descriptorpath", "web service", "inbound rule", "web services", "collaborator", "groupeveryone", "check", "index", "taskassignee", "taskenddate", "filename", "localisotime", "startdatetime", "timeperiod", "uofa edrms", "author", "descommonnode", "nomatch", "iddocumenttype", "siteid", "span", "path", "term", "core", "cap report", "template", "object", "cap mail", "dev testing", "application", "aps status", "cap generate", "monthly report", "extension", "alfresco locale", "september", "pm mdt", "school", "didx", "json response", "cap final", "rebcapiddict", "finalcapiddict", "aps process", "trigger", "chsdocument", "message", "func", "msgstr", "emailobj", "emailtemplate", "emailsubject", "sitepath", "chs docs", "studentfiles", "faculty", "true", "chssiteid", "type", "aspect", "chsdocs", "nodeidx", "find", "expired", "chs school", "defunc", "facultykey", "program", "spasite", "ldapperson", "parent name", "securitytype", "formsengg", "limit", "enggfilescanner", "stuccid", "csv file", "studdept", "supccid", "supdept", "cosupccid", "relocation", "fgsr", "records site", "fgsr doc", "department", "start fgsr", "department doc", "completion of", "oral hlth", "form", "application for", "report of", "admission", "master", "music", "unknown", "comp", "class", "leave", "supervisor", "currentline", "return", "studentid", "superccid", "revdate", "code", "apstaskproperty", "converttocsv", "aps guideline", "aps task", "newdata", "hyperlink", "certificate", "first", "info", "procid", "filecontentstr", "query sort", "create header", "person id", "subject title", "node", "studentccid", "yyyymmdd", "lookupjson", "propidx", "input date", "iso format", "folder level", "query", "duedate", "test java", "dailyschedule", "upload", "ro adm", "workflow", "offset", "adm workflow", "data length", "startindex", "json object", "aps group", "acs site", "user", "getgroupid", "am mst", "acsaps group", "user sync", "january", "start january", "february", "start february", "december", "start december", "march", "start march", "am mdt", "consumer march", "aps student", "april", "start april", "june", "start june", "pm mst", "ro backscan", "edrmsteam", "group", "group december", "aps ro", "copy file", "aps api", "maxfile", "creator", "rand", "hrsbs", "july", "august", "hrsbssyncccids", "zhrroleuserresp", "edrms", "ccids", "prefix", "createdirectory", "directory", "actionreason", "safefilename", "employeeclass", "carry", "csv data", "host", "bachelor", "college level", "mike", "propname", "maxitems", "currjson", "fvca status", "important", "prod", "manual data", "doctoratephd", "medicine", "nodename", "employeeccid", "managerccid", "employeeid", "workingtitle", "regtempdescr", "findkey", "email", "new document", "doctypelabel", "competitive bid", "bid exception", "pcm competitive", "and aspect", "competitive", "nodes", "bid update", "acommonfolder", "formspcm", "peoplesoft", "no data", "qaselectednode", "qaselected", "qanotselected", "qa folder", "preqa", "qa var", "documentcount", "passcount", "qadocument", "qa selected", "moved", "attempts", "accepted", "rm file", "plan", "rm filing", "min to", "rm system", "batch", "time limit", "rmcfg", "string", "already", "load", "valid", "graddate", "uathdep", "ccid", "title", "abstract", "embargo", "datestr", "searchresult", "alfresco afa", "admissions", "student case", "files", "and type", "institution", "inst", "json config", "institution not", "if file", "logger", "needle", "xmlstr", "staus", "document linkn", "getlogfile", "documentlist", "xml field", "not found", "addaspect", "move aspect", "duplicate file", "makes", "to max", "checks", "workflow name", "workflow link", "emplid", "due daten", "total afa", "not path", "afabundling", "change", "not aspect", "logs", "ephesoft", "document moved", "epehsoft", "xmlsourcenode", "batchsize", "filemappingpdf", "entry", "move file", "getcsvfile", "batchprocess", "logging", "completed", "document link", "groupn", "created date", "stdapl", "person", "workflow desc", "json file", "list", "lastmonth", "daily qa", "default", "qastartdate", "query language", "finished", "afa bundle", "transcriptarr", "lucene query", "qacounter", "rrfgroupname", "uaroemplid", "uaropriority", "uaroduedate", "documentlistarr", "uarmm", "profile", "courseauditform", "status", "jile", "searchmatchmove", "logfoldername", "backscanreview", "smfstr", "rosm", "converter", "shortxml", "failedcsvfolder", "xml file", "qaoperatorindex", "qaoperatorlabel", "script", "suresh", "aws promotion", "file", "tasks", "bundlingprop", "tasktype", "grps2", "uarotasktype", "comments", "test", "ro scripts", "xmlnode", "shortdescr", "xmlcont", "firstname", "orgid", "middlename", "lastname", "middle", "final", "script started", "to now", "received date", "first name", "receiveddatestr", "dateofbirthstr", "getdefination", "2005 aug", "dropbox", "foldercreate", "scan doc", "officiality", "search match", "running script", "materialextid", "studentref", "ceeb", "materialcode", "memo", "jsoncontent", "ro document", "paperfileutils", "afaconfig", "ro workflow", "paperfileconfig", "applicationjson", "formsrso", "targetfile", "property name", "pinames today", "addp", "science addp", "addp move", "ro code", "scifilescanner", "desconfnode", "grabnodeprop", "copy", "consumer", "initiators", "hiring", "consigno", "offer letter", "match", "apsmaster", "match2", "reappointment", "expiry date", "today", "finaldate", "task info", "psperson", "complete basic", "hiring info", "employee", "resultdata", "delegategroup", "delegate group", "verify", "bind", "aps appointment", "trevor report", "sfsussl", "drawdown", "refund", "reporttype", "var document", "shareurl", "newgroup", "parentgrp", "group created", "var logfile", "rule folder", "site running", "report on", "get site", "foldername", "create file", "reportlogslogs", "reportlogs", "ist site", "running report", "count", "tran", "var csvfile", "result length", "processid", "process id", "delimiters", "quoted", "standard", "starting name", "morechildren", "pdf var", "length", "newname", "fiscal", "docnamearr", "filenode", "calendar year", "versionhistory", "new doc", "web deployed", "var startdate", "startdate", "maxcount", "prevmonth", "monthcount", "application id", "delete", "get path", "if node", "search length", "arra y", "if csv", "version history", "graduate", "graduate folder", "children", "graduate file", "searchmatchdob", "career", "appl nbr", "jan04 now", "counter", "thesis", "runyear", "spring", "service log", "everything", "this determine", "thesis deposit", "archival", "problem", "filepath", "md import", "arraytocsv", "found document", "start", "food", "yumna", "start kofax", "kofax", "admin", "subject", "sample email", "execute", "koafx", "apasresponseid", "merge", "recruitment", "transcripts", "review request", "admindate", "requesteddate", "approveddate", "approvereject", "getemailbody", "taskid", "sendemail", "request status", "siteconsumer", "sitemanager", "eval", "acshost", "global env", "config file", "apsprod", "params", "alloc", "checkpath", "newpath", "adding entity", "surnamechar", "adding person", "jsonfunction", "text", "syntaxerror", "arraytoxml", "xml related", "change xml", "xmltoarray", "xmlutil", "common folder", "random2digit", "maxlimit", "jsonarchive", "very", "returns", "sitecontext", "arrcounter", "node id", "items", "array length", "therecord", "award sponsor", "rso project", "res0012345", "iso88591", "util function", "project id", "proposal id", "doc name", "newdocname", "prod url", "199899", "property", "typeprop", "barcode", "accepts", "parent", "xmlfilename", "siteconfigjson", "qabatchgrp", "signeddate", "ephdocumenttype", "json document", "qapercentage", "entity", "broker", "add error", "getexecutetime", "qaoperator", "retain title", "idnumber", "assocname", "metaarr", "fund report", "csvcontent", "input folder", "doc00c200004txg", "xmlfile", "node1", "node2", "540am", "240pm", "metadata", "var folder", "filter", "mappedobj", "09azaz", "conditionval", "foldercondition", "file name", "xmlfileobj", "alfresco prop", "setup error", "formatjson", "id property", "move", "getrandomnumber", "result", "newdoctype", "no title", "clioacs update", "clio", "patch", "system overview", "system", "overview", "purpose", "aims", "objectives", "prerequisites", "total", "expected effort", "domain", "urls", "dept param", "department name", "done", "submit form", "saving", "label", "input", "approvers", "information", "user group", "request", "group request", "users", "single family", "edmonton ab", "coverage", "common law", "step workflow", "care", "dental benefits", "direct", "web scripts", "get http", "documentation", "web script", "http method", "http", "apis", "development", "knowledge", "java", "empty argument", "e1234", "im system", "lookupentity", "configfilename", "namespace", "searchterm", "access", "jsonuser", "alfresco search", "page search", "expires", "signer", "reason", "utf8", "stripcharacter", "pull hiring", "getapsdbid", "save", "processsetidset", "saved", "returndata", "boolean", "start building", "varname", "fill", "time click", "initiated all", "submissions", "all submissions", "process landing", "page", "initiators all", "maps initiated", "post doc", "student term", "start form", "middle name", "email address", "retype", "cell", "phone no", "fellow", "secureorigin", "expand", "thank", "here", "please check", "aps list", "pang", "subset", "display", "args", "task", "username", "save form", "data need", "cdkey", "checkdict", "item", "column", "anchor", "multi", "tasks filter", "search", "trigger aps", "process api", "apsprocess", "authentication", "webscript", "getapsperson", "process info", "initsavestatus", "step0statusfail", "signer1", "signer2", "appointment", "taskjson", "groupapiaccess", "checkapiuser", "fgsrpr", "psaudit", "statusname", "unsuccessful1", "apptreappt", "emplobject", "caps aps", "cap epsb", "applicant", "form submitted", "board review", "form applicant", "school district", "start date", "cap application", "home help", "pdfa format", "larger", "upload file", "please click", "uofacap", "applications", "jstr", "processjson", "invalid url", "associate dean", "edmonton public", "october", "elk island", "reutrn false", "mapdoctypeurl", "doctype", "cap document", "doctypes", "doctypemap", "schools", "public schools", "foip", "edmonton area", "epsb", "capid", "server", "aps user", "groupcapadmin", "assignuser", "cap ea", "successfully", "please wait", "successfully ea", "apsservice", "apsserviceprod", "requireddate", "bibliography", "reb approval", "letter", "cprbls", "ahsrespect", "ahscon", "immformdocs", "picvsc", "whmis", "condissi", "hspnet", "conphoto", "conclin", "college", "health", "submission date", "effective date", "expiration date", "chs admin", "student view", "typekey", "placementdocs", "warning", "jobj", "abraniuk", "wendy", "terry harris", "directorhrsbs", "level", "holiday pay", "part time", "payroll", "salariedreg aux", "cheat", "paramname", "getallurlparams", "hrsbs config", "data dictionary", "field", "responsejson", "workflowid", "workflow id", "context", "event", "statusevent", "uaesign", "success", "permission", "progress report", "postdoctoral", "sorry", "deptjson", "fgsr student", "process status", "select", "currentuser", "reports", "student ccid", "populated", "invalid student", "supervisor ccid", "co supervisor", "due date", "freedom", "report process", "fgsr forms", "list fgsr", "report fgsr", "report sorry", "review process", "fgsr supervisor", "thesis programs", "programs", "please enter", "student id", "submit button", "var taskid", "var currentuser", "review sorry", "raheel", "added", "urlorigin", "need", "raheel var", "elmid", "commentkeyarr", "override", "menu", "colour bar", "mdphd", "absence", "completion", "mbameng", "mbamsc", "meng", "jason", "acs property", "available", "subdoctype", "test person", "test effective", "modelnodepath", "sitename", "metadatamap", "sitefile", "google addon", "gtagra", "gta gra", "zhreformengresp", "id otherwise", "university home", "indicate", "monday", "tuesday", "wednesday", "thursday", "friday", "na note", "services", "please contact", "documentname", "time", "docs", "documentlink", "employee ccid", "conflict", "task assigned", "ist coi", "declaration", "jsonobj3", "parse", "stringify", "grouplist", "json post", "taskfilter", "applies", "assigntogroup", "retrieves", "assignee", "queries", "expects", "uri args", "json containing", "applyfilter", "assignment", "avm folder", "avm store", "store id", "fullpath", "store", "storeid", "avm stores", "search term", "blog query", "category", "api call", "returns json", "cached data", "keylabel", "rest", "ldap query", "resultstr", "jsonoutput", "campusid", "jsonobj", "suresh joshee", "raheel bhojani", "desrochers", "first check", "set message", "materialkey", "acommonfolderid", "hasaccess", "siteconfig", "unprocesseddata", "savemetadata", "getcustomscript", "sitetitle", "error occured", "afa admission", "afas", "change log", "date name", "description", "ebeaton script", "tfrith", "afa main", "runasuser", "afas name", "afa paper", "file test", "utility enter", "does", "student", "bad query", "parameters", "add all", "or condition", "batch ids", "case files", "batchid", "afns", "agricultural", "anaesthes", "life", "environmental", "anaesthesiology", "uappol content", "deanaheed", "programyear", "province", "agreementtype", "safety manual", "mtis", "cree", "blackfoot", "nakota sioux", "iroquois", "dene", "treaties", "first nations", "next", "refresh", "site viewer", "facetkey", "sortparameter", "textjavascript", "public site", "viewer access", "acs cron", "job error", "alfrescos", "unauthorized", "enter", "bear tracks", "main department", "choose", "library", "john", "reviewer", "embargodate", "actiondate", "convocation", "graduation", "nodeid", "thesis status", "match result", "match list", "name dob", "view", "searchcriteria", "main function", "method", "chs upload", "stuln", "filetype", "stuid", "chs agreement", "health sciences", "recreation fomd", "dentistry fomd", "fomd", "therapy fomd", "consent for", "disclosure of", "alberta freedom", "protection", "privacy act", "alberta health", "chs form", "intake", "tasks dashlet", "doccd", "val2", "a my", "view error", "view warning", "keyword search", "refresh list" ], "references": [ "old-AlfrescoToolkit.conf", "AlfrescoToolkit.info", "AlfrescoToolkit.conf", "activities-email_es.ftl", "activities-email_ja.ftl", "activities-email_de.ftl", "activities-email_nl.ftl", "activities-email.ftl", "activities-email_it.ftl", "activities-email_fr.ftl", "CAP-notify-monthly-report.ftl", "chs-commentUpdate.ftl", "chs-studentUploadNotification.ftl", "chs-Invalid.ftl", "chs-studentExpireSoon.ftl", "chs-studentExpired.ftl", "following-email.html_it.ftl", "following-email.html_fr.ftl", "following-email.html_ja.ftl", "following-email.html_nl.ftl", "following-email_de.html.ftl", "following-email_fr.html.ftl", "following-email_ja.html.ftl", "following-email_it.html.ftl", "following-email_nl.html.ftl", "following-email.html.ftl", "following-email.html_de.ftl", "fvca-reminder-email.ftl", "fvca-corrections-email.ftl", "invite-email_nl.html.ftl", "invite-email-add-direct.html.ftl", "invite-email-add-direct.html_fr.ftl", "invite-email_fr.html.ftl", "invite-email_it.html.ftl", "invite-email-add-direct.html_es.ftl", "invite-email-add-direct.html_de.ftl", "invite-email_ja.html.ftl", "invite-email-add-direct.html_nl.ftl", "new-user-email.html.ftl", "new-user-email_de.html.ftl", "invite-email-add-direct.html_ja.ftl", "invite-email-moderated.html.ftl", "new-user-email_fr.html.ftl", "new-user-email_it.html.ftl", "new-user-email_ja.html.ftl", "new-user-email_es.html.ftl", "new-user-email_nl.html.ftl", "invite-email-add-direct.html_it.ftl", "new-user-email_nl.html", "invite-email.html_nl.ftl", "invite-email.ftl", "invite-email_es.html.ftl", "invite-email.html.ftl", "invite-email_de.html.ftl", "invite_user_email.ftl", "kofaxFailedEmailTemplate.ftl", "notify_user_email.ftl", "notify_nl.htm", "notify_user_email_es.html.ftl", "notify_user_email_de.html.ftl", "notify_user_email_ooa_failed.ftl", "notify_user_email.html.ftl", "notify_user_email_it.html.ftl", "notify_user_email_e-transcript_failed.ftl", "notify_user_email_ja.html.ftl", "notify_user_email_fr.html.ftl", "notify_user_email_nl.html.ftl", "OOA-notify-email-template.ftl", "ADV-notify-terms-types.ftl", "appt-final-reminder.ftl", "appt-halfway-reminder.ftl", "sfs-wf-email.html.ftl", "sfs-wf-completed-email.html.ftl", "payActionDecision.html.ftl", "departmentAdhocTask.html.ftl", "wf-email.html_de.ftl", "wf-email.html.ftl", "wf-email_it.html.ftl", "wf-email_fr.html.ftl", "wf-email_nl.html.ftl", "wf-email_ja.html.ftl", "wf-email.html_fr.ftl", "wf-email.html_nl.ftl", "wf-email_es.html.ftl", "wf-email.html_ja.ftl", "wf-email.html_it.ftl", "wf-email_de.html.ftl", "wf-email.html_es.ftl", "emailbody_textplain_alfresco.ftl", "emailbody_textplain_alfresco_es.ftl", "emailbody_textplain_alfresco_fr.ftl", "emailbody_textplain_alfresco_it.ftl", "emailbody_textplain_alfresco_ja.ftl", "emailbody_textplain_alfresco_nb.ftl", "emailbody_textplain_alfresco_pt_BR.ftl", "emailbody_textplain_alfresco_nl.ftl", "emailbody_textplain_alfresco_ru.ftl", "emailbody_textplain_alfresco_zh_CN.ftl", "emailbody_textplain_share.ftl", "emailbody_textplain_share_de.ftl", "emailbody_textplain_share_es.ftl", "emailbody_textplain_share_it.ftl", "emailbody_textplain_share_ja.ftl", "emailbody_textplain_share_nb.ftl", "emailbody_textplain_share_nl.ftl", "emailbody_textplain_share_ru.ftl", "emailbody-alfresco-textplain.ftl", "emailbody-share-textplain.ftl", "emailbody_textplain_alfresco_de.ftl", "emailbody_textplain_share_zh_CN.ftl", "emailbody_textplain_share_fr.ftl", "emailbody_textplain_share_pt_BR.ftl", "uofa-pc-model.xml", "uofa-pllc-model.xml", "uofa-science-model.xml", "uofa-rso-model.xml", "uofa-set-model.xml", "uofa-sfs-model.xml", "uofa-slate-model.xml", "uofa-uappol-model.xml", "advext-model.xml", "assocModel.xml", "adv-model.xml", "cbsr-model.xml", "dynamicSecurityMarksModel", "ephesoft-educational.xml", "facopr-model.xml", "fgsr-model.xml", "faculty-model.xml", "psAudit-model.xml", "FVCA.xml", "roDocProcessing-model.xml", "ro-model.xml", "fgsr-thesis-deposit.xml", "security-group-model.xml", "ua-audit-generic-model.xml", "ua-dummy.xml", "calendar-year-model.xml", "ua-error-model.xml", "uafgsrsup-model.xml", "uaqa-model.xml", "transcript-model.xml", "uAlbertaWorkflowGeneral.xml", "uarmm-supplement-scanning.xml", "uarm-rma-filing-model.xml", "ua-search-model.xml", "ro-search-match.xml", "uatraining.xml", "uofa-ales-model.xml", "uofa-arts-model.xml", "uofa-aps-model.xml", "uofa-base-model.xml", "uawfh-model.xml", "uofa-augustana-model.xml", "uofa-business-model.xml", "uarmTempModel.xml", "uofa-cap-model.xml", "uofa-chs-model.xml", "uofa-chs-agreements-model.xml", "uofa-common-model.xml", "uofa-education-model.xml", "tamis-model.xml", "uofa-engg-coop-model.xml", "uofa-engg-model.xml", "uofa-fo-model.xml", "uofa-extension-model.xml", "uofa-esign-model.xml", "uofa-hrsbs-model.xml", "uofa-law-model.xml", "uofa-caps-model.xml", "uofa-hrs-model.xml", "uofa-native-studies-model.xml", "uofa-pllc-model.json", "uofa-rso-model.json", "uofa-pc-model.json", "uofa-native-studies-model.json", "uofa-slate-model.json", "uofa-uappol-model.json", "uofa-science-model.json", "uofa-workflowGeneral.json", "uofa-sfs-model.json", "adv-model.json", "advext-model.json", "assocModel.json", "calendar-year-model.json", "facopr-model.json", "cbsr-model.json", "ephesoft-educational.json", "faculty-model.json", "faculty-model.xml.json", "rma-model.json", "fgsr-model.json", "FVCA.json", "psAudit-model.json", "ro-aug-model.json", "ro-search-match.json", "tamis-model.json", "security-group-model.json", "fgsr-thesis-deposit.json", "transcript-model.json", "ro-model.json", "ua-audit-generic-model.json", "uafgsrsup-model.json", "uaqa-model.json", "uarmm-supplement-scanning.json", "uAlbertaWorkflowGeneral.json", "ua-error-model.json", "uofa-ales-model.json", "ua-search-model.json", "uarmTempModel.json", "uofa-aps-model.json", "uawfh-model.json", "uofa-arts-model.json", "uofa-cap-model.json", "uofa-chs-agreements-model.json", "uofa-augustana-model.json", "uofa-base-model.json", "uofa-chs-model.json", "uofa-engg-coop-model.json", "uofa-common-model.json", "uofa-engg-model.json", "uofa-extension-model.json", "uofa-hrsbs-model.json", "uofa-fo-model.json", "uofa-education-model.json", "uofa-law-model.json", "uofa-hrs-model.json", "uofa-esign-model.json", "uofa-business-model.json", "faculty-of-science-site.json", "FandO-Organizations.json", "FandO-Programs.json", "fgsr-awards.json", "fgsr-category-list.json", "fgsr-exam-list.json", "fgsr-official-list.json", "fgsr-programOfStudy.json", "fgsr-site.json", "fo-emergency-response-manual.json", "graduate-student-records-site.json", "fo-site.json", "fo-utilities.json", "hrs-benefits.json", "hrsbs-action-reasons.json", "graduate-student-records-v2-site.json", "hrsbs-doc-list.json", "hrsbs-file-structure.json", "hrsbs-owner-details.json", "hrsbs-functionalroles.json", "hrsbs-function-module.json", "hrsbs-review-month.json", "hrsbs-security-class.json", "hrsbs-site.json", "hrs-employeeApprovedDeductions.json", "hrs-bulkId.json", "hrsbs-review-cycle.json", "hrs-employmentFinancial.json", "hrs-personalInformation.json", "hrs-pension.json", "hrs-security-list.json", "hrs-leaves.json", "Institutions.json", "ist-site.json", "hrs-site.json", "my-site-site.json", "law-security-list.json", "native-studies-doc-list.json", "fgsr-credential-list.json", "law-doc-list.json", "native-studies-security-list.json", "office-of-advancement-record-types.json", "office-of-advancement-site.json", "pcm-category.json", "pllc-doc-list.json", "ro-academic-pre-pro-programs.json", "pllc-security-list.json", "ro-acad-group.json", "ro-admitType.json", "ro-applicant-type.json", "ro-campusSolutionsTerm.json", "hrsbs-employee-class.json", "pllc-site.json", "ro-indigenous-type.json", "ro-doctypes.json", "pcm-site.json", "ro-official.json", "ro-org-desc.json", "ro-related-record-types.json", "ro-relationship-to-institution.json", "ro-search-match-status.json", "ro-authenticity.json", "ro-slate-folio-material-non-school-scope.json", "ro-slate-institution-material.json", "ro-slate-folio-material-school-scope.json", "ro-method-receipt.json", "ro-slate-institutions.json", "ro-test-id.json", "rso-accounts-receivable-accounts-payable-doc-type.json", "rso-agreements-doc-category.json", "rso-bulk-scan-doc-type.json", "rso-cfi-purchasing-doc-type.json", "rso-cfi-financials-doc-type.json", "rso-financial-reconciliation-doc-type.json", "rso-financial-reporting-doc-type.json", "rso-financials-doc-type.json", "rso-mask.json", "rso-site.json", "rso-sponsor-names.json", "science-doc-list.json", "science-security-list.json", "school-of-business-site.json", "sfs-ussl-report-status.json", "staff-training-site.json", "student-financial-services-doc-list.json", "student-financial-services-site.json", "student-records-bulk-load-testing-site.json", "student-records-training-site.json", "student-records-site.json", "student-transcripts-site.json", "rso-forms-form-type.json", "support-documentation-site.json", "test-site-site.json", "uappol-category-heirarchy.json", "uappol-type.json", "uappol-site.json", "uoda-faculties.json", "academic-department.json", "adv-correspondence-type.json", "uoda-departments.json", "advsearch.json", "ales-security-list.json", "ales-doc-list.json", "arts-doc-list.json", "arts-security-list.json", "augustana-security-list.json", "augustana-site.json", "augustana-legacy-transcript-doc-list.json", "rso-activation-report-doc-type.json", "business-doc-list.json", "business-security-list.json", "bulkload-testing-site.json", "cap-site.json", "caps-school-board-list.json", "cbsrsite-site.json", "cbsrsite-sopTypes.json", "cbsr-study.json", "cbsr-worksheetType.json", "augustana-doc-list.json", "chs-ag-type.json", "chs-agreements-site.json", "chs-campus-list.json", "chs-degProgram-list.json", "chs-emailNotification.json", "chs-document-status.json", "chs-faculty-list.json", "chs-programYear-list.json", "chs-program-list.json", "canada-provinces-list.json", "demo-site-site.json", "education-doc-list.json", "department.json", "education-security-list.json", "chs-stuEmailNotification.json", "college-of-health-sciences-site.json", "chs-provinces-list.json", "engineering-coop-doc-list.json", "engineering-coop-security-list.json", "engineering-co-op-site.json", "engineering-doc-list.json", "extension-doc-list.json", "extension-security-list.json", "facopr-planTypes.json", "facopr-supportinDocField.json", "faculty-of-ales-site.json", "engineering-security-list.json", "faculty-of-education-site.json", "faculty-of-extension-site.json", "faculty-of-native-studies-site.json", "faculty-of-law-site.json", "faculty-of-arts-site.json", "faculty-of-engineering-site.json", "my_docs_inline.ftl", "my_docs.ftl", "my_spaces.ftl", "recent_docs.ftl", "translatable.ftl", "readme.ftl", "show_audit.ftl", "general_example.ftl", "my_summary.ftl", "doc_info.ftl", "localizable.ftl", "recordsCustomModel.xml", "imapConfig.json", "rm_event_config.json", "rmScriptThrowError.js", "report_rmr_transferReport.html.ftl", "report_rmr_destructionReport.html.ftl", "report_rmr_holdReport.html.ftl", "notify-records-due-for-review-email.ftl", "record-rejected-email.ftl", "record-superseded-email.ftl", "onCreate_supersedes.js", "rma_isClosed.js", "PaperFileconfig.json", "MyTasks-config.json", "AFAconfig.json", "roDocumentTypes.json", "uappol-upload-rule.js", "uappolCreateFolderRule.js", "uappolCreateFolder.js", "uappol-api.js", "uappol-functions.js", "command-utils.js", "backup and log.js", "backup.js", "example test script.js", "test return value.js", "start-pooled-review-workflow.js", "command-processor.js", "command-search.js", "alfresco docs.js", "append copyright.js", "createDepartmentJSON.js", "hrsDaily.js", "hrsFolderCreateSchedule.js", "hrsScanned.js", "hrsCreateFolder.js", "hrsFolderCreateRule.js", "hrsFileShareFolder.js", "alesCreateFolderRestricted.js", "alesCreateFolderSchedule.js", "alesBulkShareFolder.js", "alesFileScanned.js", "alesCreateFolder.js", "alesDaily.js", "alesFileShareFolder.js", "alesCreateFolderConfidential.js", "alesCreateAdvisingNotes.js", "alesFolderCreateSchedule.js", "deployWebServiceDescriptor.js", "taskReportCSV-Appointment-prod.js", "artsFileScanned.js", "artsCreateFolderRule.js", "artsCreateFolder.js", "artsCreateFolderRestricted.js", "augCreateFolderRestricted.js", "augCreateFolder.js", "businessCreateFolderRule.js", "businessCreateFolder.js", "businessCreateFolderSchedule.js", "businessBulkShareFolder.js", "businessFileShareFolder.js", "businessCreateFolderRestricted.js", "businessDaily.js", "businessCreateAdvisingNotes.js", "businessFileScanned.js", "CAPSendMonthlyReportEmail.js", "CAPGenerateMonthlyReport.js", "CapFinalReportSubmit.js", "chsCreateFolderRule.js", "chsEmailOnUpdateComment.js", "chsReport.js", "EmailNotifCHSStudent.js", "SetExpiryDate.js", "chsCreateFolder.js", "chsFacultyReport.js", "chsAgreementCreateFolderRule.js", "chsAgreementCreateFolder.js", "scheduleJobTest.js", "every52MinPastHour.js", "every46MinPastHourBetween4PM12PM.js", "every57MinPastHour.js", "every47MinPastHourBetween4PM12PM.js", "everyDay4H30MinAM.js", "everyDay7H45MinAM.js", "every10MinStartingAt5MinPastHour.js", "every38MinPastHourBetween4PM12PM.js", "every20MinStartingAt15MinPastHour.js", "everyDay2H05MinAM.js", "every2MinStartingAt1MinPastHour.js", "everyDay1H05MinAM.js", "everyDay12H30MinAM.js", "everyDay7H30MinPM.js", "every30MinStartingAt19MinPastHour.js", "every30MinStartingAt11MinPastHour.js", "everyDay2H35MinAM.js", "every30MinStartingAt26MinPastHour.js", "every16MinPastHour.js", "everyDay1H45MinAM.js", "everyDay2H45MinAM.js", "every29MinPastHour.js", "every22MinPastHour.js", "everyDay11H30MinPM.js", "educationCreateFolderRule.js", "educationCreateFolder.js", "educationCreateAdvisingNotes.js", "enggCoopCreateFolderRestricted.js", "enggCoopCreateFolderRule.js", "enggCoopBulkUpload.js", "enggCreateFolderRule.js", "enggCreateFolderRestricted.js", "enggCreateFolder.js", "engineeringCreateAdvisingNotes.js", "enggCoopCreateFolder.js", "enggFileScanned.js", "enggCoopFileScanned.js", "extensionFileScanned.js", "extensionCreateFolder.js", "extensionCreateFolderRule.js", "fgsrCreateGuidelineAPSProcessFromCSV.js", "fgsrDocRestructure.js", "fgsrMigrationScript.js", "fgsrDocRelocation.js", "fgsrCreateFolderFromCSV.js", "guideline-reports.js", "fgsrMigrationScript-withTerminationLogic.js", "modfiyOrUpdatePropertyfromCSV.js", "fgsr-case-file-report.js", "fgsrCreateAPSProcessFromFolder.js", "fgsrCreateFolder.js", "fgsrCopyMetadataToFolderLevel.js", "fgsrCreateAPSProcessFromCSV.js", "foCreateFolder.js", "foCreateFolderRule.js", "Script1.js", "Script2.js", "scheduleRunEvery2-10PM.js", "scheduleRunEvery5PMTo10PM.js", "scheduleRunEvery30Minutes.js", "scheduleRunEvery60Minutes.js", "scheduleRunEveryday3PMto11PM.js", "scheduleRunEveryday12AMto6AM.js", "scheduleRunEvery20Minutes.js", "scheduleRunEvery2AM.js", "acsToApsUserUpdate.js", "2024-01-13-log.txt", "2024-01-15-log.txt", "2024-01-20-log.txt", "2024-01-21-log.txt", "2024-01-22-log.txt", "2024-01-23-log.txt", "2024-02-04-log.txt", "2024-02-05-log.txt", "2024-02-06-log.txt", "2024-02-07-log.txt", "2024-02-08-log.txt", "2024-01-14-log.txt", "2024-01-18-log.txt", "2024-01-11-log.txt", "2024-01-16-log.txt", "2024-01-19-log.txt", "2024-01-26-log.txt", "2024-01-28-log.txt", "2024-01-30-log.txt", "2024-01-12-log.txt", "2024-01-29-log.txt", "2024-01-27-log.txt", "2024-01-31-log.txt", "2024-01-24-log.txt", "2024-02-09-log.txt", "2024-02-02-log.txt", "2024-01-09-log.txt", "2024-02-03-log.txt", "2024-01-05-log.txt", "2024-01-06-log.txt", "2024-01-04-log.txt", "2024-02-01-log.txt", "2024-01-07-log.txt", "2024-01-08-log.txt", "2024-02-10-log.txt", "2024-02-11-log.txt", "2024-02-12-log.txt", "2024-02-13-log.txt", "2023-12-31-log.txt", "2024-02-15-log.txt", "2024-02-16-log.txt", "2024-02-14-log.txt", "2024-02-18-log.txt", "2024-02-20-log.txt", "2024-01-17-log.txt", "2024-02-19-log.txt", "2024-01-10-log.txt", "2024-02-23-log.txt", "2024-02-25-log.txt", "2024-02-21-log.txt", "2024-01-25-log.txt", "2024-02-28-log.txt", "2024-02-22-log.txt", "2024-02-29-log.txt", "2024-03-02-log.txt", "2024-03-03-log.txt", "2024-02-26-log.txt", "2024-03-04-log.txt", "2024-03-06-log.txt", "2024-03-07-log.txt", "2024-03-05-log.txt", "2024-03-08-log.txt", "2024-03-09-log.txt", "2024-03-11-log.txt", "2024-03-10-log.txt", "2024-03-12-log.txt", "2024-03-13-log.txt", "2024-03-14-log.txt", "2024-03-15-log.txt", "2024-03-16-log.txt", "2024-03-17-log.txt", "2024-03-18-log.txt", "2024-03-20-log.txt", "2024-03-21-log.txt", "2024-03-22-log.txt", "2024-03-19-log.txt", "2024-03-23-log.txt", "2024-03-01-log.txt", "2024-03-26-log.txt", "2024-03-25-log.txt", "2024-03-28-log.txt", "2024-03-29-log.txt", "2024-03-27-log.txt", "2024-03-24-log.txt", "2024-03-30-log.txt", "2024-04-02-log.txt", "2024-04-03-log.txt", "2024-03-31-log.txt", "2024-04-05-log.txt", "2024-04-06-log.txt", "2024-04-07-log.txt", "2024-04-08-log.txt", "2024-04-09-log.txt", "2024-04-04-log.txt", "2024-04-11-log.txt", "2024-04-12-log.txt", "2024-04-13-log.txt", "2024-02-17-log.txt", "2024-04-01-log.txt", "2024-04-16-log.txt", "2024-04-15-log.txt", "2024-04-10-log.txt", "2024-04-17-log.txt", "2024-02-24-log.txt", "2024-04-14-log.txt", "2024-04-19-log.txt", "2024-04-21-log.txt", "2024-04-22-log.txt", "2024-04-23-log.txt", "2024-04-24-log.txt", "2024-04-26-log.txt", "2024-04-25-log.txt", "2024-04-29-log.txt", "2024-04-30-log.txt", "2024-05-01-log.txt", "2024-05-02-log.txt", "2024-05-03-log.txt", "2024-05-04-log.txt", "2024-05-05-log.txt", "2024-05-06-log.txt", "2024-04-28-log.txt", "2024-05-07-log.txt", "2024-04-18-log.txt", "2024-05-08-log.txt", "2024-05-09-log.txt", "2024-05-10-log.txt", "2024-05-12-log.txt", "2024-05-14-log.txt", "2024-05-11-log.txt", "2024-05-16-log.txt", "2024-04-27-log.txt", "2024-05-17-log.txt", "2024-05-15-log.txt", "2024-05-18-log.txt", "2024-05-20-log.txt", "2024-05-21-log.txt", "2024-05-19-log.txt", "2024-05-22-log.txt", "2024-05-23-log.txt", "2024-05-25-log.txt", "2024-05-24-log.txt", "2024-05-26-log.txt", "2024-05-27-log.txt", "2024-05-28-log.txt", "2024-05-29-log.txt", "2024-05-30-log.txt", "2024-06-02-log.txt", "2024-05-13-log.txt", "2024-06-01-log.txt", "2024-05-31-log.txt", "2024-04-20-log.txt", "2024-06-03-log.txt", "2024-06-04-log.txt", "2024-06-05-log.txt", "2023-12-30-log.txt", "2023-12-01-log.txt", "2024-02-27-log.txt", "2023-12-29-log.txt", "gtaGraProcessToCSV.js", "gtaGraProcessToCSV-2AM.js", "hrs-benefit-report.js", "westCanDocumentMove.js", "hrsbsReviewCycleReport.js", "hrsbsCreateFolderRule.js", "HRSBS-SyncCCIDs.js", "hrsbsCreateFolder.js", "FVCA-data-import.js", "FVCA-manual-property-update.js", "istPerformanceReviewCreateFolder.js", "lawCreateFolderRestricted.js", "lawFileScanned.js", "lawCreateFolder.js", "lawCreateFolderRule.js", "nativeStudiesCreateFolderRestricted.js", "nsFolderCreateSchedule.js", "nativeStudiesCreateFolder.js", "nativeStudiesCreateFolderRule.js", "ADV-notify-type-mapping.json", "OOA-notify-email.js", "ADV-notify-terms-types.js", "pcm-grab-competitive-noderefs.js", "pcm-update-competitive-noderefs.js", "pcmCreateFolder.js", "psUpdateAlfrescoDepartment.js", "pllcCreateFolder.js", "qaProcess.js", "qaRelease.js", "rmOOABackgroundInformationFiling.js", "rmFilingDoc.js", "rmSearchmatchNomatchFiling.js", "rmFilingConfig.json", "thesisDestructionReport.js", "rmThesis.js", "add_document_type_ro.js", "updateSearchMatchStatus.js", "searchmatchFullDob.js", "createROReconciliationReports.js", "eTranscriptInstList.js", "folder-create-ro.js", "augTranscript.js", "addTimeStamp.js", "missingDocumentList-csv.js", "roAddAspectAndMoveAFA.js", "myTaskDownload.js", "roAddAspectAndMoveTranscript.js", "roAddBundlingAspect.js", "roAddSearchMatchAspect.js", "roCopyEphesoftMetadataXML.js", "roBatchScript.js", "addSearchMatchDocumentType.js", "roCreateEducationalCSV.js", "roCopyOlderScannedDocument.js", "roDocumentListAPLSTD.js", "roCopyOlderScannedDocumentAdHoc.js", "roEtranscriptReport.js", "roDailyQA.js", "roEtranscriptsBundleTest.js", "roFolderCreateLDAPLookup_no_notificatiion.js", "roFolderCreateLDAPLookup.js", "roEtranscriptsBundle.js", "roAddComment.js", "roCopyEphesoftMetadataScanned.js", "roMoveCompleted.js", "roMoveCompletedBackScan.js", "roMoveCompletedSearchMatch.js", "roEtranscriptPDFConverter.js", "roScanningMetadata.js", "roScript1.js", "RORoutingWorkflowUtil.js", "roScript3.js", "roScript2.js", "roScanningMetadataBackScan.js", "roScript7.js", "roScript6.js", "roScript9.js", "roScript1BackScan.js", "roSearchMatchNoMatchReport.js", "roSearchMatchQuery.js", "RONotification.js", "roSlateDocumentExport.js", "roTagAndFileRenderedPDFs.js", "roScript4.js", "roScript5.js", "roScript8.js", "createSlateFolioMaterialDropdown.js", "createSlateApplicationsCSV.js", "LaunchWorkflowUtils.js", "PaperFileUtils.js", "GenerateSponsornamesAndPinames.js", "rsoCreateFolder.js", "sciCreateFolderConfidential.js", "sciCreateFolderPublic.js", "sciCreateFolder.js", "sciCreateFolderRestricted.js", "scienceASDocumentImport.js", "sciFileADDPFileTypes.js", "sciFileShareFolder.js", "sciFileScanned.js", "sciBulkShareFolder.js", "copy-signed-offer-letter.js", "dept-config.js", "reappointment-generate-schedule.js", "reappointment-reminder-schedule.js", "reappointment-generate-process.js", "manual-generate-script.js", "reappointment-reminder-process.js", "reminder-email-util.js", "reappointment-tracking-schedule.js", "reappointment-tracking-process.js", "appointment-report.js", "appointment-report-schedule.js", "manual-tracking-script.js", "sfsCreateFolder.js", "sfsWorkflowStatus.js", "security-group-user.js", "createReportPermissionsFoldersInASite.js", "siteMembersReport.js", "createReportRecursiveGroupsAndUsersInASite.js", "search-responses.js", "advChangeDocumentType.js", "addFolderMetadata.js", "advChangeDocumentType_confidential.js", "consignOInitiatorOfferLetterChange.js", "advChangeDocumentType_background.js", "transcriptResponse.js", "change-fgsr-pdf-file-name-with-date.js", "copy-fgsr-to-graduate-students-records.js", "ADVDonationCalendarToFiscal.js", "document-query.js", "deletingCompletingWorkflow.js", "eTranscriptTemp.js", "eTranscript-bundled-02-jan.js", "eTranscriptVersionModifierFix.js", "fixCheckout.js", "removeDonationGrp.js", "eTranscriptVersioningFix.js", "move-fgsr-folder.js", "search-match-dob-add.js", "thesisDepositArchival.js", "moveThesesForTransfer.js", "eraReportGeneration.js", "kofaxMetadataMerge.js", "kofaxMetadataMergeMissing.js", "generic2min.js", "kofaxSendEmail.js", "PeopleSoft-eTranscript-XML-PDF.js", "startBenefitWorkflow.js", "peoplesoftMetadataMergeMissing.js", "securityWorkflowUtil.js", "startPayActionWorkflow.js", "startDepartmentAdhocApprovalWorkflow.js", "convertTranscript.js", "CreateTranscriptUserMemberships.js", "startTwoStepWorkflow.js", "fix_employee_names.js", "env.js", "folderCreateUtil.js", "folderCreateUtilAA.js", "generalSchedule.js", "JSON.js", "xmlUtil.js", "addPersonAspect.js", "addTimeStampRandomFileName.js", "archiveDocument.js", "luceneUtil.js", "util.js", "archivedItems.js", "getProjectDetails.js", "ADVChangeAuthor.js", "ADVcalendarToFiscal.js", "symplexUtils.js", "advBatchProcessing.js", "advChangeDocumentName.js", "ADVEphesoftMove.js", "advCreateFolderScheduled.js", "advErrorMessageReset.js", "advMetadataUpdate.js", "advMoveToFoldersScheduled.js", "ADVendFundReportFiling.js", "advReconcilliation.js", "ADVmoveRecordsToPreQA.js", "advScanningMetadata.js", "advScript2.js", "advScript3.js", "advScript4.js", "advScript1.js", "advScript5.js", "advScriptDaily.js", "advScriptMonthly.js", "advScriptKofax.js", "ADVSiteContext.js", "advMoveToFolder.js", "deleteEphesoftDoc.js", "advUtils.js", "folderCreateADV.js", "advScriptDaily30minFreq.js", "jsonUtils.js", "advScanning.js", "folderCreateDocumentADV.js", "moveToFolders.js", "symplexMetadataUpdate.js", "OOA_SOT_Name_change.js", "moveToFoldersRetainTitle.js", "advScriptWeekly.js", "symplexMoveToFolder.js", "clioToAcsDocUpdate.js", "ClioUpdateScheduledJob.js", "smartFoldersExample.json", "system-overview.html", "businessDocSetup.json", "uappolDocSetup.json", "businessConfig.json", "augConfig.json", "augDocSetup.json", "lawConfig.json", "uappolConfig.json", "UAlbertaSettings.json", "hrsbsDocSetup.json", "advConfig.json", "hrsbsConfig.json", "hrsConfig.json", "hrsDocSetup.json", "advSimplexMapping.json", "advDocSetup.json", "artsDocSetup.json", "alesConfig.json", "alesDocSetup.json", "archiveFolder.json", "artsConfig.json", "advScanningMapping.json", "collegeOfHealthSciencesConfig.json", "chsAgreementsConfig.json", "dropboxCommonAspects.json", "collegeOfHealthSciencesDocSetup.json", "chsAgreementsDocSetup.json", "educationConfig.json", "extensionConfig.json", "fgsrv2DocSetup.json", "foConfig.json", "foDocSetup.json", "educationDocSetup.json", "lawDocSetup.json", "nativeStudiesDocSetup.json", "pllcConfig.json", "pllcDocSetup.json", "roConfig.json", "fgsrv2Config.json", "rsoConfig.json", "rsoDocSetup.json", "sciConfig.json", "eTranscriptConfig.json", "sciDocSetup.json", "roDocSetup.json", "sfsDocSetup.json", "UAlbertaSettings.conf", "student-recordsConfig.json", "securityWorkflowSetting.json", "thesisDepositConfig.json", "globalHeader.html.ftl", "webFormDialog.html.ftl", "alfrescoUserGroupRequest.ftl", "pensionBenefit.html.ftl", "pinames.json", "sponsornames.json", "searchPageConfig.json", "pcmDocSetup.json", "pcmConfig.json", "qaConfig.json", "apsAppConfig.json", "fgsrCreateApsFromCSV.json", "fgsrCopyMetadata.json", "enggCoopDocSetup.json", "enggDocSetup.json", "enggConfig.json", "enggCoopConfig.json", "CapApsConfig.json", "extensionDocSetup.json", "readme.html", "readme_de.html", "readme_ja.html", "readme_fr.html", "advEndowmentName.get.desc.xml", "advEndowmentName.get.json.ftl", "advEndowmentName.get.js", "advEntityName.get.desc.xml", "advEntityName.get.js", "advEntityName.get.html.ftl", "search.get.desc.xml", "search.get.js", "search.get.html.ftl", "changeInitiatorAppt.put.desc.xml", "eSignatureStatusHistory.get.html.ftl", "changeInitiatorAppt.put.json.ftl", "eSignatureStatusHistory.get.desc.xml", "appointmentSubmit.get.js", "processIdProps.get.desc.xml", "changeInitiatorAppt.put.js", "processIdProps.get.json.ftl", "processIdProps.get.js", "appointmentLandingPage.get.desc.xml", "appointmentLandingPage.get.js", "appointmentLandingPage.get.html.ftl", "appointmentStart.get.desc.xml", "appointmentStart.get.html.ftl", "appointmentStart.get.js", "appointmentStartTest.get.desc.xml", "appointmentStartTest.get.js", "appointmentStartTest.get.html.ftl", "appointmentSubmit.get.desc.xml", "appointmentSubmit.get.html.ftl", "eSignatureStatusHistory.get.js", "apsApplicationList.get.desc.xml", "apsApplicationList.get.html.ftl", "assignuser.put.js", "assignuser.put.json.ftl", "claimtask.put.desc.xml", "claimtask.put.js", "claimtask.put.json.ftl", "completetask.post.desc.xml", "completetask.post.json.ftl", "completetask.post.js", "getapsdbid.get.desc.xml", "getapsdbid.get.json.ftl", "gettasks.get.desc.xml", "gettasks.get.json.ftl", "assignuser.put.desc.xml", "gettasks.get.js", "savetask.post.desc.xml", "savetask.post.js", "savetask.post.json.ftl", "taskForm.get.js", "taskForm.get.desc.xml", "tasklist.get.desc.xml", "apsApplicationList.get.js", "taskForm.get.json.ftl", "tasklist.get.html.ftl.jquery", "tasklist.get.html.ftl", "tasklist.get.js", "triggerapsprocess.post.desc.xml", "triggerapsprocess.post.js", "updatevariables.post.desc.xml.notused", "triggerapsprocess.post.json.ftl", "updatevariables.post.json.ftl.notused", "getapsdbid.get.js", "updatevariables.post.js.notused", "taskUtils.js", "apsGroupsConfig.json", "apsSitesConfig.json", "apptStepZeroStarter.post.desc.xml", "apptStepZeroStarter.post.json.ftl", "apptStepZeroStarter.post.js", "apptStepOneStarter.post.desc.xml", "apptStepOneStarter.post.js", "apptStepOneStarter.post.json.ftl", "apptStepOneSave.post.json.ftl", "apptStepOneSave.post.desc.xml", "apptStepOneSave.post.js", "apptStatusDocUpdate.post.desc.xml", "apptStatusDocUpdate.post.json.ftl", "apptStatusDocUpdate.post.js", "APSWorkflowStatus.get.desc.xml", "APSWorkflowStatus.put.html.ftl", "APSWorkflowStatus.get.html.ftl", "APSWorkflowInfo.put.html.ftl", "APSWorkflowStatus.put.desc.xml", "APSWorkflowInfo.put.desc.xml", "APSWorkflowStatus.get.js", "APSWorkflowStatus.put.js", "APSWorkflowInfo.put.js", "NodeInfo.get.desc.xml", "NodeInfo.get.html.ftl", "capinfo.get.js", "capstart.get.js", "epsb.get.js", "epsb.get.html.ftl", "capstart.get.html.ftl", "epsb.get.desc.xml", "schoolboard.get.html.ftl", "NodeInfo.get.js", "NodeInfoByCapId.get.desc.xml", "updateVariable.post.json.ftl", "updateVariable.post.js", "schoolboard.get.desc.xml", "updateVariable.post.desc.xml", "schoolboard.get.js", "capinfo.get.html.ftl.backup", "cap-file-load.post.json.ftl", "NodeInfoByCapId.get.js", "capinfo.get.html.ftl", "capstart.get.desc.xml", "cap-file-load.post.desc.xml", "capinfo.get.desc.xml", "cap-file-load.post.js", "capeamergedoc.get.js", "capeamergedoc.get.desc.xml", "capeamergedoc.get.html.ftl", "capConfig.js", "chsEnv.js", "chsConfig.js", "chsAdminStuView.get.desc.xml", "chsAdminStuView.get.html.ftl", "chsAdminStuView.get.js", "coupa.get.html.ftl", "coupa.get.desc.xml", "coupa.get.js", "coveoGetDocList.get.desc.xml", "coveoGetDocList.get.json.ftl", "coveoGetDocList.get.js", "getJson.get.desc.xml", "getJson.get.js", "getJson.get.json.ftl", "simpleupload.post.desc.xml", "simpleupload.post.json.ftl", "simpleupload.post.js", "consignoMessage.get.js", "consignoWebhook.post.js", "consignoWebhook.post.json.ftl", "consignoMessage.get.desc.xml", "consignoWebhook.post.desc.xml", "consignoMessage.get.json.ftl", "eSignDownload.get.js", "eSignDownload.get.html.ftl", "eSignDownload.get.desc.xml", "review-supervisorv2.get.desc.xml", "review-supervisorv2.get.js", "review-supervisorv2.get.html.ftl", "fgsrssgLanding.get.js", "review-comm01v2.get.desc.xml", "fgsrssgLanding.get.html.ftl", "review-comm01v2.get.html.ftl", "review-comm02v2.get.desc.xml", "review-comm02v2.get.html.ftl", "fgsrssgLanding.get.desc.xml", "review-studentv2.get.html.ftl", "review-comm03v2.get.html.ftl", "review-comm03v2.get.desc.xml", "review-studentv2.get.desc.xml", "review-cosupervisorv2.get.html.ftl", "review-comm02v2.get.js", "review-startv2.get.desc.xml", "review-studentv2.get.js", "review-cosupervisorv2.get.js", "review-startv2.get.js", "review-student-revisionv2.get.html.ftl", "review-student-revisionv2.get.desc.xml", "review-startv2.get.html.ftl", "review-comm03v2.get.js", "review-cosupervisorv2.get.desc.xml", "review-student-revisionv2.get.js", "review-comm01v2.get.js", "review-comm02.get.desc.xml", "review-comm02.get.html.ftl", "review-comm03.get.desc.xml", "review-comm02.get.js", "review-comm03.get.html.ftl", "review-cosupervisor.get.desc.xml", "review-cosupervisor.get.html.ftl", "review-cosupervisor.get.js", "review-nextdate.get.desc.xml", "review-comm03.get.js", "review-nextdate.get.js", "review-student.get.html.ftl", "review-student.get.js", "review-student-revision.get.desc.xml", "review-student.get.desc.xml", "review-student-revision.get.js", "review-studentTest.get.desc.xml", "review-supervisor.get.desc.xml", "review-studentTest.get.js", "review-supervisor.get.html.ftl", "review-supervisor.get.js", "review-comm01.get.desc.xml", "review-comm01.get.html.ftl", "review-comm01.get.js", "review-student-revision.get.html.ftl", "review-nextdate.get.html.ftl", "review-studentTest.get.html.ftl", "guidelines-supervisor.get.desc.xml", "guidelines-supervisor-revision.get.html.ftl", "guidelines-start.get.desc.xml", "guidelines-start.get.html.ftl", "guidelines-start.get.js", "guidelines-student.get.desc.xml", "guidelines-student.get.html.ftl", "guidelines-student-revision.get.js", "guidelines-student-revision.get.desc.xml", "guidelines-supervisor.get.html.ftl", "guidelines-supervisor-revision.get.desc.xml", "guidelines-student-revision.get.html.ftl", "guidelines-student.get.js", "guidelines-supervisor.get.js", "guidelines-supervisor-revision.get.js", "programExtensionScript.js", "customScript.js", "customCSS_FGSR2.css", "customCSS_FGSR.css", "fgsrEnv.js", "FGSR-Forms-Config.js", "config.js", "googleAddon.get.json.ftl", "googleAddon.get.desc.xml", "googleAddon.get.js", "gtaGraStatus.post.json.ftl", "gtaGraStatus.post.js", "gtaGraStatus.post.desc.xml", "wfh-manager.get.desc.xml", "wfh-form.get.js", "wfh-manager.get.html.ftl", "wfh-form.get.desc.xml", "wfh-revise.get.desc.xml", "wfh-revise.get.html.ftl", "wfh-revise.get.js", "wfh-seniormanager.get.desc.xml", "wfh-manager.get.js", "wfh-seniormanager.get.js", "wfh-seniormanager.get.html.ftl", "wfh-form.get.html.ftl", "hrsbsDocumentLinking.get.desc.xml", "hrsbsDocumentLinking.get.html.ftl", "hrsbsDocumentLinking.get.js", "coi-start.get.desc.xml", "coi-start.get.html.ftl", "coi-revise.get.html.ftl", "coi-employee.get.html.ftl", "coi-employee.get.desc.xml", "coi-revise.get.desc.xml", "coi-start.get.js", "coi-revise.get.js", "coi-supervisor.get.js", "coi-supervisor.get.desc.xml", "coi-employee.get.js", "coi-supervisor.get.html.ftl", "getTaskFilter.get.json.ftl", "queryTasks.get.json.ftl", "routableGroups.get.desc.xml", "routableGroups.get.js", "routableGroups.get.json.ftl", "queryTasks.get.desc.xml", "setTaskFilter.post.js", "setTaskFilter.post.json.ftl", "setTaskFilter.post.desc.xml", "applyTaskAction.post.js", "applyTaskAction.post.json.ftl", "applyTaskAction.post.desc.xml", "getTaskFilter.get.desc.xml", "getTaskFilter.get.js", "queryTasks.get.js", "avmbrowse.get.desc.xml", "avmbrowse.get.html.ftl", "avmbrowse.get.js", "avmstores.get.desc.xml", "avmstores.get.html.ftl", "blogsearch.get.atom.400.ftl", "blogsearch.get.html.400.ftl", "blogsearch.get.desc.xml", "blogsearch.get.js", "categorysearch.get.atom.404.ftl", "blogsearch.get.html.ftl", "categorysearch.get.html.404.ftl", "categorysearch.get.js", "categorysearch.get.html.ftl", "categorysearch.get.desc.xml", "folder.get.desc.xml", "folder.get.html.ftl", "folder.get.js", "psDeptAll.get.js", "psDeptSingle.get.json.ftl", "psDeptSingle.get.js", "psPerson.get.json.ftl", "psUtil.js", "psPerson.get.js", "psAcademicDeptAll.get.desc.xml", "psAcademicDeptAll.get.json.ftl", "psAuthorizedApprover.get.desc.xml", "psDeptAll.get.json.ftl", "psAuthorizedApprover.get.js", "psAuthorizedApprover.get.json.ftl", "psDeptAll.get.desc.xml", "psDeptSingle.get.desc.xml", "psPerson.get.desc.xml", "ceeb.get.desc.xml", "ceeb.get.json.ftl", "getSlateId.get.desc.xml", "getSlateId.get.js", "materials.get.json.ftl", "materials.get.desc.xml", "getSlateId.get.json.ftl", "ceeb.get.js", "materials.get.js", "edit.get.html.ftl", "edit.get.js", "save.post.js", "save.post.json.ftl", "scans.get.desc.xml", "scans.get.js", "uploadfile.post.desc.xml", "uploadfile.post.json.ftl", "edit.get.desc.xml", "uploadfile.post.js", "scans.get.html.ftl", "save.post.desc.xml", "AFA_Main.post.desc.xml", "AFA_MainFileOnly.post.desc.xml", "AFA_MainFileOnly.post.js", "AFA_Main.post.js", "AFA_MainFileOnly.post.json.ftl", "AFA_Main.post.json.ftl", "paperFileUtil.get.desc.xml", "paperFileUtil.get.js", "paperFileUtil.get.html.ftl", "rsoprojectdetails.get.html.ftl", "rsoprojectdetails.get.js", "rsoprojectdetails.get.desc.xml", "roslateapplist.get.html.ftl", "roslateapplist.get.desc.xml", "roslateapplist.get.json.ftl", "roslateexists.get.html.ftl", "roslateexists.get.desc.xml", "roslateapplist.get.js", "roslateexists.get.js", "uofaDepartmentList.get.desc.xml", "uofaDepartmentList.get.js", "uofaDepartmentList.get.html.ftl", "uofaDepartmentName.get.desc.xml", "uofaDepartmentName.get.html.ftl", "uofaFacultyList.get.html.ftl", "uofaFacultyList.get.desc.xml", "uofaDepartmentName.get.js", "uofapersonid.get.desc.xml", "uofapersonidrest.get.html.ftl", "uofapersonidrest.get.desc.xml", "uofapersonid.get.html.ftl", "uofapersonid.get.js", "uofapersonidrest.get.js", "uappolCategoryHeirarchy.get.desc.xml", "uappolCategoryHeirarchy.get.json.ftl", "uappol-metadata-query.get.desc.xml", "uappol-metadata-query.get.js", "uappol-metadata-query.get.json.ftl", "uappolCategoryHeirarchy.get.js", "siteFileViewer.get.desc.xml", "siteFileViewerConfig.js", "siteFileViewer.get.html.ftl", "siteFileViewer.get.js", "publicSiteFileViewer.get.html.ftl", "publicSiteFileViewer.get.desc.xml", "publicSiteFileViewer.get.js", "cronJob.post.desc.xml", "cronJob.post.js", "cronJob.post.json.ftl", "studentupload.get.html.ftl", "generatereport.get.json.ftl", "generatereport.get.desc.xml", "approvethesis.post.js", "generatereport.get.js", "search-match-attach.get.js", "search-match-list.get.html.ftl", "search-match-result.get.html.ftl", "search-match-result.get.js", "search-match-list.get.js.old", "chs-agreements.get.js", "chs-agreements.get.html.ftl", "chs-upload.get.html.ftl", "chs-upload.get.js", "uamytasks.config.get.js", "chsStudentView.get.js", "chsStudentView.get.html.ftl", "foModel.xml", "uofaDocTypes.xml", "uofaDocTypes.json", "foModel.json", "tim-sops", "FandO", "cbsr", "nanofab", "support-documentation", "Alfresco.zip - 1bf054bded99e2ae414154593d0892066b2e0c7add603f9321e157c77ae52075", "https://www.virustotal.com/graph/embed/g05f1796a358b458d95751d31d1d529aa378f8ffadf0b4305b7fa0bd1c64fe228?theme=dark", "https://www.virustotal.com/gui/collection/63819e07111e9665ba8602777d782527c54f3fad71ef36f977405a004484787c/iocs", "https://viz.greynoise.io/analysis/0cd9177e-8328-4355-a2c0-d05704a64c72", "components.zip - 2b91fcf852a5f1f57be71a269d82497b37c9f544ebd8f32aaa240e4cde0ffeea", "https://www.virustotal.com/graph/embed/g2948a5c332eb4614973872a8243215f6aa1fba79749a48ea92806e9b934db91f?theme=dark", "https://viz.greynoise.io/ip/analysis/2610b635-c05a-4f28-a112-7278de8fdf9b" ], "public": 1, "adversary": "TA413 proposed (06.08.24), Callisto, APT38, APT 28/29 - too much time too many problems", "targeted_countries": [ "Canada", "United States of America" ], "malware_families": [], "attack_ids": [], "industries": [ "Education", "Government", "Healthcare", "Technology", "Telecommunications" ], "TLP": "white", "cloned_from": "6665315e25f9dd42a99e4f2f", "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 7132, "hostname": 3118, "URL": 4909, "email": 20, "FileHash-SHA256": 2144, "FileHash-MD5": 29, "FileHash-SHA1": 29 }, "indicator_count": 17381, "is_author": false, "is_subscribing": null, "subscriber_count": 66, "modified_text": "13 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68f45023af873e8d6ac165b9", "name": "UAlberta Alfresco Databreach -> EPS Crimestoppers Alberta RCMP HR Files", "description": "University of Alberta DataBreach(es) -> Alfresco HR Files (included in this Pulse) - Reported. \nCompromise of Edmonton Police Services (EPS), Alberta RCMP (AB RCMP), CrimeStoppers Alberta - All organizations notified, and provided with identified problems (e.g. criminals), offered solutions (e.g. to address compromised infrastructure). Data 'on hand' and publicly available (e.g. in this pulse). Criminal activity ramping up for 2026. Reported by multiple parties no luck, no response.", "modified": "2026-01-03T01:55:41.491000", "created": "2025-10-19T02:42:43.079000", "tags": [ "entity", "EPS", "Alfresco", "UAlberta", "EdmontonPolice" ], "references": [ "https://www.virustotal.com/graph/embed/g8b17f086c8ca45188352d1d054fa3f8948f81bddd2114ea7b99864e585604e72?theme=dark", "https://en.fofa.info/result?qbase64=ZWRtb250b25wb2xpY2UuY2E%3D", "", "https://www.virustotal.com/gui/collection/7774b0b7593e64e019df4e783911800bb322ec28a0f9eb3792fe6f75755f3b88", "https://www.virustotal.com/gui/collection/7774b0b7593e64e019df4e783911800bb322ec28a0f9eb3792fe6f75755f3b88/iocs" ], "public": 1, "adversary": "", "targeted_countries": [ "Canada" ], "malware_families": [], "attack_ids": [], "industries": [ "Government", "Education", "Telecommunications" ], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Disable_Duck", "id": "244325", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_244325/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 743, "FileHash-MD5": 75, "FileHash-SHA1": 60, "FileHash-SHA256": 1364, "domain": 688, "hostname": 763 }, "indicator_count": 3693, "is_author": false, "is_subscribing": null, "subscriber_count": 130, "modified_text": "148 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68c954a80675ccc89b0e9b63", "name": "Trump #45470 | Palantir container | virus:DOS/Hellspawn + ioS (compromised)", "description": "Overt. Trump support campaign text message from #45470. Malicious. Received on a victims hyper compromised iPhone. Attempts to or did take CnC of device. Stutters device, changed App Store , has delete service, device sweep, shuts down service , halts all pages, denial of service, throttles service, steals\npasswords, bots , I don\u2019t know if device can be refurbished or research purposes - Palantir DC DGA domains - Trump. Multiple IoC\u2019s , malware with code overlap, it appears to be from a legitimate text for updates #. Visibly affected all aspects of device and software. Commands device shut down. \n[OTX populated: Failed to retrieve suggested indicator for beta-ui, according to the latest results from the Welsh Government's Office for National Statistics (ONS) and the National Data Centre (NDS))", "modified": "2025-10-16T12:03:14.279000", "created": "2025-09-16T12:14:32.327000", "tags": [ "ttl value", "extraction", "data upload", "failed", "extra data", "include review", "exclude sugges", "stop", "line", "path", "polyline", "getprocaddress", "circle", "span", "ck id", "mitre att", "ck matrix", "null", "error", "open", "spinner", "title", "code", "iframe", "window", "void", "infinity", "crypto", "footer", "generator", "general", "format", "click", "strings", "meta", "install", "encoder", "learn", "command", "name tactics", "suspicious", "informative", "spawns", "evasion att", "t1480 execution", "file defense", "adversaries", "calls", "reads", "defense evasion", "model", "server", "registrar abuse", "ascio", "contact phone", "admin city", "admin country", "admin postal", "dnssec", "http", "ip address", "passive dns", "related nids", "urls", "files location", "united", "flag united", "a domains", "search", "unknown aaaa", "certificate", "yara detections", "av detections", "ids detections", "alerts", "entries elf", "filehash", "name servers", "servers", "moved", "script script", "aaaa", "unknown ns", "domain add", "formbook cnc", "checkin", "lowfi", "mtb jun", "github pages", "twitter", "accept", "cryptobit", "extra", "referen data", "trojanproxy", "dynamicloader", "high", "write c", "medium", "intel", "ms windows", "entries", "pe32", "explorer", "worm", "write", "next", "trojan", "hellspawn", "md5 add", "malware", "data", "included iocs", "script urls", "script domains", "gmt content", "cash amtincart", "expirestue", "domain related", "sea x", "accept encoding", "request id", "body doctype", "apache", "encrypt", "skynet", "third eye tv", "calling", "delete app", "potus", "mtb aug", "backdoor", "gmt cache", "sameorigin", "443 ma2592000", "ipv4 add", "utilads", "trojandropper", "mtb sep", "win32upatre aug", "yara rule", "as15169", "guard", "smartassembly", "associated urls", "date checked", "url hostname", "server response", "domain", "url analysis", "files", "date", "delete service", "45470", "text", "hybrid", "present sep", "body", "fastly error", "please", "xor xor", "sha256 add", "analysis date", "file score", "detections alf", "june", "delphi", "attempts", "yara", "high security", "file type", "pe packer", "ransom" ], "references": [ "skynet-dev.tcxn.net tcxn.net Registrar Ascio Technologies, Inc - connection to cloud proxy", "TrojanProxy:Win32/Malynfits CodeOverlap TrojanSpy:Win32/Nivdort CodeOverlap virus:Win32/Lywer CodeOverlap", "https://cryptobit.live/build/assets/app-CkRYqsKL.js \u2022 cryptobit.live \u2022 t.page \u2022 cdn.wallets.cryptobit.live", "Trump Support campaign \u2022_\u2022 lantana-mgmt.washington.palantircloud.com \u2022 containers-reishi.palantirfedstart.com", "Virus:DOS/Hellspawn 192.168.122.49 10/16/25\t\u2022 IPv4 142.251.9.105", "IDS Detections: Win32/Enosch.A gtalk connectivity check | W32/MoonLight.worm User-Agent (HellSpawn)", "PWS:Win32/Ymacco.AA50 Win.Trojan.Generic-9959068-0\t SLF:MSIL/PSTAnomaly.A Win.Dropper.Shakblades-7614016-0\t#LowFI:VBExpensiveLoop Win.Packed.Barys-10031677-0\tTEL:Trojan:MSIL/AgentTesla.VPA!MTB Win.Trojan. Backdoor:MSIL/Remcos!MTB", "hasownproperty.call \u2022 fireeye.grhd.", "Apple Store verified drop down breach \u2018Apple took a screenshot of pages\u201d" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America" ], "malware_families": [ { "id": "TrojanSpy:Win32/Nivdort", "display_name": "TrojanSpy:Win32/Nivdort", "target": "/malware/TrojanSpy:Win32/Nivdort" }, { "id": "TrojanProxy:Win32/Malynfits", "display_name": "TrojanProxy:Win32/Malynfits", "target": "/malware/TrojanProxy:Win32/Malynfits" }, { "id": "Virus:Win32/Lywer", "display_name": "Virus:Win32/Lywer", "target": "/malware/Virus:Win32/Lywer" }, { "id": "Worm:Win32/Lightmoon.H", "display_name": "Worm:Win32/Lightmoon.H", "target": "/malware/Worm:Win32/Lightmoon.H" }, { "id": "Virus:DOS/Hellspawn", "display_name": "Virus:DOS/Hellspawn", "target": "/malware/Virus:DOS/Hellspawn" }, { "id": "Win.Trojan.Dialer-266", "display_name": "Win.Trojan.Dialer-266", "target": null }, { "id": "AgentTesla", "display_name": "AgentTesla", "target": null }, { "id": "Backdoor:MSIL/Remcos", "display_name": "Backdoor:MSIL/Remcos", "target": "/malware/Backdoor:MSIL/Remcos" }, { "id": "ALF:JASYP:Trojan:Win32/IRCbot!atmn", "display_name": "ALF:JASYP:Trojan:Win32/IRCbot!atmn", "target": null }, { "id": "Trojandropper:Win32/Muldrop.V!MTB", "display_name": "Trojandropper:Win32/Muldrop.V!MTB", "target": "/malware/Trojandropper:Win32/Muldrop.V!MTB" }, { "id": "#LowFI:VBExpensiveLoop", "display_name": "#LowFI:VBExpensiveLoop", "target": null }, { "id": "TEL:Trojan:MSIL/AgentTesla.VPA!MTB", "display_name": "TEL:Trojan:MSIL/AgentTesla.VPA!MTB", "target": null }, { "id": "PWS:Win32/VB.CU", "display_name": "PWS:Win32/VB.CU", "target": "/malware/PWS:Win32/VB.CU" }, { "id": "ALF:Ransom:Win32/Babax.SG!MTB", "display_name": "ALF:Ransom:Win32/Babax.SG!MTB", "target": null } ], "attack_ids": [ { "id": "T1007", "name": "System Service Discovery", "display_name": "T1007 - System Service Discovery" }, { "id": "T1010", "name": "Application Window Discovery", "display_name": "T1010 - Application Window Discovery" }, { "id": "T1012", "name": "Query Registry", "display_name": "T1012 - Query Registry" }, { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" }, { "id": "T1033", "name": "System Owner/User Discovery", "display_name": "T1033 - System Owner/User Discovery" }, { "id": "T1055", "name": "Process Injection", "display_name": "T1055 - Process Injection" }, { "id": "T1057", "name": "Process Discovery", "display_name": "T1057 - Process Discovery" }, { "id": "T1059", "name": "Command and Scripting Interpreter", "display_name": "T1059 - Command and Scripting Interpreter" }, { "id": "T1071", "name": "Application Layer Protocol", "display_name": "T1071 - Application Layer Protocol" }, { "id": "T1082", "name": "System Information Discovery", "display_name": "T1082 - System Information Discovery" }, { "id": "T1083", "name": "File and Directory Discovery", "display_name": "T1083 - File and Directory Discovery" }, { "id": "T1102", "name": "Web Service", "display_name": "T1102 - Web Service" }, { "id": "T1105", "name": "Ingress Tool Transfer", "display_name": "T1105 - Ingress Tool Transfer" }, { "id": "T1106", "name": "Native API", "display_name": "T1106 - Native API" }, { "id": "T1113", "name": "Screen Capture", "display_name": "T1113 - Screen Capture" }, { "id": "T1129", "name": "Shared Modules", "display_name": "T1129 - Shared Modules" }, { "id": "T1140", "name": "Deobfuscate/Decode Files or Information", "display_name": "T1140 - Deobfuscate/Decode Files or Information" }, { "id": "T1489", "name": "Service Stop", "display_name": "T1489 - Service Stop" }, { "id": "T1546", "name": "Event Triggered Execution", "display_name": "T1546 - Event Triggered Execution" }, { "id": "T1555", "name": "Credentials from Password Stores", "display_name": "T1555 - Credentials from Password Stores" }, { "id": "T1564", "name": "Hide Artifacts", "display_name": "T1564 - Hide Artifacts" }, { "id": "T1573", "name": "Encrypted Channel", "display_name": "T1573 - Encrypted Channel" }, { "id": "T1590", "name": "Gather Victim Network Information", "display_name": "T1590 - Gather Victim Network Information" }, { "id": "T1614", "name": "System Location Discovery", "display_name": "T1614 - System Location Discovery" }, { "id": "T1480", "name": "Execution Guardrails", "display_name": "T1480 - Execution Guardrails" }, { "id": "T1056", "name": "Input Capture", "display_name": "T1056 - Input Capture" }, { "id": "T1045", "name": "Software Packing", "display_name": "T1045 - Software Packing" }, { "id": "T1060", "name": "Registry Run Keys / Startup Folder", "display_name": "T1060 - Registry Run Keys / Startup Folder" }, { "id": "T1119", "name": "Automated Collection", "display_name": "T1119 - Automated Collection" }, { "id": "T1063", "name": "Security Software Discovery", "display_name": "T1063 - Security Software Discovery" }, { "id": "T1090", "name": "Proxy", "display_name": "T1090 - Proxy" }, { "id": "T1547", "name": "Boot or Logon Autostart Execution", "display_name": "T1547 - Boot or Logon Autostart Execution" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Q.Vashti", "id": "337942", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 690, "URL": 1479, "domain": 476, "FileHash-MD5": 526, "FileHash-SHA1": 505, "FileHash-SHA256": 1509, "email": 6 }, "indicator_count": 5191, "is_author": false, "is_subscribing": null, "subscriber_count": 142, "modified_text": "226 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6665315e25f9dd42a99e4f2f", "name": "UAlberta Alfresco Management Software Abuse -> Admin/Backdoor Edmonton Police Services", "description": "Just pulled down what was in my employee profile (I don't work there).\nDiscovered after being directed to some management system (unknown at the time).\nPulled down and scanned: 1bf054bded99e2ae414154593d0892066b2e0c7add603f9321e157c77ae52075", "modified": "2025-10-10T19:03:58.376000", "created": "2024-06-09T04:36:46.536000", "tags": [ "note", "home", "lucene paths", "json descriptor", "lucene path", "company home", "actividades", "pageuser", "sie knnen", "sie auf", "link klicken", "recente", "u kunt", "attivit", "possibile", "activits", "vous", "report", "web link", "cvs report", "link", "chs placement", "chs student", "placement", "team", "google form", "university", "alberta", "automation", "please", "following", "followers", "ihnen", "mitarbeitern", "mitarbeiter", "hello", "foreign visitor", "fvca", "human resource", "fvca assessment", "incomplete", "regards", "klik", "wachtwoord", "mijn profiel", "klik op", "hoogachtend", "alfresco", "bonjour", "cliquez sur", "nous", "pour ce", "mon profil", "changer", "invito", "caro", "fare", "password", "il mio", "cambia password", "per rifiutare", "cordiali saluti", "my profile", "change password", "konto", "sie erstellt", "passwort", "wir legen", "ihnen nahe", "passwort bei", "anmeldung zu", "ndern", "gehen sie", "mmm yyyy", "nome utente", "nombre", "contrasea", "para hacerlo", "mi perfil", "atentamente", "account", "alfresco share", "hola", "haga", "los datos", "y seleccione", "si desea", "click", "einladung von", "hallo", "sie eingeladen", "site", "klicken sie", "konto fr", "alfresco client", "kofax index", "inhaltselement", "zur site", "gren alfresco", "pledged gift", "office", "advancement", "datetime", "university vpn", "date", "shared", "support", "auxiliary", "process", "priority", "medium high", "pay action", "sincerely", "uofa ecm", "link um", "aufgaben stehen", "verfgung", "prioritt", "niedrig mittel", "hoch", "klicken", "aufgabe zu", "il seguente", "disponibile", "priorit", "bassa media", "alta", "clicca", "clicca su", "la tche", "tre rcupre", "basse moyenne", "leve", "cliquez", "cordialement", "prioriteit", "laag gemiddeld", "hoog", "la siguiente", "prioridad", "media alta", "saludos", "kb content", "links content", "content url", "download url", "webdav url", "ttulo", "descripcin", "ninguno", "ninguna", "creador", "creado", "modificador", "modificado", "tamao", "webdav", "titre", "aucun", "aucune", "modificateur", "modifi", "taille", "ko liens", "du contenu", "dossier du", "url webdav", "titolo", "nessuno", "nessuna", "creato", "modificato", "dimensioni", "kb link", "al contenuto", "cartella", "ingen", "beskrivelse", "tittel", "opprettet", "modifikator", "modifisert", "strrelse", "lenker for", "innhold mappe", "descrio", "nome", "nenhum", "nenhuma", "criador", "criado", "tamanho", "geen", "beschrijving", "titel", "maker", "gemaakt", "gewijzigd", "grootte", "contenturl", "downloadurl", "beschreibung", "url zum", "keiner", "keine", "ersteller", "erstellt", "bearbeiter", "gendert", "kb links", "download", "navigatebrowse", "pagesite", "readme file", "yesno", "user name", "main", "function", "log debug", "record", "sample rm", "import", "njson", "forms", "sites", "documenttype", "commonfolder", "error", "value", "jsonfile", "service", "false", "moving", "prop", "null", "bearer", "uappol", "uappol function", "contentid", "param", "id var", "call", "post request", "json", "config", "coveo", "uappol metadata", "content id", "and not", "loads", "update", "uploader", "inbox", "rnrn", "create", "contenteml", "inbox folder", "number", "normal", "textpart", "backup", "createchildren", "backupname", "childlist", "name", "content", "array", "write", "childname2", "childname3", "childname4", "reviewgroup", "groupsite", "starting", "started", "delete email", "command", "found", "create content", "resources", "unknown command", "globals", "var title", "rnrncopyright", "copyright", "csvtoarray", "regexp", "jsonstr", "daily", "review", "az09", "format", "hrsfilescanner", "hrs document", "fromscanner", "not type", "matches1", "employee id", "third", "tempfilename", "ldap", "version", "this", "file share", "folder", "trimlr", "namearr", "personid", "document name", "ales file", "scanned", "shared drive", "last", "document type", "document", "advising notes", "debug", "debugstr", "schedule", "descriptorpath", "web service", "inbound rule", "web services", "collaborator", "groupeveryone", "check", "index", "taskassignee", "taskenddate", "filename", "localisotime", "startdatetime", "timeperiod", "uofa edrms", "author", "descommonnode", "nomatch", "iddocumenttype", "siteid", "span", "path", "term", "core", "cap report", "template", "object", "cap mail", "dev testing", "application", "aps status", "cap generate", "monthly report", "extension", "alfresco locale", "september", "pm mdt", "school", "didx", "json response", "cap final", "rebcapiddict", "finalcapiddict", "aps process", "trigger", "chsdocument", "message", "func", "msgstr", "emailobj", "emailtemplate", "emailsubject", "sitepath", "chs docs", "studentfiles", "faculty", "true", "chssiteid", "type", "aspect", "chsdocs", "nodeidx", "find", "expired", "chs school", "defunc", "facultykey", "program", "spasite", "ldapperson", "parent name", "securitytype", "formsengg", "limit", "enggfilescanner", "stuccid", "csv file", "studdept", "supccid", "supdept", "cosupccid", "relocation", "fgsr", "records site", "fgsr doc", "department", "start fgsr", "department doc", "completion of", "oral hlth", "form", "application for", "report of", "admission", "master", "music", "unknown", "comp", "class", "leave", "supervisor", "currentline", "return", "studentid", "superccid", "revdate", "code", "apstaskproperty", "converttocsv", "aps guideline", "aps task", "newdata", "hyperlink", "certificate", "first", "info", "procid", "filecontentstr", "query sort", "create header", "person id", "subject title", "node", "studentccid", "yyyymmdd", "lookupjson", "propidx", "input date", "iso format", "folder level", "query", "duedate", "test java", "dailyschedule", "upload", "ro adm", "workflow", "offset", "adm workflow", "data length", "startindex", "json object", "aps group", "acs site", "user", "getgroupid", "am mst", "acsaps group", "user sync", "january", "start january", "february", "start february", "december", "start december", "march", "start march", "am mdt", "consumer march", "aps student", "april", "start april", "june", "start june", "pm mst", "ro backscan", "edrmsteam", "group", "group december", "aps ro", "copy file", "aps api", "maxfile", "creator", "rand", "hrsbs", "july", "august", "hrsbssyncccids", "zhrroleuserresp", "edrms", "ccids", "prefix", "createdirectory", "directory", "actionreason", "safefilename", "employeeclass", "carry", "csv data", "host", "bachelor", "college level", "mike", "propname", "maxitems", "currjson", "fvca status", "important", "prod", "manual data", "doctoratephd", "medicine", "nodename", "employeeccid", "managerccid", "employeeid", "workingtitle", "regtempdescr", "findkey", "email", "new document", "doctypelabel", "competitive bid", "bid exception", "pcm competitive", "and aspect", "competitive", "nodes", "bid update", "acommonfolder", "formspcm", "peoplesoft", "no data", "qaselectednode", "qaselected", "qanotselected", "qa folder", "preqa", "qa var", "documentcount", "passcount", "qadocument", "qa selected", "moved", "attempts", "accepted", "rm file", "plan", "rm filing", "min to", "rm system", "batch", "time limit", "rmcfg", "string", "already", "load", "valid", "graddate", "uathdep", "ccid", "title", "abstract", "embargo", "datestr", "searchresult", "alfresco afa", "admissions", "student case", "files", "and type", "institution", "inst", "json config", "institution not", "if file", "logger", "needle", "xmlstr", "staus", "document linkn", "getlogfile", "documentlist", "xml field", "not found", "addaspect", "move aspect", "duplicate file", "makes", "to max", "checks", "workflow name", "workflow link", "emplid", "due daten", "total afa", "not path", "afabundling", "change", "not aspect", "logs", "ephesoft", "document moved", "epehsoft", "xmlsourcenode", "batchsize", "filemappingpdf", "entry", "move file", "getcsvfile", "batchprocess", "logging", "completed", "document link", "groupn", "created date", "stdapl", "person", "workflow desc", "json file", "list", "lastmonth", "daily qa", "default", "qastartdate", "query language", "finished", "afa bundle", "transcriptarr", "lucene query", "qacounter", "rrfgroupname", "uaroemplid", "uaropriority", "uaroduedate", "documentlistarr", "uarmm", "profile", "courseauditform", "status", "jile", "searchmatchmove", "logfoldername", "backscanreview", "smfstr", "rosm", "converter", "shortxml", "failedcsvfolder", "xml file", "qaoperatorindex", "qaoperatorlabel", "script", "suresh", "aws promotion", "file", "tasks", "bundlingprop", "tasktype", "grps2", "uarotasktype", "comments", "test", "ro scripts", "xmlnode", "shortdescr", "xmlcont", "firstname", "orgid", "middlename", "lastname", "middle", "final", "script started", "to now", "received date", "first name", "receiveddatestr", "dateofbirthstr", "getdefination", "2005 aug", "dropbox", "foldercreate", "scan doc", "officiality", "search match", "running script", "materialextid", "studentref", "ceeb", "materialcode", "memo", "jsoncontent", "ro document", "paperfileutils", "afaconfig", "ro workflow", "paperfileconfig", "applicationjson", "formsrso", "targetfile", "property name", "pinames today", "addp", "science addp", "addp move", "ro code", "scifilescanner", "desconfnode", "grabnodeprop", "copy", "consumer", "initiators", "hiring", "consigno", "offer letter", "match", "apsmaster", "match2", "reappointment", "expiry date", "today", "finaldate", "task info", "psperson", "complete basic", "hiring info", "employee", "resultdata", "delegategroup", "delegate group", "verify", "bind", "aps appointment", "trevor report", "sfsussl", "drawdown", "refund", "reporttype", "var document", "shareurl", "newgroup", "parentgrp", "group created", "var logfile", "rule folder", "site running", "report on", "get site", "foldername", "create file", "reportlogslogs", "reportlogs", "ist site", "running report", "count", "tran", "var csvfile", "result length", "processid", "process id", "delimiters", "quoted", "standard", "starting name", "morechildren", "pdf var", "length", "newname", "fiscal", "docnamearr", "filenode", "calendar year", "versionhistory", "new doc", "web deployed", "var startdate", "startdate", "maxcount", "prevmonth", "monthcount", "application id", "delete", "get path", "if node", "search length", "arra y", "if csv", "version history", "graduate", "graduate folder", "children", "graduate file", "searchmatchdob", "career", "appl nbr", "jan04 now", "counter", "thesis", "runyear", "spring", "service log", "everything", "this determine", "thesis deposit", "archival", "problem", "filepath", "md import", "arraytocsv", "found document", "start", "food", "yumna", "start kofax", "kofax", "admin", "subject", "sample email", "execute", "koafx", "apasresponseid", "merge", "recruitment", "transcripts", "review request", "admindate", "requesteddate", "approveddate", "approvereject", "getemailbody", "taskid", "sendemail", "request status", "siteconsumer", "sitemanager", "eval", "acshost", "global env", "config file", "apsprod", "params", "alloc", "checkpath", "newpath", "adding entity", "surnamechar", "adding person", "jsonfunction", "text", "syntaxerror", "arraytoxml", "xml related", "change xml", "xmltoarray", "xmlutil", "common folder", "random2digit", "maxlimit", "jsonarchive", "very", "returns", "sitecontext", "arrcounter", "node id", "items", "array length", "therecord", "award sponsor", "rso project", "res0012345", "iso88591", "util function", "project id", "proposal id", "doc name", "newdocname", "prod url", "199899", "property", "typeprop", "barcode", "accepts", "parent", "xmlfilename", "siteconfigjson", "qabatchgrp", "signeddate", "ephdocumenttype", "json document", "qapercentage", "entity", "broker", "add error", "getexecutetime", "qaoperator", "retain title", "idnumber", "assocname", "metaarr", "fund report", "csvcontent", "input folder", "doc00c200004txg", "xmlfile", "node1", "node2", "540am", "240pm", "metadata", "var folder", "filter", "mappedobj", "09azaz", "conditionval", "foldercondition", "file name", "xmlfileobj", "alfresco prop", "setup error", "formatjson", "id property", "move", "getrandomnumber", "result", "newdoctype", "no title", "clioacs update", "clio", "patch", "system overview", "system", "overview", "purpose", "aims", "objectives", "prerequisites", "total", "expected effort", "domain", "urls", "dept param", "department name", "done", "submit form", "saving", "label", "input", "approvers", "information", "user group", "request", "group request", "users", "single family", "edmonton ab", "coverage", "common law", "step workflow", "care", "dental benefits", "direct", "web scripts", "get http", "documentation", "web script", "http method", "http", "apis", "development", "knowledge", "java", "empty argument", "e1234", "im system", "lookupentity", "configfilename", "namespace", "searchterm", "access", "jsonuser", "alfresco search", "page search", "expires", "signer", "reason", "utf8", "stripcharacter", "pull hiring", "getapsdbid", "save", "processsetidset", "saved", "returndata", "boolean", "start building", "varname", "fill", "time click", "initiated all", "submissions", "all submissions", "process landing", "page", "initiators all", "maps initiated", "post doc", "student term", "start form", "middle name", "email address", "retype", "cell", "phone no", "fellow", "secureorigin", "expand", "thank", "here", "please check", "aps list", "pang", "subset", "display", "args", "task", "username", "save form", "data need", "cdkey", "checkdict", "item", "column", "anchor", "multi", "tasks filter", "search", "trigger aps", "process api", "apsprocess", "authentication", "webscript", "getapsperson", "process info", "initsavestatus", "step0statusfail", "signer1", "signer2", "appointment", "taskjson", "groupapiaccess", "checkapiuser", "fgsrpr", "psaudit", "statusname", "unsuccessful1", "apptreappt", "emplobject", "caps aps", "cap epsb", "applicant", "form submitted", "board review", "form applicant", "school district", "start date", "cap application", "home help", "pdfa format", "larger", "upload file", "please click", "uofacap", "applications", "jstr", "processjson", "invalid url", "associate dean", "edmonton public", "october", "elk island", "reutrn false", "mapdoctypeurl", "doctype", "cap document", "doctypes", "doctypemap", "schools", "public schools", "foip", "edmonton area", "epsb", "capid", "server", "aps user", "groupcapadmin", "assignuser", "cap ea", "successfully", "please wait", "successfully ea", "apsservice", "apsserviceprod", "requireddate", "bibliography", "reb approval", "letter", "cprbls", "ahsrespect", "ahscon", "immformdocs", "picvsc", "whmis", "condissi", "hspnet", "conphoto", "conclin", "college", "health", "submission date", "effective date", "expiration date", "chs admin", "student view", "typekey", "placementdocs", "warning", "jobj", "abraniuk", "wendy", "terry harris", "directorhrsbs", "level", "holiday pay", "part time", "payroll", "salariedreg aux", "cheat", "paramname", "getallurlparams", "hrsbs config", "data dictionary", "field", "responsejson", "workflowid", "workflow id", "context", "event", "statusevent", "uaesign", "success", "permission", "progress report", "postdoctoral", "sorry", "deptjson", "fgsr student", "process status", "select", "currentuser", "reports", "student ccid", "populated", "invalid student", "supervisor ccid", "co supervisor", "due date", "freedom", "report process", "fgsr forms", "list fgsr", "report fgsr", "report sorry", "review process", "fgsr supervisor", "thesis programs", "programs", "please enter", "student id", "submit button", "var taskid", "var currentuser", "review sorry", "raheel", "added", "urlorigin", "need", "raheel var", "elmid", "commentkeyarr", "override", "menu", "colour bar", "mdphd", "absence", "completion", "mbameng", "mbamsc", "meng", "jason", "acs property", "available", "subdoctype", "test person", "test effective", "modelnodepath", "sitename", "metadatamap", "sitefile", "google addon", "gtagra", "gta gra", "zhreformengresp", "id otherwise", "university home", "indicate", "monday", "tuesday", "wednesday", "thursday", "friday", "na note", "services", "please contact", "documentname", "time", "docs", "documentlink", "employee ccid", "conflict", "task assigned", "ist coi", "declaration", "jsonobj3", "parse", "stringify", "grouplist", "json post", "taskfilter", "applies", "assigntogroup", "retrieves", "assignee", "queries", "expects", "uri args", "json containing", "applyfilter", "assignment", "avm folder", "avm store", "store id", "fullpath", "store", "storeid", "avm stores", "search term", "blog query", "category", "api call", "returns json", "cached data", "keylabel", "rest", "ldap query", "resultstr", "jsonoutput", "campusid", "jsonobj", "suresh joshee", "raheel bhojani", "desrochers", "first check", "set message", "materialkey", "acommonfolderid", "hasaccess", "siteconfig", "unprocesseddata", "savemetadata", "getcustomscript", "sitetitle", "error occured", "afa admission", "afas", "change log", "date name", "description", "ebeaton script", "tfrith", "afa main", "runasuser", "afas name", "afa paper", "file test", "utility enter", "does", "student", "bad query", "parameters", "add all", "or condition", "batch ids", "case files", "batchid", "afns", "agricultural", "anaesthes", "life", "environmental", "anaesthesiology", "uappol content", "deanaheed", "programyear", "province", "agreementtype", "safety manual", "mtis", "cree", "blackfoot", "nakota sioux", "iroquois", "dene", "treaties", "first nations", "next", "refresh", "site viewer", "facetkey", "sortparameter", "textjavascript", "public site", "viewer access", "acs cron", "job error", "alfrescos", "unauthorized", "enter", "bear tracks", "main department", "choose", "library", "john", "reviewer", "embargodate", "actiondate", "convocation", "graduation", "nodeid", "thesis status", "match result", "match list", "name dob", "view", "searchcriteria", "main function", "method", "chs upload", "stuln", "filetype", "stuid", "chs agreement", "health sciences", "recreation fomd", "dentistry fomd", "fomd", "therapy fomd", "consent for", "disclosure of", "alberta freedom", "protection", "privacy act", "alberta health", "chs form", "intake", "tasks dashlet", "doccd", "val2", "a my", "view error", "view warning", "keyword search", "refresh list" ], "references": [ "old-AlfrescoToolkit.conf", "AlfrescoToolkit.info", "AlfrescoToolkit.conf", "activities-email_es.ftl", "activities-email_ja.ftl", "activities-email_de.ftl", "activities-email_nl.ftl", "activities-email.ftl", "activities-email_it.ftl", "activities-email_fr.ftl", "CAP-notify-monthly-report.ftl", "chs-commentUpdate.ftl", "chs-studentUploadNotification.ftl", "chs-Invalid.ftl", "chs-studentExpireSoon.ftl", "chs-studentExpired.ftl", "following-email.html_it.ftl", "following-email.html_fr.ftl", "following-email.html_ja.ftl", "following-email.html_nl.ftl", "following-email_de.html.ftl", "following-email_fr.html.ftl", "following-email_ja.html.ftl", "following-email_it.html.ftl", "following-email_nl.html.ftl", "following-email.html.ftl", "following-email.html_de.ftl", "fvca-reminder-email.ftl", "fvca-corrections-email.ftl", "invite-email_nl.html.ftl", "invite-email-add-direct.html.ftl", "invite-email-add-direct.html_fr.ftl", "invite-email_fr.html.ftl", "invite-email_it.html.ftl", "invite-email-add-direct.html_es.ftl", "invite-email-add-direct.html_de.ftl", "invite-email_ja.html.ftl", "invite-email-add-direct.html_nl.ftl", "new-user-email.html.ftl", "new-user-email_de.html.ftl", "invite-email-add-direct.html_ja.ftl", "invite-email-moderated.html.ftl", "new-user-email_fr.html.ftl", "new-user-email_it.html.ftl", "new-user-email_ja.html.ftl", "new-user-email_es.html.ftl", "new-user-email_nl.html.ftl", "invite-email-add-direct.html_it.ftl", "new-user-email_nl.html", "invite-email.html_nl.ftl", "invite-email.ftl", "invite-email_es.html.ftl", "invite-email.html.ftl", "invite-email_de.html.ftl", "invite_user_email.ftl", "kofaxFailedEmailTemplate.ftl", "notify_user_email.ftl", "notify_nl.htm", "notify_user_email_es.html.ftl", "notify_user_email_de.html.ftl", "notify_user_email_ooa_failed.ftl", "notify_user_email.html.ftl", "notify_user_email_it.html.ftl", "notify_user_email_e-transcript_failed.ftl", "notify_user_email_ja.html.ftl", "notify_user_email_fr.html.ftl", "notify_user_email_nl.html.ftl", "OOA-notify-email-template.ftl", "ADV-notify-terms-types.ftl", "appt-final-reminder.ftl", "appt-halfway-reminder.ftl", "sfs-wf-email.html.ftl", "sfs-wf-completed-email.html.ftl", "payActionDecision.html.ftl", "departmentAdhocTask.html.ftl", "wf-email.html_de.ftl", "wf-email.html.ftl", "wf-email_it.html.ftl", "wf-email_fr.html.ftl", "wf-email_nl.html.ftl", "wf-email_ja.html.ftl", "wf-email.html_fr.ftl", "wf-email.html_nl.ftl", "wf-email_es.html.ftl", "wf-email.html_ja.ftl", "wf-email.html_it.ftl", "wf-email_de.html.ftl", "wf-email.html_es.ftl", "emailbody_textplain_alfresco.ftl", "emailbody_textplain_alfresco_es.ftl", "emailbody_textplain_alfresco_fr.ftl", "emailbody_textplain_alfresco_it.ftl", "emailbody_textplain_alfresco_ja.ftl", "emailbody_textplain_alfresco_nb.ftl", "emailbody_textplain_alfresco_pt_BR.ftl", "emailbody_textplain_alfresco_nl.ftl", "emailbody_textplain_alfresco_ru.ftl", "emailbody_textplain_alfresco_zh_CN.ftl", "emailbody_textplain_share.ftl", "emailbody_textplain_share_de.ftl", "emailbody_textplain_share_es.ftl", "emailbody_textplain_share_it.ftl", "emailbody_textplain_share_ja.ftl", "emailbody_textplain_share_nb.ftl", "emailbody_textplain_share_nl.ftl", "emailbody_textplain_share_ru.ftl", "emailbody-alfresco-textplain.ftl", "emailbody-share-textplain.ftl", "emailbody_textplain_alfresco_de.ftl", "emailbody_textplain_share_zh_CN.ftl", "emailbody_textplain_share_fr.ftl", "emailbody_textplain_share_pt_BR.ftl", "uofa-pc-model.xml", "uofa-pllc-model.xml", "uofa-science-model.xml", "uofa-rso-model.xml", "uofa-set-model.xml", "uofa-sfs-model.xml", "uofa-slate-model.xml", "uofa-uappol-model.xml", "advext-model.xml", "assocModel.xml", "adv-model.xml", "cbsr-model.xml", "dynamicSecurityMarksModel", "ephesoft-educational.xml", "facopr-model.xml", "fgsr-model.xml", "faculty-model.xml", "psAudit-model.xml", "FVCA.xml", "roDocProcessing-model.xml", "ro-model.xml", "fgsr-thesis-deposit.xml", "security-group-model.xml", "ua-audit-generic-model.xml", "ua-dummy.xml", "calendar-year-model.xml", "ua-error-model.xml", "uafgsrsup-model.xml", "uaqa-model.xml", "transcript-model.xml", "uAlbertaWorkflowGeneral.xml", "uarmm-supplement-scanning.xml", "uarm-rma-filing-model.xml", "ua-search-model.xml", "ro-search-match.xml", "uatraining.xml", "uofa-ales-model.xml", "uofa-arts-model.xml", "uofa-aps-model.xml", "uofa-base-model.xml", "uawfh-model.xml", "uofa-augustana-model.xml", "uofa-business-model.xml", "uarmTempModel.xml", "uofa-cap-model.xml", "uofa-chs-model.xml", "uofa-chs-agreements-model.xml", "uofa-common-model.xml", "uofa-education-model.xml", "tamis-model.xml", "uofa-engg-coop-model.xml", "uofa-engg-model.xml", "uofa-fo-model.xml", "uofa-extension-model.xml", "uofa-esign-model.xml", "uofa-hrsbs-model.xml", "uofa-law-model.xml", "uofa-caps-model.xml", "uofa-hrs-model.xml", "uofa-native-studies-model.xml", "uofa-pllc-model.json", "uofa-rso-model.json", "uofa-pc-model.json", "uofa-native-studies-model.json", "uofa-slate-model.json", "uofa-uappol-model.json", "uofa-science-model.json", "uofa-workflowGeneral.json", "uofa-sfs-model.json", "adv-model.json", "advext-model.json", "assocModel.json", "calendar-year-model.json", "facopr-model.json", "cbsr-model.json", "ephesoft-educational.json", "faculty-model.json", "faculty-model.xml.json", "rma-model.json", "fgsr-model.json", "FVCA.json", "psAudit-model.json", "ro-aug-model.json", "ro-search-match.json", "tamis-model.json", "security-group-model.json", "fgsr-thesis-deposit.json", "transcript-model.json", "ro-model.json", "ua-audit-generic-model.json", "uafgsrsup-model.json", "uaqa-model.json", "uarmm-supplement-scanning.json", "uAlbertaWorkflowGeneral.json", "ua-error-model.json", "uofa-ales-model.json", "ua-search-model.json", "uarmTempModel.json", "uofa-aps-model.json", "uawfh-model.json", "uofa-arts-model.json", "uofa-cap-model.json", "uofa-chs-agreements-model.json", "uofa-augustana-model.json", "uofa-base-model.json", "uofa-chs-model.json", "uofa-engg-coop-model.json", "uofa-common-model.json", "uofa-engg-model.json", "uofa-extension-model.json", "uofa-hrsbs-model.json", "uofa-fo-model.json", "uofa-education-model.json", "uofa-law-model.json", "uofa-hrs-model.json", "uofa-esign-model.json", "uofa-business-model.json", "faculty-of-science-site.json", "FandO-Organizations.json", "FandO-Programs.json", "fgsr-awards.json", "fgsr-category-list.json", "fgsr-exam-list.json", "fgsr-official-list.json", "fgsr-programOfStudy.json", "fgsr-site.json", "fo-emergency-response-manual.json", "graduate-student-records-site.json", "fo-site.json", "fo-utilities.json", "hrs-benefits.json", "hrsbs-action-reasons.json", "graduate-student-records-v2-site.json", "hrsbs-doc-list.json", "hrsbs-file-structure.json", "hrsbs-owner-details.json", "hrsbs-functionalroles.json", "hrsbs-function-module.json", "hrsbs-review-month.json", "hrsbs-security-class.json", "hrsbs-site.json", "hrs-employeeApprovedDeductions.json", "hrs-bulkId.json", "hrsbs-review-cycle.json", "hrs-employmentFinancial.json", "hrs-personalInformation.json", "hrs-pension.json", "hrs-security-list.json", "hrs-leaves.json", "Institutions.json", "ist-site.json", "hrs-site.json", "my-site-site.json", "law-security-list.json", "native-studies-doc-list.json", "fgsr-credential-list.json", "law-doc-list.json", "native-studies-security-list.json", "office-of-advancement-record-types.json", "office-of-advancement-site.json", "pcm-category.json", "pllc-doc-list.json", "ro-academic-pre-pro-programs.json", "pllc-security-list.json", "ro-acad-group.json", "ro-admitType.json", "ro-applicant-type.json", "ro-campusSolutionsTerm.json", "hrsbs-employee-class.json", "pllc-site.json", "ro-indigenous-type.json", "ro-doctypes.json", "pcm-site.json", "ro-official.json", "ro-org-desc.json", "ro-related-record-types.json", "ro-relationship-to-institution.json", "ro-search-match-status.json", "ro-authenticity.json", "ro-slate-folio-material-non-school-scope.json", "ro-slate-institution-material.json", "ro-slate-folio-material-school-scope.json", "ro-method-receipt.json", "ro-slate-institutions.json", "ro-test-id.json", "rso-accounts-receivable-accounts-payable-doc-type.json", "rso-agreements-doc-category.json", "rso-bulk-scan-doc-type.json", "rso-cfi-purchasing-doc-type.json", "rso-cfi-financials-doc-type.json", "rso-financial-reconciliation-doc-type.json", "rso-financial-reporting-doc-type.json", "rso-financials-doc-type.json", "rso-mask.json", "rso-site.json", "rso-sponsor-names.json", "science-doc-list.json", "science-security-list.json", "school-of-business-site.json", "sfs-ussl-report-status.json", "staff-training-site.json", "student-financial-services-doc-list.json", "student-financial-services-site.json", "student-records-bulk-load-testing-site.json", "student-records-training-site.json", "student-records-site.json", "student-transcripts-site.json", "rso-forms-form-type.json", "support-documentation-site.json", "test-site-site.json", "uappol-category-heirarchy.json", "uappol-type.json", "uappol-site.json", "uoda-faculties.json", "academic-department.json", "adv-correspondence-type.json", "uoda-departments.json", "advsearch.json", "ales-security-list.json", "ales-doc-list.json", "arts-doc-list.json", "arts-security-list.json", "augustana-security-list.json", "augustana-site.json", "augustana-legacy-transcript-doc-list.json", "rso-activation-report-doc-type.json", "business-doc-list.json", "business-security-list.json", "bulkload-testing-site.json", "cap-site.json", "caps-school-board-list.json", "cbsrsite-site.json", "cbsrsite-sopTypes.json", "cbsr-study.json", "cbsr-worksheetType.json", "augustana-doc-list.json", "chs-ag-type.json", "chs-agreements-site.json", "chs-campus-list.json", "chs-degProgram-list.json", "chs-emailNotification.json", "chs-document-status.json", "chs-faculty-list.json", "chs-programYear-list.json", "chs-program-list.json", "canada-provinces-list.json", "demo-site-site.json", "education-doc-list.json", "department.json", "education-security-list.json", "chs-stuEmailNotification.json", "college-of-health-sciences-site.json", "chs-provinces-list.json", "engineering-coop-doc-list.json", "engineering-coop-security-list.json", "engineering-co-op-site.json", "engineering-doc-list.json", "extension-doc-list.json", "extension-security-list.json", "facopr-planTypes.json", "facopr-supportinDocField.json", "faculty-of-ales-site.json", "engineering-security-list.json", "faculty-of-education-site.json", "faculty-of-extension-site.json", "faculty-of-native-studies-site.json", "faculty-of-law-site.json", "faculty-of-arts-site.json", "faculty-of-engineering-site.json", "my_docs_inline.ftl", "my_docs.ftl", "my_spaces.ftl", "recent_docs.ftl", "translatable.ftl", "readme.ftl", "show_audit.ftl", "general_example.ftl", "my_summary.ftl", "doc_info.ftl", "localizable.ftl", "recordsCustomModel.xml", "imapConfig.json", "rm_event_config.json", "rmScriptThrowError.js", "report_rmr_transferReport.html.ftl", "report_rmr_destructionReport.html.ftl", "report_rmr_holdReport.html.ftl", "notify-records-due-for-review-email.ftl", "record-rejected-email.ftl", "record-superseded-email.ftl", "onCreate_supersedes.js", "rma_isClosed.js", "PaperFileconfig.json", "MyTasks-config.json", "AFAconfig.json", "roDocumentTypes.json", "uappol-upload-rule.js", "uappolCreateFolderRule.js", "uappolCreateFolder.js", "uappol-api.js", "uappol-functions.js", "command-utils.js", "backup and log.js", "backup.js", "example test script.js", "test return value.js", "start-pooled-review-workflow.js", "command-processor.js", "command-search.js", "alfresco docs.js", "append copyright.js", "createDepartmentJSON.js", "hrsDaily.js", "hrsFolderCreateSchedule.js", "hrsScanned.js", "hrsCreateFolder.js", "hrsFolderCreateRule.js", "hrsFileShareFolder.js", "alesCreateFolderRestricted.js", "alesCreateFolderSchedule.js", "alesBulkShareFolder.js", "alesFileScanned.js", "alesCreateFolder.js", "alesDaily.js", "alesFileShareFolder.js", "alesCreateFolderConfidential.js", "alesCreateAdvisingNotes.js", "alesFolderCreateSchedule.js", "deployWebServiceDescriptor.js", "taskReportCSV-Appointment-prod.js", "artsFileScanned.js", "artsCreateFolderRule.js", "artsCreateFolder.js", "artsCreateFolderRestricted.js", "augCreateFolderRestricted.js", "augCreateFolder.js", "businessCreateFolderRule.js", "businessCreateFolder.js", "businessCreateFolderSchedule.js", "businessBulkShareFolder.js", "businessFileShareFolder.js", "businessCreateFolderRestricted.js", "businessDaily.js", "businessCreateAdvisingNotes.js", "businessFileScanned.js", "CAPSendMonthlyReportEmail.js", "CAPGenerateMonthlyReport.js", "CapFinalReportSubmit.js", "chsCreateFolderRule.js", "chsEmailOnUpdateComment.js", "chsReport.js", "EmailNotifCHSStudent.js", "SetExpiryDate.js", "chsCreateFolder.js", "chsFacultyReport.js", "chsAgreementCreateFolderRule.js", "chsAgreementCreateFolder.js", "scheduleJobTest.js", "every52MinPastHour.js", "every46MinPastHourBetween4PM12PM.js", "every57MinPastHour.js", "every47MinPastHourBetween4PM12PM.js", "everyDay4H30MinAM.js", "everyDay7H45MinAM.js", "every10MinStartingAt5MinPastHour.js", "every38MinPastHourBetween4PM12PM.js", "every20MinStartingAt15MinPastHour.js", "everyDay2H05MinAM.js", "every2MinStartingAt1MinPastHour.js", "everyDay1H05MinAM.js", "everyDay12H30MinAM.js", "everyDay7H30MinPM.js", "every30MinStartingAt19MinPastHour.js", "every30MinStartingAt11MinPastHour.js", "everyDay2H35MinAM.js", "every30MinStartingAt26MinPastHour.js", "every16MinPastHour.js", "everyDay1H45MinAM.js", "everyDay2H45MinAM.js", "every29MinPastHour.js", "every22MinPastHour.js", "everyDay11H30MinPM.js", "educationCreateFolderRule.js", "educationCreateFolder.js", "educationCreateAdvisingNotes.js", "enggCoopCreateFolderRestricted.js", "enggCoopCreateFolderRule.js", "enggCoopBulkUpload.js", "enggCreateFolderRule.js", "enggCreateFolderRestricted.js", "enggCreateFolder.js", "engineeringCreateAdvisingNotes.js", "enggCoopCreateFolder.js", "enggFileScanned.js", "enggCoopFileScanned.js", "extensionFileScanned.js", "extensionCreateFolder.js", "extensionCreateFolderRule.js", "fgsrCreateGuidelineAPSProcessFromCSV.js", "fgsrDocRestructure.js", "fgsrMigrationScript.js", "fgsrDocRelocation.js", "fgsrCreateFolderFromCSV.js", "guideline-reports.js", "fgsrMigrationScript-withTerminationLogic.js", "modfiyOrUpdatePropertyfromCSV.js", "fgsr-case-file-report.js", "fgsrCreateAPSProcessFromFolder.js", "fgsrCreateFolder.js", "fgsrCopyMetadataToFolderLevel.js", "fgsrCreateAPSProcessFromCSV.js", "foCreateFolder.js", "foCreateFolderRule.js", "Script1.js", "Script2.js", "scheduleRunEvery2-10PM.js", "scheduleRunEvery5PMTo10PM.js", "scheduleRunEvery30Minutes.js", "scheduleRunEvery60Minutes.js", "scheduleRunEveryday3PMto11PM.js", "scheduleRunEveryday12AMto6AM.js", "scheduleRunEvery20Minutes.js", "scheduleRunEvery2AM.js", "acsToApsUserUpdate.js", "2024-01-13-log.txt", "2024-01-15-log.txt", "2024-01-20-log.txt", "2024-01-21-log.txt", "2024-01-22-log.txt", "2024-01-23-log.txt", "2024-02-04-log.txt", "2024-02-05-log.txt", "2024-02-06-log.txt", "2024-02-07-log.txt", "2024-02-08-log.txt", "2024-01-14-log.txt", "2024-01-18-log.txt", "2024-01-11-log.txt", "2024-01-16-log.txt", "2024-01-19-log.txt", "2024-01-26-log.txt", "2024-01-28-log.txt", "2024-01-30-log.txt", "2024-01-12-log.txt", "2024-01-29-log.txt", "2024-01-27-log.txt", "2024-01-31-log.txt", "2024-01-24-log.txt", "2024-02-09-log.txt", "2024-02-02-log.txt", "2024-01-09-log.txt", "2024-02-03-log.txt", "2024-01-05-log.txt", "2024-01-06-log.txt", "2024-01-04-log.txt", "2024-02-01-log.txt", "2024-01-07-log.txt", "2024-01-08-log.txt", "2024-02-10-log.txt", "2024-02-11-log.txt", "2024-02-12-log.txt", "2024-02-13-log.txt", "2023-12-31-log.txt", "2024-02-15-log.txt", "2024-02-16-log.txt", "2024-02-14-log.txt", "2024-02-18-log.txt", "2024-02-20-log.txt", "2024-01-17-log.txt", "2024-02-19-log.txt", "2024-01-10-log.txt", "2024-02-23-log.txt", "2024-02-25-log.txt", "2024-02-21-log.txt", "2024-01-25-log.txt", "2024-02-28-log.txt", "2024-02-22-log.txt", "2024-02-29-log.txt", "2024-03-02-log.txt", "2024-03-03-log.txt", "2024-02-26-log.txt", "2024-03-04-log.txt", "2024-03-06-log.txt", "2024-03-07-log.txt", "2024-03-05-log.txt", "2024-03-08-log.txt", "2024-03-09-log.txt", "2024-03-11-log.txt", "2024-03-10-log.txt", "2024-03-12-log.txt", "2024-03-13-log.txt", "2024-03-14-log.txt", "2024-03-15-log.txt", "2024-03-16-log.txt", "2024-03-17-log.txt", "2024-03-18-log.txt", "2024-03-20-log.txt", "2024-03-21-log.txt", "2024-03-22-log.txt", "2024-03-19-log.txt", "2024-03-23-log.txt", "2024-03-01-log.txt", "2024-03-26-log.txt", "2024-03-25-log.txt", "2024-03-28-log.txt", "2024-03-29-log.txt", "2024-03-27-log.txt", "2024-03-24-log.txt", "2024-03-30-log.txt", "2024-04-02-log.txt", "2024-04-03-log.txt", "2024-03-31-log.txt", "2024-04-05-log.txt", "2024-04-06-log.txt", "2024-04-07-log.txt", "2024-04-08-log.txt", "2024-04-09-log.txt", "2024-04-04-log.txt", "2024-04-11-log.txt", "2024-04-12-log.txt", "2024-04-13-log.txt", "2024-02-17-log.txt", "2024-04-01-log.txt", "2024-04-16-log.txt", "2024-04-15-log.txt", "2024-04-10-log.txt", "2024-04-17-log.txt", "2024-02-24-log.txt", "2024-04-14-log.txt", "2024-04-19-log.txt", "2024-04-21-log.txt", "2024-04-22-log.txt", "2024-04-23-log.txt", "2024-04-24-log.txt", "2024-04-26-log.txt", "2024-04-25-log.txt", "2024-04-29-log.txt", "2024-04-30-log.txt", "2024-05-01-log.txt", "2024-05-02-log.txt", "2024-05-03-log.txt", "2024-05-04-log.txt", "2024-05-05-log.txt", "2024-05-06-log.txt", "2024-04-28-log.txt", "2024-05-07-log.txt", "2024-04-18-log.txt", "2024-05-08-log.txt", "2024-05-09-log.txt", "2024-05-10-log.txt", "2024-05-12-log.txt", "2024-05-14-log.txt", "2024-05-11-log.txt", "2024-05-16-log.txt", "2024-04-27-log.txt", "2024-05-17-log.txt", "2024-05-15-log.txt", "2024-05-18-log.txt", "2024-05-20-log.txt", "2024-05-21-log.txt", "2024-05-19-log.txt", "2024-05-22-log.txt", "2024-05-23-log.txt", "2024-05-25-log.txt", "2024-05-24-log.txt", "2024-05-26-log.txt", "2024-05-27-log.txt", "2024-05-28-log.txt", "2024-05-29-log.txt", "2024-05-30-log.txt", "2024-06-02-log.txt", "2024-05-13-log.txt", "2024-06-01-log.txt", "2024-05-31-log.txt", "2024-04-20-log.txt", "2024-06-03-log.txt", "2024-06-04-log.txt", "2024-06-05-log.txt", "2023-12-30-log.txt", "2023-12-01-log.txt", "2024-02-27-log.txt", "2023-12-29-log.txt", "gtaGraProcessToCSV.js", "gtaGraProcessToCSV-2AM.js", "hrs-benefit-report.js", "westCanDocumentMove.js", "hrsbsReviewCycleReport.js", "hrsbsCreateFolderRule.js", "HRSBS-SyncCCIDs.js", "hrsbsCreateFolder.js", "FVCA-data-import.js", "FVCA-manual-property-update.js", "istPerformanceReviewCreateFolder.js", "lawCreateFolderRestricted.js", "lawFileScanned.js", "lawCreateFolder.js", "lawCreateFolderRule.js", "nativeStudiesCreateFolderRestricted.js", "nsFolderCreateSchedule.js", "nativeStudiesCreateFolder.js", "nativeStudiesCreateFolderRule.js", "ADV-notify-type-mapping.json", "OOA-notify-email.js", "ADV-notify-terms-types.js", "pcm-grab-competitive-noderefs.js", "pcm-update-competitive-noderefs.js", "pcmCreateFolder.js", "psUpdateAlfrescoDepartment.js", "pllcCreateFolder.js", "qaProcess.js", "qaRelease.js", "rmOOABackgroundInformationFiling.js", "rmFilingDoc.js", "rmSearchmatchNomatchFiling.js", "rmFilingConfig.json", "thesisDestructionReport.js", "rmThesis.js", "add_document_type_ro.js", "updateSearchMatchStatus.js", "searchmatchFullDob.js", "createROReconciliationReports.js", "eTranscriptInstList.js", "folder-create-ro.js", "augTranscript.js", "addTimeStamp.js", "missingDocumentList-csv.js", "roAddAspectAndMoveAFA.js", "myTaskDownload.js", "roAddAspectAndMoveTranscript.js", "roAddBundlingAspect.js", "roAddSearchMatchAspect.js", "roCopyEphesoftMetadataXML.js", "roBatchScript.js", "addSearchMatchDocumentType.js", "roCreateEducationalCSV.js", "roCopyOlderScannedDocument.js", "roDocumentListAPLSTD.js", "roCopyOlderScannedDocumentAdHoc.js", "roEtranscriptReport.js", "roDailyQA.js", "roEtranscriptsBundleTest.js", "roFolderCreateLDAPLookup_no_notificatiion.js", "roFolderCreateLDAPLookup.js", "roEtranscriptsBundle.js", "roAddComment.js", "roCopyEphesoftMetadataScanned.js", "roMoveCompleted.js", "roMoveCompletedBackScan.js", "roMoveCompletedSearchMatch.js", "roEtranscriptPDFConverter.js", "roScanningMetadata.js", "roScript1.js", "RORoutingWorkflowUtil.js", "roScript3.js", "roScript2.js", "roScanningMetadataBackScan.js", "roScript7.js", "roScript6.js", "roScript9.js", "roScript1BackScan.js", "roSearchMatchNoMatchReport.js", "roSearchMatchQuery.js", "RONotification.js", "roSlateDocumentExport.js", "roTagAndFileRenderedPDFs.js", "roScript4.js", "roScript5.js", "roScript8.js", "createSlateFolioMaterialDropdown.js", "createSlateApplicationsCSV.js", "LaunchWorkflowUtils.js", "PaperFileUtils.js", "GenerateSponsornamesAndPinames.js", "rsoCreateFolder.js", "sciCreateFolderConfidential.js", "sciCreateFolderPublic.js", "sciCreateFolder.js", "sciCreateFolderRestricted.js", "scienceASDocumentImport.js", "sciFileADDPFileTypes.js", "sciFileShareFolder.js", "sciFileScanned.js", "sciBulkShareFolder.js", "copy-signed-offer-letter.js", "dept-config.js", "reappointment-generate-schedule.js", "reappointment-reminder-schedule.js", "reappointment-generate-process.js", "manual-generate-script.js", "reappointment-reminder-process.js", "reminder-email-util.js", "reappointment-tracking-schedule.js", "reappointment-tracking-process.js", "appointment-report.js", "appointment-report-schedule.js", "manual-tracking-script.js", "sfsCreateFolder.js", "sfsWorkflowStatus.js", "security-group-user.js", "createReportPermissionsFoldersInASite.js", "siteMembersReport.js", "createReportRecursiveGroupsAndUsersInASite.js", "search-responses.js", "advChangeDocumentType.js", "addFolderMetadata.js", "advChangeDocumentType_confidential.js", "consignOInitiatorOfferLetterChange.js", "advChangeDocumentType_background.js", "transcriptResponse.js", "change-fgsr-pdf-file-name-with-date.js", "copy-fgsr-to-graduate-students-records.js", "ADVDonationCalendarToFiscal.js", "document-query.js", "deletingCompletingWorkflow.js", "eTranscriptTemp.js", "eTranscript-bundled-02-jan.js", "eTranscriptVersionModifierFix.js", "fixCheckout.js", "removeDonationGrp.js", "eTranscriptVersioningFix.js", "move-fgsr-folder.js", "search-match-dob-add.js", "thesisDepositArchival.js", "moveThesesForTransfer.js", "eraReportGeneration.js", "kofaxMetadataMerge.js", "kofaxMetadataMergeMissing.js", "generic2min.js", "kofaxSendEmail.js", "PeopleSoft-eTranscript-XML-PDF.js", "startBenefitWorkflow.js", "peoplesoftMetadataMergeMissing.js", "securityWorkflowUtil.js", "startPayActionWorkflow.js", "startDepartmentAdhocApprovalWorkflow.js", "convertTranscript.js", "CreateTranscriptUserMemberships.js", "startTwoStepWorkflow.js", "fix_employee_names.js", "env.js", "folderCreateUtil.js", "folderCreateUtilAA.js", "generalSchedule.js", "JSON.js", "xmlUtil.js", "addPersonAspect.js", "addTimeStampRandomFileName.js", "archiveDocument.js", "luceneUtil.js", "util.js", "archivedItems.js", "getProjectDetails.js", "ADVChangeAuthor.js", "ADVcalendarToFiscal.js", "symplexUtils.js", "advBatchProcessing.js", "advChangeDocumentName.js", "ADVEphesoftMove.js", "advCreateFolderScheduled.js", "advErrorMessageReset.js", "advMetadataUpdate.js", "advMoveToFoldersScheduled.js", "ADVendFundReportFiling.js", "advReconcilliation.js", "ADVmoveRecordsToPreQA.js", "advScanningMetadata.js", "advScript2.js", "advScript3.js", "advScript4.js", "advScript1.js", "advScript5.js", "advScriptDaily.js", "advScriptMonthly.js", "advScriptKofax.js", "ADVSiteContext.js", "advMoveToFolder.js", "deleteEphesoftDoc.js", "advUtils.js", "folderCreateADV.js", "advScriptDaily30minFreq.js", "jsonUtils.js", "advScanning.js", "folderCreateDocumentADV.js", "moveToFolders.js", "symplexMetadataUpdate.js", "OOA_SOT_Name_change.js", "moveToFoldersRetainTitle.js", "advScriptWeekly.js", "symplexMoveToFolder.js", "clioToAcsDocUpdate.js", "ClioUpdateScheduledJob.js", "smartFoldersExample.json", "system-overview.html", "businessDocSetup.json", "uappolDocSetup.json", "businessConfig.json", "augConfig.json", "augDocSetup.json", "lawConfig.json", "uappolConfig.json", "UAlbertaSettings.json", "hrsbsDocSetup.json", "advConfig.json", "hrsbsConfig.json", "hrsConfig.json", "hrsDocSetup.json", "advSimplexMapping.json", "advDocSetup.json", "artsDocSetup.json", "alesConfig.json", "alesDocSetup.json", "archiveFolder.json", "artsConfig.json", "advScanningMapping.json", "collegeOfHealthSciencesConfig.json", "chsAgreementsConfig.json", "dropboxCommonAspects.json", "collegeOfHealthSciencesDocSetup.json", "chsAgreementsDocSetup.json", "educationConfig.json", "extensionConfig.json", "fgsrv2DocSetup.json", "foConfig.json", "foDocSetup.json", "educationDocSetup.json", "lawDocSetup.json", "nativeStudiesDocSetup.json", "pllcConfig.json", "pllcDocSetup.json", "roConfig.json", "fgsrv2Config.json", "rsoConfig.json", "rsoDocSetup.json", "sciConfig.json", "eTranscriptConfig.json", "sciDocSetup.json", "roDocSetup.json", "sfsDocSetup.json", "UAlbertaSettings.conf", "student-recordsConfig.json", "securityWorkflowSetting.json", "thesisDepositConfig.json", "globalHeader.html.ftl", "webFormDialog.html.ftl", "alfrescoUserGroupRequest.ftl", "pensionBenefit.html.ftl", "pinames.json", "sponsornames.json", "searchPageConfig.json", "pcmDocSetup.json", "pcmConfig.json", "qaConfig.json", "apsAppConfig.json", "fgsrCreateApsFromCSV.json", "fgsrCopyMetadata.json", "enggCoopDocSetup.json", "enggDocSetup.json", "enggConfig.json", "enggCoopConfig.json", "CapApsConfig.json", "extensionDocSetup.json", "readme.html", "readme_de.html", "readme_ja.html", "readme_fr.html", "advEndowmentName.get.desc.xml", "advEndowmentName.get.json.ftl", "advEndowmentName.get.js", "advEntityName.get.desc.xml", "advEntityName.get.js", "advEntityName.get.html.ftl", "search.get.desc.xml", "search.get.js", "search.get.html.ftl", "changeInitiatorAppt.put.desc.xml", "eSignatureStatusHistory.get.html.ftl", "changeInitiatorAppt.put.json.ftl", "eSignatureStatusHistory.get.desc.xml", "appointmentSubmit.get.js", "processIdProps.get.desc.xml", "changeInitiatorAppt.put.js", "processIdProps.get.json.ftl", "processIdProps.get.js", "appointmentLandingPage.get.desc.xml", "appointmentLandingPage.get.js", "appointmentLandingPage.get.html.ftl", "appointmentStart.get.desc.xml", "appointmentStart.get.html.ftl", "appointmentStart.get.js", "appointmentStartTest.get.desc.xml", "appointmentStartTest.get.js", "appointmentStartTest.get.html.ftl", "appointmentSubmit.get.desc.xml", "appointmentSubmit.get.html.ftl", "eSignatureStatusHistory.get.js", "apsApplicationList.get.desc.xml", "apsApplicationList.get.html.ftl", "assignuser.put.js", "assignuser.put.json.ftl", "claimtask.put.desc.xml", "claimtask.put.js", "claimtask.put.json.ftl", "completetask.post.desc.xml", "completetask.post.json.ftl", "completetask.post.js", "getapsdbid.get.desc.xml", "getapsdbid.get.json.ftl", "gettasks.get.desc.xml", "gettasks.get.json.ftl", "assignuser.put.desc.xml", "gettasks.get.js", "savetask.post.desc.xml", "savetask.post.js", "savetask.post.json.ftl", "taskForm.get.js", "taskForm.get.desc.xml", "tasklist.get.desc.xml", "apsApplicationList.get.js", "taskForm.get.json.ftl", "tasklist.get.html.ftl.jquery", "tasklist.get.html.ftl", "tasklist.get.js", "triggerapsprocess.post.desc.xml", "triggerapsprocess.post.js", "updatevariables.post.desc.xml.notused", "triggerapsprocess.post.json.ftl", "updatevariables.post.json.ftl.notused", "getapsdbid.get.js", "updatevariables.post.js.notused", "taskUtils.js", "apsGroupsConfig.json", "apsSitesConfig.json", "apptStepZeroStarter.post.desc.xml", "apptStepZeroStarter.post.json.ftl", "apptStepZeroStarter.post.js", "apptStepOneStarter.post.desc.xml", "apptStepOneStarter.post.js", "apptStepOneStarter.post.json.ftl", "apptStepOneSave.post.json.ftl", "apptStepOneSave.post.desc.xml", "apptStepOneSave.post.js", "apptStatusDocUpdate.post.desc.xml", "apptStatusDocUpdate.post.json.ftl", "apptStatusDocUpdate.post.js", "APSWorkflowStatus.get.desc.xml", "APSWorkflowStatus.put.html.ftl", "APSWorkflowStatus.get.html.ftl", "APSWorkflowInfo.put.html.ftl", "APSWorkflowStatus.put.desc.xml", "APSWorkflowInfo.put.desc.xml", "APSWorkflowStatus.get.js", "APSWorkflowStatus.put.js", "APSWorkflowInfo.put.js", "NodeInfo.get.desc.xml", "NodeInfo.get.html.ftl", "capinfo.get.js", "capstart.get.js", "epsb.get.js", "epsb.get.html.ftl", "capstart.get.html.ftl", "epsb.get.desc.xml", "schoolboard.get.html.ftl", "NodeInfo.get.js", "NodeInfoByCapId.get.desc.xml", "updateVariable.post.json.ftl", "updateVariable.post.js", "schoolboard.get.desc.xml", "updateVariable.post.desc.xml", "schoolboard.get.js", "capinfo.get.html.ftl.backup", "cap-file-load.post.json.ftl", "NodeInfoByCapId.get.js", "capinfo.get.html.ftl", "capstart.get.desc.xml", "cap-file-load.post.desc.xml", "capinfo.get.desc.xml", "cap-file-load.post.js", "capeamergedoc.get.js", "capeamergedoc.get.desc.xml", "capeamergedoc.get.html.ftl", "capConfig.js", "chsEnv.js", "chsConfig.js", "chsAdminStuView.get.desc.xml", "chsAdminStuView.get.html.ftl", "chsAdminStuView.get.js", "coupa.get.html.ftl", "coupa.get.desc.xml", "coupa.get.js", "coveoGetDocList.get.desc.xml", "coveoGetDocList.get.json.ftl", "coveoGetDocList.get.js", "getJson.get.desc.xml", "getJson.get.js", "getJson.get.json.ftl", "simpleupload.post.desc.xml", "simpleupload.post.json.ftl", "simpleupload.post.js", "consignoMessage.get.js", "consignoWebhook.post.js", "consignoWebhook.post.json.ftl", "consignoMessage.get.desc.xml", "consignoWebhook.post.desc.xml", "consignoMessage.get.json.ftl", "eSignDownload.get.js", "eSignDownload.get.html.ftl", "eSignDownload.get.desc.xml", "review-supervisorv2.get.desc.xml", "review-supervisorv2.get.js", "review-supervisorv2.get.html.ftl", "fgsrssgLanding.get.js", "review-comm01v2.get.desc.xml", "fgsrssgLanding.get.html.ftl", "review-comm01v2.get.html.ftl", "review-comm02v2.get.desc.xml", "review-comm02v2.get.html.ftl", "fgsrssgLanding.get.desc.xml", "review-studentv2.get.html.ftl", "review-comm03v2.get.html.ftl", "review-comm03v2.get.desc.xml", "review-studentv2.get.desc.xml", "review-cosupervisorv2.get.html.ftl", "review-comm02v2.get.js", "review-startv2.get.desc.xml", "review-studentv2.get.js", "review-cosupervisorv2.get.js", "review-startv2.get.js", "review-student-revisionv2.get.html.ftl", "review-student-revisionv2.get.desc.xml", "review-startv2.get.html.ftl", "review-comm03v2.get.js", "review-cosupervisorv2.get.desc.xml", "review-student-revisionv2.get.js", "review-comm01v2.get.js", "review-comm02.get.desc.xml", "review-comm02.get.html.ftl", "review-comm03.get.desc.xml", "review-comm02.get.js", "review-comm03.get.html.ftl", "review-cosupervisor.get.desc.xml", "review-cosupervisor.get.html.ftl", "review-cosupervisor.get.js", "review-nextdate.get.desc.xml", "review-comm03.get.js", "review-nextdate.get.js", "review-student.get.html.ftl", "review-student.get.js", "review-student-revision.get.desc.xml", "review-student.get.desc.xml", "review-student-revision.get.js", "review-studentTest.get.desc.xml", "review-supervisor.get.desc.xml", "review-studentTest.get.js", "review-supervisor.get.html.ftl", "review-supervisor.get.js", "review-comm01.get.desc.xml", "review-comm01.get.html.ftl", "review-comm01.get.js", "review-student-revision.get.html.ftl", "review-nextdate.get.html.ftl", "review-studentTest.get.html.ftl", "guidelines-supervisor.get.desc.xml", "guidelines-supervisor-revision.get.html.ftl", "guidelines-start.get.desc.xml", "guidelines-start.get.html.ftl", "guidelines-start.get.js", "guidelines-student.get.desc.xml", "guidelines-student.get.html.ftl", "guidelines-student-revision.get.js", "guidelines-student-revision.get.desc.xml", "guidelines-supervisor.get.html.ftl", "guidelines-supervisor-revision.get.desc.xml", "guidelines-student-revision.get.html.ftl", "guidelines-student.get.js", "guidelines-supervisor.get.js", "guidelines-supervisor-revision.get.js", "programExtensionScript.js", "customScript.js", "customCSS_FGSR2.css", "customCSS_FGSR.css", "fgsrEnv.js", "FGSR-Forms-Config.js", "config.js", "googleAddon.get.json.ftl", "googleAddon.get.desc.xml", "googleAddon.get.js", "gtaGraStatus.post.json.ftl", "gtaGraStatus.post.js", "gtaGraStatus.post.desc.xml", "wfh-manager.get.desc.xml", "wfh-form.get.js", "wfh-manager.get.html.ftl", "wfh-form.get.desc.xml", "wfh-revise.get.desc.xml", "wfh-revise.get.html.ftl", "wfh-revise.get.js", "wfh-seniormanager.get.desc.xml", "wfh-manager.get.js", "wfh-seniormanager.get.js", "wfh-seniormanager.get.html.ftl", "wfh-form.get.html.ftl", "hrsbsDocumentLinking.get.desc.xml", "hrsbsDocumentLinking.get.html.ftl", "hrsbsDocumentLinking.get.js", "coi-start.get.desc.xml", "coi-start.get.html.ftl", "coi-revise.get.html.ftl", "coi-employee.get.html.ftl", "coi-employee.get.desc.xml", "coi-revise.get.desc.xml", "coi-start.get.js", "coi-revise.get.js", "coi-supervisor.get.js", "coi-supervisor.get.desc.xml", "coi-employee.get.js", "coi-supervisor.get.html.ftl", "getTaskFilter.get.json.ftl", "queryTasks.get.json.ftl", "routableGroups.get.desc.xml", "routableGroups.get.js", "routableGroups.get.json.ftl", "queryTasks.get.desc.xml", "setTaskFilter.post.js", "setTaskFilter.post.json.ftl", "setTaskFilter.post.desc.xml", "applyTaskAction.post.js", "applyTaskAction.post.json.ftl", "applyTaskAction.post.desc.xml", "getTaskFilter.get.desc.xml", "getTaskFilter.get.js", "queryTasks.get.js", "avmbrowse.get.desc.xml", "avmbrowse.get.html.ftl", "avmbrowse.get.js", "avmstores.get.desc.xml", "avmstores.get.html.ftl", "blogsearch.get.atom.400.ftl", "blogsearch.get.html.400.ftl", "blogsearch.get.desc.xml", "blogsearch.get.js", "categorysearch.get.atom.404.ftl", "blogsearch.get.html.ftl", "categorysearch.get.html.404.ftl", "categorysearch.get.js", "categorysearch.get.html.ftl", "categorysearch.get.desc.xml", "folder.get.desc.xml", "folder.get.html.ftl", "folder.get.js", "psDeptAll.get.js", "psDeptSingle.get.json.ftl", "psDeptSingle.get.js", "psPerson.get.json.ftl", "psUtil.js", "psPerson.get.js", "psAcademicDeptAll.get.desc.xml", "psAcademicDeptAll.get.json.ftl", "psAuthorizedApprover.get.desc.xml", "psDeptAll.get.json.ftl", "psAuthorizedApprover.get.js", "psAuthorizedApprover.get.json.ftl", "psDeptAll.get.desc.xml", "psDeptSingle.get.desc.xml", "psPerson.get.desc.xml", "ceeb.get.desc.xml", "ceeb.get.json.ftl", "getSlateId.get.desc.xml", "getSlateId.get.js", "materials.get.json.ftl", "materials.get.desc.xml", "getSlateId.get.json.ftl", "ceeb.get.js", "materials.get.js", "edit.get.html.ftl", "edit.get.js", "save.post.js", "save.post.json.ftl", "scans.get.desc.xml", "scans.get.js", "uploadfile.post.desc.xml", "uploadfile.post.json.ftl", "edit.get.desc.xml", "uploadfile.post.js", "scans.get.html.ftl", "save.post.desc.xml", "AFA_Main.post.desc.xml", "AFA_MainFileOnly.post.desc.xml", "AFA_MainFileOnly.post.js", "AFA_Main.post.js", "AFA_MainFileOnly.post.json.ftl", "AFA_Main.post.json.ftl", "paperFileUtil.get.desc.xml", "paperFileUtil.get.js", "paperFileUtil.get.html.ftl", "rsoprojectdetails.get.html.ftl", "rsoprojectdetails.get.js", "rsoprojectdetails.get.desc.xml", "roslateapplist.get.html.ftl", "roslateapplist.get.desc.xml", "roslateapplist.get.json.ftl", "roslateexists.get.html.ftl", "roslateexists.get.desc.xml", "roslateapplist.get.js", "roslateexists.get.js", "uofaDepartmentList.get.desc.xml", "uofaDepartmentList.get.js", "uofaDepartmentList.get.html.ftl", "uofaDepartmentName.get.desc.xml", "uofaDepartmentName.get.html.ftl", "uofaFacultyList.get.html.ftl", "uofaFacultyList.get.desc.xml", "uofaDepartmentName.get.js", "uofapersonid.get.desc.xml", "uofapersonidrest.get.html.ftl", "uofapersonidrest.get.desc.xml", "uofapersonid.get.html.ftl", "uofapersonid.get.js", "uofapersonidrest.get.js", "uappolCategoryHeirarchy.get.desc.xml", "uappolCategoryHeirarchy.get.json.ftl", "uappol-metadata-query.get.desc.xml", "uappol-metadata-query.get.js", "uappol-metadata-query.get.json.ftl", "uappolCategoryHeirarchy.get.js", "siteFileViewer.get.desc.xml", "siteFileViewerConfig.js", "siteFileViewer.get.html.ftl", "siteFileViewer.get.js", "publicSiteFileViewer.get.html.ftl", "publicSiteFileViewer.get.desc.xml", "publicSiteFileViewer.get.js", "cronJob.post.desc.xml", "cronJob.post.js", "cronJob.post.json.ftl", "studentupload.get.html.ftl", "generatereport.get.json.ftl", "generatereport.get.desc.xml", "approvethesis.post.js", "generatereport.get.js", "search-match-attach.get.js", "search-match-list.get.html.ftl", "search-match-result.get.html.ftl", "search-match-result.get.js", "search-match-list.get.js.old", "chs-agreements.get.js", "chs-agreements.get.html.ftl", "chs-upload.get.html.ftl", "chs-upload.get.js", "uamytasks.config.get.js", "chsStudentView.get.js", "chsStudentView.get.html.ftl", "foModel.xml", "uofaDocTypes.xml", "uofaDocTypes.json", "foModel.json", "tim-sops", "FandO", "cbsr", "nanofab", "support-documentation", "Alfresco.zip - 1bf054bded99e2ae414154593d0892066b2e0c7add603f9321e157c77ae52075", "https://www.virustotal.com/graph/embed/g05f1796a358b458d95751d31d1d529aa378f8ffadf0b4305b7fa0bd1c64fe228?theme=dark", "https://www.virustotal.com/gui/collection/63819e07111e9665ba8602777d782527c54f3fad71ef36f977405a004484787c/iocs", "https://viz.greynoise.io/analysis/0cd9177e-8328-4355-a2c0-d05704a64c72", "components.zip - 2b91fcf852a5f1f57be71a269d82497b37c9f544ebd8f32aaa240e4cde0ffeea", "https://www.virustotal.com/graph/embed/g2948a5c332eb4614973872a8243215f6aa1fba79749a48ea92806e9b934db91f?theme=dark", "https://viz.greynoise.io/ip/analysis/2610b635-c05a-4f28-a112-7278de8fdf9b" ], "public": 1, "adversary": "TA413 proposed (06.08.24), Callisto, APT38, APT 28/29 - too much time too many problems", "targeted_countries": [ "Canada", "United States of America" ], "malware_families": [], "attack_ids": [], "industries": [ "Education", "Government", "Healthcare", "Technology", "Telecommunications" ], "TLP": "white", "cloned_from": null, "export_count": 57, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 4, "follower_count": 0, "vote": 0, "author": { "username": "Disable_Duck", "id": "244325", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_244325/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 7132, "hostname": 3118, "URL": 4909, "email": 20, "FileHash-SHA256": 2144, "FileHash-MD5": 29, "FileHash-SHA1": 29 }, "indicator_count": 17381, "is_author": false, "is_subscribing": null, "subscriber_count": 131, "modified_text": "232 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "67f5555b6ce863d998e83e26", "name": "macOS Threat Infrastructure Leveraging Remote Agents via remotewd.com and rtmsprod.net", "description": "This pulse identifies an actively observed macOS-focused remote access infrastructure abusing trusted native Apple agents (ARDAgent.app, SSMenuAgent.app) and communicating with a distributed network of C2-like endpoints under domains such as remotewd.com, idsremoteurlconnectionagent.app, and rtmsprod.net.\n\nThe infrastructure is composed of dynamically generated subdomains \u2014 many in the form of device-.remotewd.com \u2014 indicative of automated deployment, system tracking, or per-host remote access configurations.\n\nAdditional indicators include HTTP/S URLs pointing directly to embedded binary paths within macOS agents, suggesting possible delivery vectors, staging, or persistence techniques.\n\nThis campaign shows signs of structured, programmatic targeting and is highly likely to be pre-operational infrastructure for wide-scale surveillance or access operations. All listed indicators should be considered high-risk. If observed in your environment, initiate a full forensic and IR process immediately.", "modified": "2025-05-11T19:03:59.885000", "created": "2025-04-08T16:56:59.641000", "tags": [ "generated from", "do not", "edit uri", "urls", "edit", "rewriteengine", "rewritecond", "rewriterule", "r301", "xml2encalias", "beralloct", "berbvarrayadd", "berbvarrayfree", "berbvdup", "berbvecadd", "berbvecfree", "berbvfree", "berdump", "berdup", "berdupbv", "laerrordomain", "laerrornoncekey", "lamechanismtree", "lacontext", "ladomainstate", "laenvironment", "lanotification", "laprivatekey", "lapublickey", "laright", "apple swift", "o librarylevel", "combine import", "foundation", "swift import", "mcpeerid", "mcsession", "property", "copyright", "protocol", "class", "bonjour", "ascii lowercase", "abc company", "section", "bonjour txt", "note", "ui element", "utf8 encoding", "nscopying", "nsdictionary", "nsstring", "mcextern", "attribute", "mcextern extern", "mcexternweak", "nsenum", "nsinteger", "mcerrorcode", "mcerrorunknown", "mcerrortimedout", "peer", "example", "bonjour apis", "stop", "tags", "session", "nsprogress", "nserror", "nsurl", "nsarray", "create", "nsuinteger", "notifies", "mcsession api", "interface", "dbictrace", "dbivporth", "dbictracelevel", "dbdtffoo", "dbihseterrchar", "dbicstate", "dbictraceflags", "provides macros", "dbi release", "only", "sqlsuccess", "odbc", "sqlok", "tim bunce", "england", "sql cli", "sql datatype", "sqlguid", "sqlwlongvarchar", "main", "beware", "sv sth", "sv dbh", "impsth", "impdbh", "sv keysv", "sv params", "sv attr", "sv attribs", "sv drh", "void", "fri jul", "mixed", "dbixsrevision", "plsvundef", "license", "spagain", "perlioprintf", "dbiclogpio", "putback", "ireland", "gnu general", "super", "magic", "dbicflags", "dbis", "svrv", "null", "imp2com", "dbicactivekids", "dbicfiadestroy", "sv h", "dbicdbistate", "code", "copy", "refer", "trace", "error", "unknown", "hookopcheckh", "startexternc", "hookopcheckcb", "userdata", "endexternc", "isinternalbuild", "kickmcxdforuid", "loadappkit", "ardconfig", "authenticator", "dsauthenticator", "dsnode", "dsrecord", "group", "hostconfig", "apfsvolumelock", "apfsvolumerole", "aoskgetosinfo", "aoskgetuserinfo", "aosaddappleid", "aosdisablepcs", "aosenablepcs", "aoslog", "aoslogforce", "aosrelaycookie", "didfailcallback", "kaosaccountkey", "kapcsbundle", "kapcspath", "kjsonextension", "apcsbucketid", "apcsreports", "apconfiguration", "apversiondata", "apversionhelper", "systemvolumesvm", "name size", "identifier", "gb disk0s3", "devdisk3", "apfs container", "scheme", "physical store", "macintosh hd", "apfs snapshot", "preboot", "refs address", "size wired", "name", "version", "uuid", "linked against", "renderer", "helper", "chrome helper", "contains", "cloud ui", "macintosh", "khtml", "gecko", "ui helper", "plugin", "service", "good", "battery power", "apfs encryption", "jumpcloud go", "chrome web", "store", "privacy badger", "flowcrypt", "encrypt gmail", "simple", "google", "b2b phone", "number", "apollo", "future", "exccrash", "sigkill", "code signature", "invalid", "sigabrt", "protonvpn", "excguard", "excbreakpoint", "sigtrap", "excbadaccess", "appl", "english", "adobe crash", "adobe", "acrobat dcadobe", "processor", "uninstaller", "assistant", "install", "cloud", "dock", "calendar", "music", "terminal", "tips", "installer", "updater", "proton", "tools", "stub", "python", "clock", "powershell", "team", "rave scout", "cookies", "public folder", "key cert", "sign", "crl sign", "root ca", "authority", "public primary", "global root", "verisign", "academic", "premium", "adaptive", "interactive", "background", "standard", "launchd sandbox", "s mdworker", "agent", "command line", "progress", "yubico", "macos13action", "disableoverride", "disableairdrop", "denyactivation", "enable", "loginwindowtext", "jumpcloud", "autoupdate", "loggingoption", "enablefirewall", "arm64e", "apple m2", "mac142", "kjqqtw7pqt", "daemon", "server", "open directory", "user", "account", "kerberos admin", "kerberos change", "device daemon", "network", "desktop", "screensaver", "bridge", "aesxtsarm", "aesecbarm", "sha512vngarmhw", "sha384vngarmhw", "sha256vngarm", "sha1vngarm", "darwin kernel", "wed mar", "wkarraycreate", "wkbooleancreate", "wkcontextcreate", "wkdatacreate", "wkdatagettypeid", "wkdoublecreate", "wkframecopyurl", "wkgettypeid", "wkimagecreate", "wkpagecandelete", "webview", "notice", "this software", "including", "but not", "limited to", "redistribution", "is provided", "by apple", "direct", "damage", "apiavailable", "webkit", "nsswiftname", "document", "a block", "as is", "hasinclude", "wkdownload", "abstract", "wkerrorcode", "wkerrorunknown", "discussion", "bool", "whether", "wkcontentworld", "wkwebview", "javascript", "nsunavailable", "vaargs", "nsswiftasync", "wkswiftasync", "wkcookiepolicy", "wkswiftuiactor", "nshttpcookie", "targetosiphone", "wknavigation", "decides", "boolean value", "apideprecated", "methodkind", "wkerrordomain", "wkscriptmessage", "promise", "fulfill", "const", "url scheme", "mark", "wkuserscript", "targetosvision", "param", "wkframeinfo", "targetosios", "pass", "window", "mime type", "link", "nsimage", "returns", "nsset", "checks", "matches", "a boolean", "defaults", "wkwebextension", "cgsize", "uiimage", "apis", "nsdate", "wkcontentmode", "wkextern", "possible", "cgfloat", "media", "cgrect", "apiunavailable", "framework", "nsswiftuiactor", "targetoswatch", "confirms", "apple upgrade", "nsstring user", "nsobject", "provider", "apple", "password", "uicontrol", "nscontrol", "asuseragerange", "check", "opaque user", "apple id", "initiate", "asauthorization", "operation", "state", "nserrorenum", "nsdata", "relying party", "asapiavailable", "perform", "realm", "http response", "authorization", "http", "oauth", "saml", "a byte", "nsdata userid", "relying", "a string", "nsdata readdata", "bool didwrite", "a cose", "nsdata first", "nsdata second", "nsstring name", "bool appid", "targetosxr", "nsstring appid", "bluetooth", "mdm profile", "nsurl url", "returns yes", "a state", "a json", "web token", "private seckeys", "enables", "keychain", "asswiftsendable", "cose algorithm", "ecdsa", "sha256", "cose curve", "p256", "nullable", "bool success", "remove", "call", "complete", "initializes", "time code", "extensions", "asextern extern", "asextern", "nsswiftsendable", "prepare", "list", "nsextension", "attempt", "nsstring label", "creates", "nsstring code", "a key", "webauthn", "nssecurecoding", "input", "output", "initialize", "nsinteger rank", "json", "inputs", "hash", "nsstring origin", "settings app", "extension", "https urls", "safari", "cancel", "nsuuid uuid", "r uftpexu", "nsmutabledata", "vnsdate", "mprcjy", "postfix", "domain", "canonical", "tables", "ldap", "post", "replace user", "address", "wietse venema", "bugs", "mail", "aliases", "postfix version", "restrict", "sample", "person", "basic system", "general", "reject empty", "postfix smtp", "ipv6 host", "reject", "reply", "access", "prior", "hold", "info", "mail delivery", "charset", "system", "report", "postfix dsn", "mail returned", "this", "generic", "smtp", "isp mail", "mime", "headerchecks", "readme files", "filters while", "posix", "empty", "body", "write", "date", "smtp server", "specify", "mx host", "unix password", "user unknown", "pathbin", "postfix queue", "unix", "cyrus", "path", "uucp", "shell", "local", "program", "agreement", "contributor", "recipient", "contribution", "the program", "corporation", "contributors", "product x", "as expressly", "arch", "arch x8664", "pipe wall", "wimplicit", "ranlib", "warn", "switch", "start", "systype", "outlook", "postfix master", "begin", "server admin", "mail backend", "modern smtp", "iana", "many", "postfix pipe", "recent cyrus", "amos gouaux", "old example", "or even", "lutz jaenicke", "technology", "cottbus", "germany", "openssl package", "openssl project", "europe", "remember that", "use of", "file", "update", "usrsbin", "file format", "no group", "daemondirectory", "deliver mail", "transport", "description", "result format", "virtual", "virtual alias", "redirect mail", "relocated", "matches user", "synopsis", "lastname", "firstname", "apple computer", "tcpip", "supported", "quantum", "facility", "level", "level info", "broadcast", "ignore", "rules", "sender", "automounter map", "use directory", "get home", "home autohome", "true", "t option", "mount", "force", "environment", "automountdenv", "promptcommand", "shellsessiondir", "histfile", "histfilesize", "myvar", "histtimeformat", "arrange", "bashrematch", "tell", "ps1h", "make bash", "s checkwinsize", "etcbashrc", "termprogram", "inpck", "nnnbaud", "berkeley", "parity", "pc entry", "pass8", "parenb istrip", "fixed speed", "entry", "clocal mode", "maxhistsize", "promptmode", "verbose end", "etcirbrcloaded", "default", "setup", "history file", "kernel", "readline", "jabber", "group database", "dovecot", "postfix scsd", "networkd", "searchpaths", "freebsd", "tmpdir", "fcodes", "prunepaths", "vartmp", "prunedirs", "filesystems", "nroff", "manpath", "uncomment", "manpager", "whatispager", "manlocale", "every", "manpath optman", "maybe", "troff", "status mailfrom", "returnpath via", "pidfile", "flags", "bcgjnuwz", "bin usrsbin", "sbin", "default pf", "care", "audio", "user database", "unix copy", "gate daemon", "bashno", "r etcbashrc", "rfc1323", "m1460", "macos x", "signature", "linux", "opera", "xp sp1", "windows sp1", "nmap syn", "m265", "synack", "mind", "macos", "warp", "ipv6", "internet", "icmp", "cisco", "monitoring", "argus", "chaos", "rsvp", "encapsulation", "aris", "isis", "netbootmount", "netbootshadow", "computername", "localonly", "localnetbootdir", "netboot", "define", "purpose", "networkonly", "waiting", "networkup", "term", "devnull", "common setup", "configure", "set command", "dns hostname", "dns query", "see also", "kame", "sunnet manager", "rpcsrc", "netlicense", "ftpd", "bindash binksh", "binsh bintcsh", "jumpcloud ldap", "smb2", "security", "workgroup", "standalone", "samba server", "enforce", "smb3", "example share", "improper use", "ctrlc", "none", "fax reception", "hardwired", "0007", "must", "visudo", "blocksize", "charset lang", "language lcall", "lines columns", "lscolors", "sshauthsock", "orion", "setup user", "home", "zdotdir", "delete", "beep", "vendor", "kf10", "kf11", "kf12", "kf13", "backspace", "insert", "resume", "termsessionid", "savehist", "sharehistory", "h do", "volume", "de l", "l uuid", "m tra", "n est", "suuid", "prfen", "fusion", "syst", "look", "executant", "alla", "over", "test", "overie", "zapis", "rapid", "disco usa", "de macos", "nie s", "i denne", "adgjmpsvx", "diskgthis disk", "01k8x j", "34disk", "levy kytt", "dict", "array", "plist", "apple root", "code signing", "inode64r", "xofkoxzh", "integer", "doctype", "brain", "abcd", "ogwo", "boaw", "cobwa", "uhawavauatsh", "ip bitmap", "foewdc", "could", "ip block", "funcs", "cogwo", "trash", "double", "hunt", "affa", "carr", "crypto", "docwbac", "q1b0", "q1 0", "h h5", "docwbag", "slice", "format", "zero", "alfa", "hera", "lelei", "hehe", "hisp", "fail", "katy", "zakk", "eodwcbgao", "hhk8di", "alma", "topo", "open", "huhk", "piper", "hehx", "eh ui", "h20hph", "hif h", "hmhhihqhyla hq", "r11b0", "target", "uus10u", "hifh", "loghookfailed", "loghook", "hell", "q1b 0", "f duh", "aqw1", "1160" ], "references": [ "index.html.en", "bind.html", "caching.html", "BUILDING", "configuring.html", "content-negotiation.html", "custom-error.html", "convenience.map", "LDAP.tbd", "lber.h", "ldap.h", "LocalAuthentication.tbd", "arm64e-apple-macos.swiftinterface", "x86_64-apple-ios-macabi.swiftinterface", "arm64e-apple-ios-macabi.swiftinterface", "x86_64-apple-macos.swiftinterface", "MultipeerConnectivity.tbd", "module.modulemap", "MCNearbyServiceAdvertiser.h", "MCPeerID.h", "MCError.h", "MCNearbyServiceBrowser.h", "MCAdvertiserAssistant.h", "MultipeerConnectivity.apinotes", "MultipeerConnectivity.h", "MCSession.h", "MCBrowserViewController.h", "dbivport.h", "dbi_sql.h", "dbd_xsh.h", "dbixs_rev.h", "Driver_xst.h", "DBIXS.h", "hook_op_check.h", "Admin.tbd", "AirPlayReceiver.tbd", "apfs_boot_mount.tbd", "AOSKit.tbd", "APConfigurationSystem.tbd", "AppleFirmwareUpdate.tbd", "launchdaemons.txt", "preboot_archive_errors.log", "mounts.txt", "launchagents.txt", "disk_structure.txt", "user_launchagents.txt", "security_status.txt", "kexts.txt", "process_list.txt", "battery.csv", "diskEncryption.csv", "chromeExtensions.csv", "crashes.csv", "interfaceAddrs.csv", "kernel.csv", "interfaceDetails.csv", "etcHosts.csv", "applications.csv", "mounts.csv", "sharedFolders.csv", "certificates.csv", "sharingPreferences.csv", "launchD.csv", "usbDevices.csv", "managedPolicies.csv", "systemInfo.csv", "users.csv", "sipConfig.csv", "systemControls.csv", "canonical", "aliases", "custom_header_checks", "access", "bounce.cf.default", "generic", "header_checks", "main.cf.default", "LICENSE", "makedefs.out", "main.cf", "master.cf.default", "main.cf.proto", "master.cf.proto", "master.cf", "TLS_LICENSE", "postfix-files", "transport", "virtual", "relocated", "afpovertcp.cfg", "asl.conf", "auto_home", "auto_master", "autofs.conf", "bashrc_Apple_Terminal", "com.apple.screensharing.agent.launchd", "bashrc", "command_args.json", "csh.cshrc", "csh.login", "find.codes", "csh.logout", "ftpusers", "gettytab", "irbrc", "kern_loader.conf", "group", "locate.rc", "man.conf", "mail.rc", "manpaths", "networks", "nfs.conf", "newsyslog.conf", "ntp_opendirectory.conf", "ntp.conf", "notify.conf", "paths", "pf.conf", "passwd", "profile", "pf.os", "protocols", "rc.netboot", "rc.common", "rmtab", "resolv.conf", "rtadvd.conf", "rpc", "shells", "smb.conf", "sudo_lecture", "ttys", "syslog.conf", "xtab", "sudoers", "zprofile", "zshrc", "zshrc_Apple_Terminal", "CodeResources", "version.plist", "Info.plist" ], "public": 1, "adversary": "DragonForce Malaysia Hacker Group", "targeted_countries": [], "malware_families": [ { "id": "Lastname", "display_name": "Lastname", "target": null }, { "id": "Firstname", "display_name": "Firstname", "target": null } ], "attack_ids": [ { "id": "T1040", "name": "Network Sniffing", "display_name": "T1040 - Network Sniffing" }, { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" }, { "id": "T1056", "name": "Input Capture", "display_name": "T1056 - Input Capture" }, { "id": "T1090", "name": "Proxy", "display_name": "T1090 - Proxy" }, { "id": "T1547", "name": "Boot or Logon Autostart Execution", "display_name": "T1547 - Boot or Logon Autostart Execution" }, { "id": "T1106", "name": "Native API", "display_name": "T1106 - Native API" }, { "id": "T1176", "name": "Browser Extensions", "display_name": "T1176 - Browser Extensions" }, { "id": "T1574", "name": "Hijack Execution Flow", "display_name": "T1574 - Hijack Execution Flow" }, { "id": "T1140", "name": "Deobfuscate/Decode Files or Information", "display_name": "T1140 - Deobfuscate/Decode Files or Information" }, { "id": "T1071", "name": "Application Layer Protocol", "display_name": "T1071 - Application Layer Protocol" }, { "id": "T1566", "name": "Phishing", "display_name": "T1566 - Phishing" }, { "id": "T1059", "name": "Command and Scripting Interpreter", "display_name": "T1059 - Command and Scripting Interpreter" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 66, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "ilyailya", "id": "298851", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 4449, "domain": 3847, "URL": 14263, "FileHash-SHA256": 2356, "FileHash-MD5": 223, "FileHash-SHA1": 523, "email": 223, "CVE": 40, "CIDR": 12, "SSLCertFingerprint": 302 }, "indicator_count": 26238, "is_author": false, "is_subscribing": null, "subscriber_count": 37, "modified_text": "384 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "663d2869e0f3a42bbddc42ff", "name": "UPX executable packer.", "description": "A new rule has been introduced a \"suspicious\" ELF binary that is packed with the UPX executable packer.\nSuggested ATT&CK IDs: rule SUSP_ELF_LNX_UPX_Compressed_File { meta: description = \"Detects a suspicious ELF binary with UPX compression\" author = \"Florian Roth (Nextron Systems)\" reference = \"Internal Research\" date = \"2018-12-12\" score = 40 hash1 = \"038ff8b2fef16f8ee9d70e6c219c5f380afe1a21761791e8cbda21fa4d09fdb4\" id = \"078937de-59b3-538e-a5c3-57f4e6050212\" strings: $s1 = \"PROT_EXEC|PROT_WRITE failed.\" fullword ascii $s2 = \"$Id: UPX\" fullword ascii $s3 = \"$Info: This file is packed with the UPX executable packer\" ascii $fp1 = \"check your UCL installation !\"", "modified": "2024-10-14T00:01:17.069000", "created": "2024-05-09T19:47:53.786000", "tags": [ "cioch adrian", "centrum usug", "sieciowych", "elf binary", "upx compression", "roth", "nextron", "info", "javascript", "html", "office open", "xml document", "network capture", "win32 exe", "xml pakietu", "pdf zestawy", "przechwytywanie", "office", "filehashsha1", "url https", "cve cve20201070", "cve cve20203153", "cve cve20201048", "cve cve20211732", "cve20201048 apr", "filehashmd5", "cve cve20010901", "cve cve20021841", "cve20153202 apr", "cve cve20160728", "cve cve20161807", "cve cve20175123", "cve20185407 apr", "cve cve20054605", "cve cve20060745", "cve cve20070452", "cve cve20070453", "cve cve20070454", "cve cve20071355", "cve cve20071358", "cve cve20071871", "cve20149614 apr", "cve cve20151503", "cve cve20152080", "cve cve20157377", "cve cve20170131", "cve20200796 may", "cve cve20113403" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [ { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 6861, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Arek-BTC", "id": "212764", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_212764/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 5771, "domain": 3139, "URL": 14525, "FileHash-SHA1": 2610, "IPv4": 108, "CIDR": 40, "FileHash-SHA256": 10705, "FileHash-MD5": 3373, "YARA": 2, "CVE": 148, "Mutex": 7, "FilePath": 3, "SSLCertFingerprint": 3, "email": 23, "JA3": 1, "IPv6": 2 }, "indicator_count": 40460, "is_author": false, "is_subscribing": null, "subscriber_count": 138, "modified_text": "594 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65708ef0cdb40fa0e7d239ca", "name": "either emotet or a part of it", "description": "", "modified": "2023-12-06T15:10:40.867000", "created": "2023-12-06T15:10:40.867000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 342, "hostname": 456, "domain": 349, "URL": 1730, "FileHash-MD5": 1, "FileHash-SHA1": 1 }, "indicator_count": 2879, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "906 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65708d657f0895a860febf8f", "name": "SafeFrame Container", "description": "", "modified": "2023-12-06T15:04:05.932000", "created": "2023-12-06T15:04:05.932000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1416, "domain": 2979, "URL": 8250, "hostname": 2262 }, "indicator_count": 14907, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "906 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65708c8a9635f156e79238f1", "name": "intel gained from a spam text", "description": "", "modified": "2023-12-06T15:00:26.727000", "created": "2023-12-06T15:00:26.727000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 1, "FileHash-SHA256": 823, "domain": 717, "URL": 2245, "hostname": 615, "email": 4, "FileHash-MD5": 5, "FileHash-SHA1": 1 }, "indicator_count": 4411, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "906 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65708c534aadf7adf4f27d77", "name": "enom.com & 4vendeta.com - ReduceRight malware hosting/creation", "description": "", "modified": "2023-12-06T14:59:31.122000", "created": "2023-12-06T14:59:31.122000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 302, "domain": 634, "URL": 2988, "hostname": 1208 }, "indicator_count": 5132, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "906 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6426dda295502d82e6e6ef7f", "name": "v4 - Hybrid scan uploaded + all suggested ioc's - vendor.3a0e728a.js another gem in edge on twitter.com/i/flow/login source code", "description": "WebpackChunk_Twitter-responsive_web is built on a single web address, which will allow users to upload images, tweets and videos to be stored in the same place as the hashtag.", "modified": "2023-03-31T13:18:26.733000", "created": "2023-03-31T13:18:26.733000", "tags": [ "trojan", "apt", "ansi", "memoryfile scan", "error", "runtime data", "typeof e", "regexp", "array", "object", "typeof t", "void", "null", "unknown", "path", "facebook", "4096", "suspicious", "meta", "lazy", "entity", "union", "body", "idkey", "scroll", "backspace", "insert", "roboto", "target", "stack", "hybrid", "model", "click", "stream", "strings", "qakbot", "pattern match", "ud801", "ud804", "ud805", "ud806", "ud81a", "ud835", "ud800", "ud802", "sha1", "sha256", "vendor.3a0e728a.js" ], "references": [ "https://hybrid-analysis.com/sample/9bf30967dfbf84d91ff4a1ca66dcd6c3383e679917e8b7aa4f659ff9f4e848d7/6426cf48655f94b6b303704c" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [ { "id": "T1010", "name": "Application Window Discovery", "display_name": "T1010 - Application Window Discovery" }, { "id": "T1012", "name": "Query Registry", "display_name": "T1012 - Query Registry" }, { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" }, { "id": "T1056", "name": "Input Capture", "display_name": "T1056 - Input Capture" }, { "id": "T1057", "name": "Process Discovery", "display_name": "T1057 - Process Discovery" }, { "id": "T1059", "name": "Command and Scripting Interpreter", "display_name": "T1059 - Command and Scripting Interpreter" }, { "id": "T1082", "name": "System Information Discovery", "display_name": "T1082 - System Information Discovery" }, { "id": "T1083", "name": "File and Directory Discovery", "display_name": "T1083 - File and Directory Discovery" }, { "id": "T1106", "name": "Native API", "display_name": "T1106 - Native API" }, { "id": "T1113", "name": "Screen Capture", "display_name": "T1113 - Screen Capture" }, { "id": "T1115", "name": "Clipboard Data", "display_name": "T1115 - Clipboard Data" }, { "id": "T1129", "name": "Shared Modules", "display_name": "T1129 - Shared Modules" }, { "id": "T1140", "name": "Deobfuscate/Decode Files or Information", "display_name": "T1140 - Deobfuscate/Decode Files or Information" }, { "id": "T1546", "name": "Event Triggered Execution", "display_name": "T1546 - Event Triggered Execution" }, { "id": "T1562", "name": "Impair Defenses", "display_name": "T1562 - Impair Defenses" }, { "id": "T1573", "name": "Encrypted Channel", "display_name": "T1573 - Encrypted Channel" }, { "id": "T1614", "name": "System Location Discovery", "display_name": "T1614 - System Location Discovery" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "callmeDoris", "id": "205385", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1353, "hostname": 222, "domain": 221, "FileHash-SHA256": 85, "FileHash-MD5": 3, "FileHash-SHA1": 1 }, "indicator_count": 1885, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "1156 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6426dd17695f7673d2dcee65", "name": "v3 Hybrid scan uploaded - vendor.3a0e728a.js another gem in edge on twitter.com/i/flow/login source code", "description": "WebpackChunk_Twitter-responsive_web is built on a single web address, which will allow users to upload images, tweets and videos to be stored in the same place as the hashtag.", "modified": "2023-03-31T13:16:07.144000", "created": "2023-03-31T13:16:07.144000", "tags": [ "trojan", "apt", "ansi", "memoryfile scan", "error", "runtime data", "typeof e", "regexp", "array", "object", "typeof t", "void", "null", "unknown", "path", "facebook", "4096", "suspicious", "meta", "lazy", "entity", "union", "body", "idkey", "scroll", "backspace", "insert", "roboto", "target", "stack", "hybrid", "model", "click", "stream", "strings", "qakbot", "pattern match", "ud801", "ud804", "ud805", "ud806", "ud81a", "ud835", "ud800", "ud802", "sha1", "sha256", "vendor.3a0e728a.js" ], "references": [ "https://hybrid-analysis.com/sample/9bf30967dfbf84d91ff4a1ca66dcd6c3383e679917e8b7aa4f659ff9f4e848d7/6426cf48655f94b6b303704c" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [ { "id": "T1010", "name": "Application Window Discovery", "display_name": "T1010 - Application Window Discovery" }, { "id": "T1012", "name": "Query Registry", "display_name": "T1012 - Query Registry" }, { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" }, { "id": "T1056", "name": "Input Capture", "display_name": "T1056 - Input Capture" }, { "id": "T1057", "name": "Process Discovery", "display_name": "T1057 - Process Discovery" }, { "id": "T1059", "name": "Command and Scripting Interpreter", "display_name": "T1059 - Command and Scripting Interpreter" }, { "id": "T1082", "name": "System Information Discovery", "display_name": "T1082 - System Information Discovery" }, { "id": "T1083", "name": "File and Directory Discovery", "display_name": "T1083 - File and Directory Discovery" }, { "id": "T1106", "name": "Native API", "display_name": "T1106 - Native API" }, { "id": "T1113", "name": "Screen Capture", "display_name": "T1113 - Screen Capture" }, { "id": "T1115", "name": "Clipboard Data", "display_name": "T1115 - Clipboard Data" }, { "id": "T1129", "name": "Shared Modules", "display_name": "T1129 - Shared Modules" }, { "id": "T1140", "name": "Deobfuscate/Decode Files or Information", "display_name": "T1140 - Deobfuscate/Decode Files or Information" }, { "id": "T1546", "name": "Event Triggered Execution", "display_name": "T1546 - Event Triggered Execution" }, { "id": "T1562", "name": "Impair Defenses", "display_name": "T1562 - Impair Defenses" }, { "id": "T1573", "name": "Encrypted Channel", "display_name": "T1573 - Encrypted Channel" }, { "id": "T1614", "name": "System Location Discovery", "display_name": "T1614 - System Location Discovery" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "callmeDoris", "id": "205385", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 43, "domain": 193, "URL": 64, "FileHash-SHA256": 85, "FileHash-MD5": 3, "FileHash-SHA1": 1 }, "indicator_count": 389, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "1156 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "628e790d414886e18b33c262", "name": "either emotet or a part of it", "description": "var a.tldDomains, AWIN.Tracking.com, has a new name for its basket, but how do you find it in your browser?.. and what does this mean?", "modified": "2022-06-24T00:01:00.706000", "created": "2022-05-25T18:44:29.280000", "tags": [ "tfunction", "cnullvvoid", "wnullgvoid", "bnullhvoid", "gnullcvoid", "guidewrapper", "blog", "lfunction", "hotjar", "iab2", "code", "number", "party", "n strictly", "life spann", "azuren n", "cookie tracking", "tablen n", "n cookies", "cookie", "null", "date", "error", "ffffff", "typeof t", "uint16array", "regexp", "uint8array", "array", "uint32array", "helvetica", "void", "execution", "body", "roboto", "prop", "object", "param", "cookies", "getcookie", "name", "typeof", "uri component", "obj2", "typeof e", "webkit", "component", "typeof y", "typeof symbol", "suspense", "context", "forwardref", "unknown", "4096", "function", "typeof n", "typeof window", "uuidv4", "ajsanonymousid", "suffix", "bill", "viewed", "pavel krayzel", "psd2", "bt prorata", "amex", "squad", "march", "new visitors", "promise", "nthis", "eventprocessor", "typeof define", "info", "functional", "member", "hnew regexp", "qfunction", "adview", "addbillinginfo", "addtocart", "addtolist", "contact", "download", "install", "window", "value", "customevent", "image", "samesitelax", "invalid pixel", "snap", "afaf09", "sfunction", "cfunction", "post", "appcuesdeps", "typeerror", "hki3", "ogr1", "typeof self", "full selector", "heatmaps", "sans", "version", "releaseid", "appcues", "dashboard2", "dashboard3", "technology", "selector", "click", "next", "import", "generic", "started", "dismissed", "completed", "contextual help", "symbol", "appcuesfunction", "widget", "iframe", "pnull", "html", "style", "ctnull", "fanull", "license", "ynull", "config", "meta", "accept", "contabo gmbh", "typeof hj", "https", "learn", "surveyv2", "surveyisolated", "safari", "firefox", "chrome", "remove", "edge", "correct", "section", "segoe ui", "emoji", "opera", "path", "span", "this", "typeof document", "small", "blank", "pass", "core", "footer", "close", "form", "main", "direct", "reduceright", "string", "f420", "gyfpnzbgtf3", "copyright", "json", "sesprops", "href", "input", "class", "logger", "target", "push", "awalt", "awinawin", "explorer", "awatp", "ccampid", "impid", "tag1" ], "references": [ "https://www.dwin1.com/13976.js", "https://cdn.heapanalytics.com/js/heap-3501642718.js", "https://www.googletagmanager.com/gtag/js?id=G-YFPNZBGTF3&l=dataLayer&cx=c", "https://contabo.com/client/client.a529db28.js", "https://contabo.com/client/client-30e55c50.css", "https://static.hotjar.com/c/hotjar-2086874.js?sv=6", "https://l.clarity.ms/s/0.6.34/clarity.js", "https://www.clarity.ms/tag/uet/5739677", "https://fast.appcues.com/generic/main/4.35.3/appcues.main.e826b3c1f5ab15648ac446eafdbb489fd58d7f2d.js", "https://fast.appcues.com/79878.js", "https://cdn.segment.com/next-integrations/integrations/vendor/commons.54701049fd6fb8497e9e.js.gz", "https://cdn.segment.com/next-integrations/integrations/appcues/2.3.0/appcues.dynamic.js.gz", "https://cdn.segment.com/next-integrations/integrations/google-analytics/2.18.5/google-analytics.dynamic.js.gz", "https://sc-static.net/scevent.min.js", "https://cdn.taboola.com/libtrc/unip/1331749/tfa.js", "https://snap.licdn.com/li.lms-analytics/insight.min.js", "https://unpkg.com/@optimizely/optimizely-sdk@3.5.0/dist/optimizely.browser.umd.min.js", "https://cdn.optimizely.com/datafiles/HgHVKrf9ZD2dsZYVFb9JnD.json/tag.js", "https://www.hotjar.com/ensureSegmentId.js", "https://www.hotjar.com/_next/static/chunks/webpack-ca4d94cab12a165a123f.js", "https://www.hotjar.com/_next/static/chunks/framework-6994461647f52f294af9.js", "https://www.hotjar.com/persistUtmParams.js", "https://www.hotjar.com/_next/static/chunks/pages/_app-be5fbad980fd377922f7.js", "https://www.hotjar.com/_next/static/chunks/pages/index-b7f010d5161cd8f6ddab.js", "https://cdn.cookielaw.org/scripttemplates/6.5.0/otBannerSdk.js" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [ { "id": "ReduceRight", "display_name": "ReduceRight", "target": null } ], "attack_ids": [ { "id": "T1059", "name": "Command and Scripting Interpreter", "display_name": "T1059 - Command and Scripting Interpreter" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "adjadex1@gmail.com", "id": "187163", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 349, "hostname": 456, "URL": 1730, "FileHash-SHA256": 342, "FileHash-MD5": 1, "FileHash-SHA1": 1 }, "indicator_count": 2879, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "1437 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "62752a3d78ce35783bfc85cc", "name": "SafeFrame Container", "description": "If you want to know what is going to happen when you create a non-iterable object, try these three pieces of code in the form of a new \"word\" or \"phrase\".", "modified": "2022-06-05T00:03:45.266000", "created": "2022-05-06T14:01:33.267000", "tags": [ "public", "typeof", "typeof define", "array", "typeerror", "typeof symbol", "error", "typeof enulle", "sdkversion", "internal", "date", "cnzzdata", "czuuid", "umdistinctid", "typeof e", "typeof t", "version", "swiper", "most", "copyright", "mit license", "april", "trident", "win32", "class", "lh", "vd", "function", "overlaylevel", "zdhxiong", "customevent", "symbol", "object", "string", "number", "null", "uint8array", "typeof b", "iframe", "android", "embed", "meta", "0x14a", "0x104", "0x97", "0xe1", "0x228", "0x12b", "0x14e", "0xf5", "0x11a", "0xc6", "sxa0", "typeof d", "closure library", "array int8array", "b1342177279", "regexp", "typeof r", "pseudo", "child", "typeof n", "template", "void", "this", "ienew ca", "quota", "aafunction", "dafunction", "gc", "trackpageview", "trackevent", "gtmmdcvhgd", "node", "element", "path", "reduceright", "p420", "gc3w7t6h5qw", "kafunction", "fafafa", "xlfunction", "kkfunction", "nkfunction", "qkfunction", "rkfunction", "skfunction", "span", "edge", "bad idp", "bad event", "crios", "invalid attempt", "afunction", "ufunction", "kfunction" ], "references": [ "xfe-URL-himado.com-stix2-2.1-export.json", "xfe-IP-146.148.236.187-stix2-2.1-export.json", "xfe-URL-Psychz.net-stix2-2.1-export.json", "https://cdn.ampproject.org/rtv/012204221712000/amp4ads-host-v0.js", "https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.iTmf4rxOyWc.O/m=auth2/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-LTnDn-AS2QlMWYZdnaV1OuFR7Iw/cb=gapi.loaded_0?le=scs", "https://securepubads.g.doubleclick.net/gpt/pubads_impl_page_level_ads_2022050201.js", "https://www.googletagmanager.com/gtag/js?id=G-C3W7T6H5QW&l=dataLayer&cx=c", "https://www.googletagmanager.com/gtm.js?id=GTM-MDCVHGD", "https://www.googletagmanager.com/gtag/js?id=UA-122335014-2", "https://himado.com/heihei/layui/layui.all.js", "https://securepubads.g.doubleclick.net/tag/js/gpt.js", "https://himado.com/cdn-cgi/challenge-platform/h/g/scripts/invisible.js?ts=1651842000", "https://securepubads.g.doubleclick.net/gpt/pubads_impl_2022050201.js", "https://himado.com/heihei/node_modules/mdui/dist/js/mdui.min.js", "https://himado.com/heihei/js/swiper.min.js", "https://cdn.onesignal.com/sdks/OneSignalSDK.js", "https://c.cnzz.com/core.php?web_id=1280305902&t=z", "https://s4.cnzz.com/z_stat.php?id=1280305902&web_id=1280305902", "https://www.gstatic.com/firebasejs/8.1.2/firebase-app.js", "https://281cecd8ae73dff542e13679e60d5fb9.safeframe.googlesyndication.com/safeframe/1-0-38/html/container.html", "xfe-URL-Cnzz.com-stix2-2.1-export.json", "xfe-URL-Aliyun.com-stix2-2.1-export.json" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [ { "id": "Lh", "display_name": "Lh", "target": null }, { "id": "Gc", "display_name": "Gc", "target": null }, { "id": "ReduceRight", "display_name": "ReduceRight", "target": null }, { "id": "Vd", "display_name": "Vd", "target": null } ], "attack_ids": [ { "id": "T1059", "name": "Command and Scripting Interpreter", "display_name": "T1059 - Command and Scripting Interpreter" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 16, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "adjadex1@gmail.com", "id": "187163", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 2262, "URL": 8251, "FileHash-SHA256": 1416, "domain": 2979 }, "indicator_count": 14908, "is_author": false, "is_subscribing": null, "subscriber_count": 71, "modified_text": "1456 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "628e33df0169fe33f79b766b", "name": "Seems to be coming from space . Space malware? \u4e91\u9002\u914d(AllMobilize Inc.) --\u4f01\u4e1a\u6d4f\u89c8\u5668\u53ca\u79fb\u52a8\u5316\u89e3\u51b3\u65b9\u6848\u4f9b\u5e94\u5546 | \u4e91\u9002\u914d", "description": "AllMobilize, Amaze, and all its partners - all of them with the same name - are now available to use on Facebook, Twitter, Instagram and other social media platforms, including Facebook.", "modified": "2022-05-25T13:49:19.876000", "created": "2022-05-25T13:49:19.876000", "tags": [ "ebeef5", "dcdfe6", "e64552", "helvetica", "ffffff", "pingfang sc", "helveticaneue", "arial", "microsoft yahei", "45deg", "post", "sqdl", "sqhz", "eptyzj", "zjxcys", "doform", "modernizr", "typeradio", "tagnames", "boolean", "date", "array", "error", "typeof t", "dtft", "amaze ui", "function", "regexp", "d1dd2", "mstransitionend", "team", "android", "february", "april", "june", "august", "void", "null", "type", "elem", "index", "handle", "sizzle", "check", "target", "hooks", "prop", "copy", "class", "mark", "internal", "stack", "false", "code", "accept", "seed", "first", "body", "jquery", "pass", "bind", "core", "local", "verify", "done", "find", "inject", "possible", "hold", "trigger", "camel", "bubble", "window", "middle", "capture", "iframe", "fall", "stop", "panic", "back", "speed", "grab", "install", "open", "invalid request", "button", "input", "cpu os", "span", "label", "this", "trident", "pykey", "eventparams", "object", "event", "infinity", "pykeye", "string", "typeof", "typeof e", "typeof r", "typeof s", "typeof console", "contenttype", "number", "\u4e91\u9002\u914d\uff0c\u4f01\u4e1a\u79fb\u52a8\u5316\uff0c\u4f01\u4e1a\u79fb\u52a8\u5316\u89e3\u51b3\u65b9\u6848\uff0c\u4e91\u9002\u914d\u8de8\u5c4f", "\u4e91\u9002\u914d\u7f51\u7ad9\u9002\u914d", "\u4e91\u9002\u914d\u8de8\u5c4f\u4e91", "\u4e91\u9002\u914d\u8de8\u5c4f\u5e94\u7528", "\u4f01\u4e1aoa\u79fb\u52a8\u5316\u3001\u4f01\u4e1a\u79fb\u52a8\u95e8\u6237\u3001\u79fb\u52a8\u5e94\u7528\u7ba1\u7406\u3001\u79fb\u52a8\u5e94\u7528\u5e73\u53f0", "xcloud", "amaze", "sdp enterplorer", "siebel domino", "siebel", "domino", "allmobilize", "apipc", "ui amaze" ], "references": [ "https://www.yunshipei.com/", "https://aiff.cdn.bcebos.com/sensors%2Fonline%2Fsa-sdk-javascript-1.14.24%2Fsensorsdata.min.js", "https://stats.ipinyou.com/adv?a=SR..sxcg_4d0DhagaJWCLj_ZdX&u=https%3A%2F%2Fwww.yunshipei.com%2F&rd=1653485491040&v=2&e=sr%3D390x844%26sc%3D32-bit%26je%3Dfalse%26lg%3Den-us%26vb%3D1%26did%3D%26dt%3D%26ps%3D390x3885%26vp%3D390x664%26ec%3DUTF-8%26vbt%3D1822%26sp%3D0%26ur%3D%26st%3D%26ev%3Dvg", "https://goutong.baidu.com/site/270/98c14a71a44014f7aa9d23449a55ae8f/b.js?siteId=3064033", "https://stats.ipinyou.com/presadv?a=SR..sxcg_4d0DhagaJWCLj_ZdX&cb=py.cb", "https://fm.ipinyou.com/j/a.js", "https://www.yunshipei.com/assets/js/jquery.js", "https://www.yunshipei.com/assets/js/amazeui.min.js", "https://www.yunshipei.com/assets/js/app.min.js", "https://sgoutong.baidu.com/embed/1652930761/asset/embed/css/mobile/main.css" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [ { "id": "T1056", "name": "Input Capture", "display_name": "T1056 - Input Capture" }, { "id": "T1059", "name": "Command and Scripting Interpreter", "display_name": "T1059 - Command and Scripting Interpreter" }, { "id": "T1134", "name": "Access Token Manipulation", "display_name": "T1134 - Access Token Manipulation" }, { "id": "T1140", "name": "Deobfuscate/Decode Files or Information", "display_name": "T1140 - Deobfuscate/Decode Files or Information" }, { "id": "T1547", "name": "Boot or Logon Autostart Execution", "display_name": "T1547 - Boot or Logon Autostart Execution" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "adjadex1@gmail.com", "id": "187163", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 652, "URL": 1482, "domain": 242, "FileHash-SHA256": 142, "FileHash-MD5": 3 }, "indicator_count": 2521, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "1466 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6266f7e0e0264cba210a4e9e", "name": "intel gained from a spam text", "description": "var b[f]=g, if b(f) is not allowed to reach its maximum by the end of a set, then a.b(b) will be able to do so at the same time as a", "modified": "2022-05-25T00:04:03.622000", "created": "2022-04-25T19:34:56.772000", "tags": [ "array", "typeerror", "symbol", "null", "string", "iterator", "object", "error", "boolean", "function", "service", "date", "phonenumber", "facebook", "meta", "typeof e", "typeof u", "typeof window", "es modules", "use esm", "webkit", "component", "typeof", "typeof y", "typeof symbol", "suspense", "context", "forwardref", "unknown", "4096", "typeof n", "promise", "weakmap", "dataview", "typeof t", "webpackrequire", "modulenotfound", "e1342177279", "array int8array", "loanup", "insurance", "group", "health", "solutions", "policy", "site", "america", "company", "life", "plan", "direct", "media", "alliance", "click", "team", "never", "advantage", "general", "light", "february", "april", "june", "august", "footer", "protect", "banker", "explorer", "fast", "martin", "union", "carrier", "next", "colony", "energy", "empire", "gerber", "philadelphia", "hippo", "king", "agent", "mercury", "moss", "premium", "nextgen", "oscar", "phoenix", "loans", "pure", "ramsey", "ranger", "solar", "titan", "tristate", "viking", "easy", "push", "code", "stop", "carriers", "live", "lucky", "moral", "story", "back", "lfunction", "dfunction", "cfunction", "typeof self", "number", "copyright", "closure library", "xdfunction", "cdfunction", "ddfunction", "bded", "kefunction", "reduceright", "gj9pcw0f6jv", "regexp", "r420", "uint8array", "typeof d", "void" ], "references": [ "https://www.googletagmanager.com/gtag/js?id=G-J9PCW0F6JV", "https://www.googletagmanager.com/gtag/js?id=UA-185991747-1", "https://insurancerateusa.com/polyfill-036b4a134d8725752ba0.js", "xfe-URL-insurancerateusa.com-stix2-2.1-export.json", "https://insurancerateusa.com/app-74647f151b541f3098c2.js", "https://insurancerateusa.com/bfcc7b67-0b189ba6da3fc3ae8b88.js", "https://insurancerateusa.com/94297995-69529ad7536f090aa776.js", "https://insurancerateusa.com/3bea8d40-8926f4790c0b3689a361.js", "https://insurancerateusa.com/framework-19eddc0d879a49dfe606.js", "https://insurancerateusa.com/webpack-runtime-f014a3267add02a94afb.js", "https://connect.facebook.net/signals/config/3689470801106673?v=2.9.57&r=stable" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [ { "id": "ReduceRight", "display_name": "ReduceRight", "target": null } ], "attack_ids": [ { "id": "T1059", "name": "Command and Scripting Interpreter", "display_name": "T1059 - Command and Scripting Interpreter" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "adjadex1@gmail.com", "id": "187163", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 615, "URL": 2246, "FileHash-SHA256": 823, "domain": 717, "CVE": 1, "email": 4, "FileHash-MD5": 5, "FileHash-SHA1": 1 }, "indicator_count": 4412, "is_author": false, "is_subscribing": null, "subscriber_count": 70, "modified_text": "1467 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "62616627ee302d24b23523c3", "name": "enom.com & 4vendeta.com - ReduceRight malware hosting/creation", "description": "New RegExp(M) is a new type, and it will change any of the elements to the same type if you want to add them to your HTML page or add a third element.", "modified": "2022-05-21T00:03:44.725000", "created": "2022-04-21T14:11:51.629000", "tags": [ "tbody", "span", "thead", "tfoot", "multiple", "type", "href", "input", "halflings", "gradienttype1", "twitter", "false", "fontface", "fatface", "woff2", "u0259", "u1e001eff", "u2020", "u20a020ab", "u20ad20cf", "u2113", "u2c602c7f", "typesubmit", "function", "typeof c", "formdata", "this", "typeof define", "null", "typeof f", "object", "boolean", "typeof module", "error", "reflect", "math", "regexp", "number", "array", "typeerror", "string", "symbol", "typeof e", "typeof t", "class", "attr", "pseudo", "child", "js foundation", "account", "open", "navitem", "text", "mainnav", "click", "blank", "copyright", "u0027", "value", "body", "firefox", "enum", "html", "msie", "applewebkit", "traceconsole", "form", "iframe", "legend", "nonmsdombrowser", "callbackindex", "callbackframeid", "eventtarget", "eventargument", "validation", "explorer", "target", "plugin", "bootstrap", "https", "conflict", "focus", "next", "trigger", "checkbox", "delta", "scroll", "sourceid", "date", "sessiontoken", "sessionexpires", "void", "rangeerror", "utf16", "illegal input", "global", "chrome", "opredge", "opera", "safari", "version", "sxa0", "browser", "typeof require", "dom node", "typeof d", "component", "typeof h", "bubble", "reduceright", "script", "typeof n", "jhnew ia", "gtm5sn6brv", "path", "host", "trackpageview", "gw8yd4p2eny", "select", "strong", "uint8array", "android", "verify", "stop", "enterprise", "widget", "window", "generator", "reload", "r300", "caca", "closure library", "xdfunction", "adfunction", "cdfunction", "ddfunction", "bded", "please", "typeemail", "email", "jarallaxinner", "webkit", "property", "transform", "trident", "edge", "ipodi", "ipadi", "androidi", "blackberryi", "windows phonei", "xfunction", "pfunction", "wfunction", "show navigation", "mjquery", "typeof", "defaulttype", "hidden", "show", "shown", "startr", "endr", "federico zivolo", "distributed", "mit license", "statict", "flip" ], "references": [ "xfe-IP-78.142.35.163-stix2-2.1-export.json", "xfe-URL-Enom.com-stix2-2.1-export.json", "xfe-URL-4vendeta.com-stix2-2.1-export.json", "https://4vendeta.com/assets/js/jquery.min.js", "https://4vendeta.com/assets/js/popper.min.js", "https://4vendeta.com/assets/js/bootstrap.min.js", "https://4vendeta.com/assets/js/meanmenu.min.js", "https://4vendeta.com/assets/js/parallax.min.js", "https://4vendeta.com/assets/js/ajaxchimp.min.js", "https://www.googletagmanager.com/gtag/js?id=UA-92521958-1", "https://www.googletagmanager.com/gtag/js?id=G-W8YD4P2ENY&l=dataLayer&cx=c", "https://www.gstatic.com/recaptcha/releases/QENb_qRrX0-mQMyENQjD6Fuj/recaptcha__en.js", "https://www.googletagmanager.com/gtm.js?id=GTM-5SN6BRV", "https://static.zdassets.com/ekr/snippet.js?key=7342b695-e394-4f25-89a0-da9d262a48da", "https://cp.enom.com/js/jquery-3.5.1.min.js", "https://cp.enom.com/responsive/_js/knockout-3.3.0.min.js", "https://cp.enom.com/js/global-functions.js", "https://cp.enom.com/js/punycode.min.js", "https://cp.enom.com/js/jquery.disableonsubmit.min.js", "https://cp.enom.com/js/jquery.cookie.min.js", "https://cp.enom.com/js/cart.minicart.min.js", "https://cp.enom.com/js/openWin.min.js", "https://cp.enom.com/js/jquery.jgrowl.min.js", "https://cp.enom.com/scripts/Session.min.js", "https://cp.enom.com/responsive/_js/init.min.js", "https://cp.enom.com/responsive/_js/bootstrap.js", "https://cp.enom.com/WebResource.axd?d=6rtXrDcnyiYD-9dFDFOkxTRcPVSrAN8fR-cHKzNqPTy7bHic-2LLMHDnielTzEI-sd1KplHrRBudcZJOm0-lxubO7k41&t=637453818340000000", "https://cp.enom.com/ScriptResource.axd?d=fVjQa-0YyNqO6JmV36bw6eBJdTjE2YSdtcunOWcKYcBNn73MOJKQA_rxX3YMhcxLTgyDsGTKy0p9NEPvxzpqEpBKtm3GLb2GgI1LFYMC0Xr2lh71ZCttzgNGFnc5mS_Fc_DY5UH0M19Mr958h1jvmK4kzAM1&t=363be08", "https://cp.enom.com/ScriptResource.axd?d=lDjPFfAIWSrEAVNgTHTrISQmLEFmHAaibvNJQuGRZDbWpGFPLrFwaGVpjCUsI6HkqzbpwmaAa0cJCrq8f0eqEvIsQM8lvN_dVYVyESnohON4oTvdMZHDmwG83uJA4m2oqykP8TTTSIeV2oaNrlIXaX8cOxC5Cv6aGmjpdB2u-227wdn30&t=363be08", "https://cdn.optimizely.com/js/26241557.js", "https://cp.enom.com/verisign-seal.htm", "https://cp.enom.com/global/TopMenu.ascx.js", "http://alp-vision.com/wp-includes/js/jquery/jquery.min.js?ver=3.5.1", "http://alp-vision.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.4.4", "http://alp-vision.com/wp-content/cache/autoptimize/js/autoptimize_78b4f9b28399aa3c8a405e45931ad058.js", "http://alp-vision.com/wp-includes/css/dist/block-library/style.min.css?ver=5.7.6", "http://fonts.googleapis.com/css?family=Abril+Fatface%3Aregular&subset=latin%2Ccyrillic&ver=5.7.6", "http://alp-vision.com/wp-content/themes/alp-vision/css/bootstrap.css?ver=1.0" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [ { "id": "ReduceRight", "display_name": "ReduceRight", "target": null } ], "attack_ids": [ { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" }, { "id": "T1059", "name": "Command and Scripting Interpreter", "display_name": "T1059 - Command and Scripting Interpreter" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "adjadex1@gmail.com", "id": "187163", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 2989, "hostname": 1208, "domain": 634, "FileHash-SHA256": 302 }, "indicator_count": 5133, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "1471 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "626224efc28c918470fa07ed", "name": "inflect.com - malware", "description": "var e,t, r.o, is a new type of code, which can be used to build a website, but can't do so without a special code.. and the following:", "modified": "2022-05-21T00:03:44.725000", "created": "2022-04-22T03:45:51.681000", "tags": [ "object", "typeof symbol", "typeerror", "html", "body", "software", "pops", "width", "error", "provider", "null", "code", "trident", "trcomponent", "typeof t", "referenceerror", "component", "date", "array", "header", "contact", "backspace", "next", "footer", "copy", "february", "april", "june", "august", "open", "project", "this", "unknown", "heapdeps", "number", "hki3", "ogr1", "function", "regexp", "typeof self", "typeof", "facebook pixel", "pixel code", "symbol", "iterator", "constantvalue", "globalvariable", "facebook", "string", "boolean", "service", "phonenumber", "meta", "typeof e", "sesprops", "nthis", "href", "image", "input", "class", "logger", "download", "target", "form", "push" ], "references": [ "xfe-URL-inflect.com-stix2-2.1-export.json", "https://cdn.heapanalytics.com/js/heap-2001511295.js", "https://connect.facebook.net/signals/config/534474930374151?v=2.9.57&r=stable", "https://connect.facebook.net/en_US/fbevents.js", "https://cdn.segment.com/next-integrations/integrations/vendor/commons.54701049fd6fb8497e9e.js.gz", "https://cdn.segment.com/next-integrations/integrations/heap/2.1.2/heap.dynamic.js.gz", "https://storage.googleapis.com/inflect-frontend-assets/adb460de2098568d4c3580de1fde2f6690bcbd04/_next/static/s0TytVz2d0zNgb~bjg~~D/pages/search.js" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [ { "id": "TrComponent", "display_name": "TrComponent", "target": null } ], "attack_ids": [ { "id": "T1059", "name": "Command and Scripting Interpreter", "display_name": "T1059 - Command and Scripting Interpreter" }, { "id": "T1547", "name": "Boot or Logon Autostart Execution", "display_name": "T1547 - Boot or Logon Autostart Execution" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "adjadex1@gmail.com", "id": "187163", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1064, "FileHash-SHA256": 222, "hostname": 162, "domain": 294 }, "indicator_count": 1742, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "1471 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6261fd6a8d527fa569351e63", "name": "Malware hosting - unrealservers.net & heymman.com", "description": "function S.name, a.com, has been added to the end of a page to make sure it does not end up in an unauthorised place. and it will not get any more.", "modified": "2022-05-21T00:03:44.725000", "created": "2022-04-22T00:57:14.125000", "tags": [ "e2f0fc", "fd7a07", "f0482b", "gradienttype0", "a5bcce", "helvetica", "negative", "arial", "bcd3e4", "style sheet", "nonce", "script", "please do", "not copy", "and paste", "this code", "cgrecaptchacfg", "ngrecaptcha", "recaptchaapi", "render", "onload", "select", "error", "strong", "uint8array", "string", "null", "number", "function", "input", "array", "iframe", "date", "android", "verify", "stop", "this", "span", "enterprise", "click", "widget", "window", "form", "generator", "reload", "void", "dd2d2f", "e8e8e8", "d8d8d8", "fcfcfc", "e5e5e5", "lucida", "unicode", "lucida grande", "f9f9f9", "footer", "unavailable", "ngsanitize", "order now", "invalid", "snippet", "month", "hours", "fullyear", "regexp", "eeee", "mmmm d", "mena", "christ" ], "references": [ "xfe-URL-heymman.com-stix2-2.1-export.json", "https://ajax.googleapis.com/ajax/libs/angularjs/1.4.8/angular.min.js", "https://ajax.googleapis.com/ajax/libs/angularjs/1.4.2/angular-sanitize.js", "https://www.heymman.com/script.js", "https://www.heymman.com/style/main.css", "https://www.gstatic.com/recaptcha/releases/QENb_qRrX0-mQMyENQjD6Fuj/recaptcha__en.js", "https://www.google.com/recaptcha/api.js", "https://unrealservers.net/master.css", "xfe-URL-Ndevix.com-stix2-2.1-export.json", "xfe-URL-Misk.com-stix2-2.1-export.json" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [ { "id": "T1059", "name": "Command and Scripting Interpreter", "display_name": "T1059 - Command and Scripting Interpreter" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "adjadex1@gmail.com", "id": "187163", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 427, "URL": 1183, "FileHash-SHA256": 162, "domain": 441, "email": 4 }, "indicator_count": 2217, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "1471 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "references": [ "", "ceeb.get.js", "https://ajax.googleapis.com/ajax/libs/angularjs/1.4.8/angular.min.js", "CAP-notify-monthly-report.ftl", "uofa-engg-coop-model.json", "guidelines-student.get.html.ftl", "ADVendFundReportFiling.js", "TLS_LICENSE", "appointmentLandingPage.get.desc.xml", "graduate-student-records-site.json", "tamis-model.json", "roMoveCompletedBackScan.js", "guideline-reports.js", "2024-02-07-log.txt", "psAuthorizedApprover.get.desc.xml", "https://www.googletagmanager.com/gtm.js?id=GTM-MDCVHGD", "dbivport.h", "https://cp.enom.com/verisign-seal.htm", "transport", "ro-method-receipt.json", "2024-01-17-log.txt", "psDeptSingle.get.json.ftl", "triggerapsprocess.post.desc.xml", "pf.conf", "uAlbertaWorkflowGeneral.xml", "hrsCreateFolder.js", "uofa-engg-model.json", "roCreateEducationalCSV.js", "wf-email.html_nl.ftl", "ADV-notify-terms-types.ftl", "advCreateFolderScheduled.js", "https://sc-static.net/scevent.min.js", "following-email.html_de.ftl", "coi-employee.get.desc.xml", "ro-relationship-to-institution.json", "csh.login", "roSlateDocumentExport.js", "foConfig.json", "http://alp-vision.com/wp-includes/css/dist/block-library/style.min.css?ver=5.7.6", "uofa-pc-model.xml", "lawCreateFolderRestricted.js", "ro-test-id.json", "search-match-list.get.html.ftl", "notify_user_email_nl.html.ftl", "cap-file-load.post.json.ftl", "apsApplicationList.get.desc.xml", "invite-email_fr.html.ftl", "epsb.get.html.ftl", "rmScriptThrowError.js", "search-match-dob-add.js", "pllc-security-list.json", "review-nextdate.get.html.ftl", "rso-financials-doc-type.json", "apptStepOneStarter.post.json.ftl", "https://www.hotjar.com/_next/static/chunks/webpack-ca4d94cab12a165a123f.js", "https://cdn.optimizely.com/datafiles/HgHVKrf9ZD2dsZYVFb9JnD.json/tag.js", "https://www.yunshipei.com/assets/js/amazeui.min.js", "science-security-list.json", "reappointment-reminder-schedule.js", "2024-03-15-log.txt", "2024-02-01-log.txt", "guidelines-supervisor-revision.get.js", "nsFolderCreateSchedule.js", "APSWorkflowInfo.put.js", "etcHosts.csv", "augConfig.json", "faculty-of-engineering-site.json", "https://cdn.segment.com/next-integrations/integrations/heap/2.1.2/heap.dynamic.js.gz", "https://www.googletagmanager.com/gtag/js?id=UA-122335014-2", "nanofab", "start-pooled-review-workflow.js", "https://static.hotjar.com/c/hotjar-2086874.js?sv=6", "2024-05-19-log.txt", "folderCreateUtilAA.js", "https://www.virustotal.com/graph/embed/g2948a5c332eb4614973872a8243215f6aa1fba79749a48ea92806e9b934db91f?theme=dark", "invite-email.html.ftl", "eTranscriptVersionModifierFix.js", "roMoveCompleted.js", "2024-05-16-log.txt", "enggCoopDocSetup.json", "fix_employee_names.js", "PeopleSoft-eTranscript-XML-PDF.js", "customScript.js", "guidelines-student-revision.get.html.ftl", "chs-upload.get.js", "main.cf", "fgsr-exam-list.json", "rmOOABackgroundInformationFiling.js", "2024-06-03-log.txt", "faculty-of-science-site.json", "irbrc", "2024-03-08-log.txt", "review-supervisorv2.get.js", "appointmentStart.get.js", "roScript5.js", "roScanningMetadataBackScan.js", "wfh-seniormanager.get.desc.xml", "uappol-functions.js", "kexts.txt", "publicSiteFileViewer.get.js", "roFolderCreateLDAPLookup.js", "emailbody_textplain_share_es.ftl", "activities-email.ftl", "symplexMoveToFolder.js", "getSlateId.get.desc.xml", "fgsrv2DocSetup.json", "review-supervisorv2.get.html.ftl", "businessCreateFolder.js", "addSearchMatchDocumentType.js", "advScriptDaily.js", "wfh-manager.get.js", "roAddAspectAndMoveAFA.js", "uofa-aps-model.json", "ro-search-match.json", "roScript3.js", "emailbody_textplain_alfresco_de.ftl", "alesFileShareFolder.js", "roScanningMetadata.js", "taskForm.get.desc.xml", "advScript1.js", "uamytasks.config.get.js", "enggCoopCreateFolderRule.js", "apptStepOneSave.post.js", "sciCreateFolder.js", "notify_user_email_it.html.ftl", "review-comm01.get.js", "2024-03-02-log.txt", "uofapersonid.get.desc.xml", "roEtranscriptPDFConverter.js", "access", "uofa-cap-model.json", "uofa-rso-model.xml", "review-studentv2.get.js", "myTaskDownload.js", "search-match-result.get.html.ftl", "2024-03-14-log.txt", "https://www.virustotal.com/gui/collection/3f5e2fc684dd1957828c6f9c0d1b7d13524218c8402a4a0a91e9135fb662f127/iocs", "savetask.post.js", "arts-security-list.json", "2024-02-21-log.txt", "EmailNotifCHSStudent.js", "2024-03-03-log.txt", "chsAdminStuView.get.js", "modfiyOrUpdatePropertyfromCSV.js", "folderCreateDocumentADV.js", "hook_op_check.h", "everyDay1H05MinAM.js", "clioToAcsDocUpdate.js", "search-match-list.get.js.old", "every38MinPastHourBetween4PM12PM.js", "general_example.ftl", "following-email_it.html.ftl", "enggCoopBulkUpload.js", "missingDocumentList-csv.js", "taskForm.get.json.ftl", "chs-studentExpired.ftl", "newsyslog.conf", "siteFileViewer.get.html.ftl", "https://s4.cnzz.com/z_stat.php?id=1280305902&web_id=1280305902", "2024-02-14-log.txt", "readme_fr.html", "wf-email_es.html.ftl", "review-comm03.get.js", "battery.csv", "roFolderCreateLDAPLookup_no_notificatiion.js", "assocModel.xml", "chsCreateFolderRule.js", "capeamergedoc.get.desc.xml", "psAudit-model.xml", "ephesoft-educational.xml", "augDocSetup.json", "roslateapplist.get.desc.xml", "https://cdn.taboola.com/libtrc/unip/1331749/tfa.js", "lawFileScanned.js", "hrs-bulkId.json", "2024-03-22-log.txt", "sfs-ussl-report-status.json", "review-comm01v2.get.html.ftl", "fvca-reminder-email.ftl", "fixCheckout.js", "capinfo.get.html.ftl.backup", "education-security-list.json", "rso-activation-report-doc-type.json", "generalSchedule.js", "https://cdn.onesignal.com/sdks/OneSignalSDK.js", "https://www.googletagmanager.com/gtag/js?id=G-W8YD4P2ENY&l=dataLayer&cx=c", "coi-employee.get.js", "2024-01-12-log.txt", "uappolDocSetup.json", "readme.html", "2024-04-15-log.txt", "2024-02-16-log.txt", "roScript7.js", "review-student.get.html.ftl", "2024-04-02-log.txt", "2023-12-31-log.txt", "guidelines-start.get.desc.xml", "every47MinPastHourBetween4PM12PM.js", "completetask.post.desc.xml", "review-comm03v2.get.desc.xml", "tamis-model.xml", "getTaskFilter.get.desc.xml", "wf-email.html_it.ftl", "uofa-workflowGeneral.json", "certificates.csv", "engineering-doc-list.json", "uofa-common-model.xml", "AFA_MainFileOnly.post.js", "roAddSearchMatchAspect.js", "every2MinStartingAt1MinPastHour.js", "uAlbertaWorkflowGeneral.json", "roScript2.js", "fvca-corrections-email.ftl", "advEndowmentName.get.js", "bounce.cf.default", "pllcCreateFolder.js", "gtaGraStatus.post.desc.xml", "following-email_de.html.ftl", "2024-01-08-log.txt", "invite-email_de.html.ftl", "advEntityName.get.html.ftl", "review-nextdate.get.desc.xml", "fgsrMigrationScript.js", "augCreateFolderRestricted.js", "review-comm03.get.desc.xml", "appt-final-reminder.ftl", "hrsbsConfig.json", "uawfh-model.xml", "2023-12-01-log.txt", "deployWebServiceDescriptor.js", "chs-document-status.json", "claimtask.put.desc.xml", "chsAdminStuView.get.desc.xml", "enggCreateFolderRule.js", "chsConfig.js", "2024-01-29-log.txt", "roEtranscriptsBundleTest.js", "https://viz.greynoise.io/ip/analysis/2610b635-c05a-4f28-a112-7278de8fdf9b", "rc.common", "facopr-model.xml", "consignoMessage.get.js", "sciCreateFolderPublic.js", "hrsbs-review-month.json", "notify_user_email_ooa_failed.ftl", "hrsScanned.js", "https://www.virustotal.com/gui/collection/7774b0b7593e64e019df4e783911800bb322ec28a0f9eb3792fe6f75755f3b88/iocs", "fo-emergency-response-manual.json", "folderCreateUtil.js", "sipConfig.csv", "ClioUpdateScheduledJob.js", "old-AlfrescoToolkit.conf", "following-email_fr.html.ftl", "uofapersonid.get.js", "uofa-chs-agreements-model.json", "gettytab", "ales-doc-list.json", "fgsr-model.xml", "hrsbs-function-module.json", "AFA_MainFileOnly.post.desc.xml", "apptStatusDocUpdate.post.js", "CAPGenerateMonthlyReport.js", "every16MinPastHour.js", "security-group-model.xml", "uofa-native-studies-model.json", "istPerformanceReviewCreateFolder.js", "uarmm-supplement-scanning.xml", "2024-01-14-log.txt", "review-comm03v2.get.html.ftl", "getapsdbid.get.desc.xml", "uofa-slate-model.xml", "apsApplicationList.get.js", "https://himado.com/heihei/node_modules/mdui/dist/js/mdui.min.js", "xfe-URL-himado.com-stix2-2.1-export.json", "uofa-extension-model.xml", "uofa-pc-model.json", "qaProcess.js", "consignoWebhook.post.js", "guidelines-supervisor-revision.get.html.ftl", "review-startv2.get.desc.xml", "gettasks.get.json.ftl", "ua-audit-generic-model.xml", "hrs-employeeApprovedDeductions.json", "2024-03-20-log.txt", "test return value.js", "routableGroups.get.js", "facopr-planTypes.json", "xfe-URL-insurancerateusa.com-stix2-2.1-export.json", "cap-file-load.post.desc.xml", "2024-02-20-log.txt", "https://www.heymman.com/style/main.css", "invite_user_email.ftl", "createReportRecursiveGroupsAndUsersInASite.js", "review-comm02.get.html.ftl", "ales-security-list.json", "2024-02-22-log.txt", "uofa-cap-model.xml", "advScriptWeekly.js", "businessDaily.js", "siteFileViewerConfig.js", "eTranscriptTemp.js", "auto_master", "updatevariables.post.js.notused", "APSWorkflowStatus.put.html.ftl", "uaqa-model.json", "https://www.gstatic.com/recaptcha/releases/QENb_qRrX0-mQMyENQjD6Fuj/recaptcha__en.js", "appointmentLandingPage.get.js", "https://cp.enom.com/responsive/_js/bootstrap.js", "dbi_sql.h", "chs-emailNotification.json", "moveToFoldersRetainTitle.js", "uofa-hrsbs-model.json", "main.cf.proto", "2024-03-25-log.txt", "roAddBundlingAspect.js", "xfe-URL-Enom.com-stix2-2.1-export.json", "categorysearch.get.html.ftl", "new-user-email_fr.html.ftl", "xfe-IP-78.142.35.163-stix2-2.1-export.json", "ua-error-model.xml", "https://cp.enom.com/scripts/Session.min.js", "businessConfig.json", "canada-provinces-list.json", "businessDocSetup.json", "apptStatusDocUpdate.post.desc.xml", "chs-studentUploadNotification.ftl", "MCPeerID.h", "emailbody_textplain_alfresco_ja.ftl", "augustana-doc-list.json", "ua-audit-generic-model.json", "eSignDownload.get.desc.xml", "wfh-form.get.html.ftl", "2024-02-27-log.txt", "uappol-category-heirarchy.json", "emailbody_textplain_alfresco_es.ftl", "user_launchagents.txt", "system-overview.html", "fgsrCreateAPSProcessFromCSV.js", "usbDevices.csv", "chs-agreements-site.json", "https://cp.enom.com/js/jquery-3.5.1.min.js", "faculty-of-arts-site.json", "uofa-aps-model.xml", "JSON.js", "https://en.fofa.info/result?qbase64=ZWRtb250b25wb2xpY2UuY2E%3D", "AlfrescoToolkit.conf", "tasklist.get.js", "https://cdn.cookielaw.org/scripttemplates/6.5.0/otBannerSdk.js", "kofaxMetadataMergeMissing.js", "uofa-ales-model.xml", "schoolboard.get.desc.xml", "2024-03-21-log.txt", "hrs-site.json", "2024-05-11-log.txt", "review-comm02v2.get.html.ftl", "review-student-revision.get.html.ftl", "uofa-fo-model.xml", "https://4vendeta.com/assets/js/meanmenu.min.js", "appointment-report.js", "ldap.h", "roslateexists.get.js", "IDS Detections: Win32/Enosch.A gtalk connectivity check | W32/MoonLight.worm User-Agent (HellSpawn)", "Trump Support campaign \u2022_\u2022 lantana-mgmt.washington.palantircloud.com \u2022 containers-reishi.palantirfedstart.com", "roScript8.js", "psDeptSingle.get.js", "uofaDepartmentList.get.js", "cbsr", "uofa-chs-agreements-model.xml", "lawCreateFolderRule.js", "https://www.googletagmanager.com/gtm.js?id=GTM-5SN6BRV", "Script1.js", "content-negotiation.html", "2024-05-06-log.txt", "new-user-email_it.html.ftl", "savetask.post.json.ftl", "appt-halfway-reminder.ftl", "report_rmr_destructionReport.html.ftl", "ftpusers", "csh.cshrc", "scans.get.html.ftl", "school-of-business-site.json", "review-comm02.get.desc.xml", "fgsr-site.json", "transcript-model.xml", "scans.get.js", "enggFileScanned.js", "2024-02-02-log.txt", "AFA_Main.post.json.ftl", "https://l.clarity.ms/s/0.6.34/clarity.js", "uappolCategoryHeirarchy.get.json.ftl", "roScript6.js", "LICENSE", "coi-start.get.desc.xml", "2024-02-08-log.txt", "2024-01-24-log.txt", "demo-site-site.json", "paperFileUtil.get.html.ftl", "command-search.js", "wfh-seniormanager.get.js", "symplexUtils.js", "2024-03-11-log.txt", "uofaDepartmentName.get.desc.xml", "activities-email_fr.ftl", "native-studies-security-list.json", "following-email.html_ja.ftl", "apfs_boot_mount.tbd", "pllcDocSetup.json", "everyDay7H45MinAM.js", "hrs-benefit-report.js", "uofa-chs-model.json", "alesCreateFolderRestricted.js", "crashes.csv", "AirPlayReceiver.tbd", "FandO-Organizations.json", "siteFileViewer.get.js", "notify_user_email_de.html.ftl", "2024-03-04-log.txt", "archivedItems.js", "departmentAdhocTask.html.ftl", "2024-05-21-log.txt", "avmbrowse.get.desc.xml", "Apple Store verified drop down breach \u2018Apple took a screenshot of pages\u201d", "https://4vendeta.com/assets/js/parallax.min.js", "emailbody_textplain_alfresco_fr.ftl", "2024-04-17-log.txt", "chsAgreementCreateFolder.js", "https://www.yunshipei.com/assets/js/jquery.js", "fgsrCreateApsFromCSV.json", "addFolderMetadata.js", "law-doc-list.json", "uofaDepartmentName.get.html.ftl", "getTaskFilter.get.json.ftl", "uofa-law-model.xml", "assignuser.put.desc.xml", "search-match-result.get.js", "foCreateFolderRule.js", "gettasks.get.desc.xml", "alesFolderCreateSchedule.js", "2024-03-24-log.txt", "roTagAndFileRenderedPDFs.js", "rtadvd.conf", "setTaskFilter.post.js", "advScriptKofax.js", "xmlUtil.js", "sciCreateFolderRestricted.js", "advChangeDocumentType_background.js", "hrsbsDocumentLinking.get.js", "https://www.virustotal.com/graph/embed/g8b17f086c8ca45188352d1d054fa3f8948f81bddd2114ea7b99864e585604e72?theme=dark", "tasklist.get.desc.xml", "calendar-year-model.json", "materials.get.desc.xml", "uofa-common-model.json", "2024-06-05-log.txt", "uofa-uappol-model.xml", "blogsearch.get.js", "wf-email.html.ftl", "changeInitiatorAppt.put.json.ftl", "roSearchMatchNoMatchReport.js", "sfsCreateFolder.js", "uarm-rma-filing-model.xml", "https://cp.enom.com/js/cart.minicart.min.js", "2024-04-07-log.txt", "canonical", "2024-05-17-log.txt", "lawDocSetup.json", "AppleFirmwareUpdate.tbd", "fo-site.json", "advErrorMessageReset.js", "wf-email.html_de.ftl", "siteMembersReport.js", "guidelines-supervisor-revision.get.desc.xml", "review-comm02v2.get.js", "artsConfig.json", "https://www.virustotal.com/gui/collection/7774b0b7593e64e019df4e783911800bb322ec28a0f9eb3792fe6f75755f3b88", "2024-05-14-log.txt", "psPerson.get.js", "review-student-revisionv2.get.desc.xml", "2024-05-23-log.txt", "imapConfig.json", "PWS:Win32/Ymacco.AA50 Win.Trojan.Generic-9959068-0\t SLF:MSIL/PSTAnomaly.A Win.Dropper.Shakblades-7614016-0\t#LowFI:VBExpensiveLoop Win.Packed.Barys-10031677-0\tTEL:Trojan:MSIL/AgentTesla.VPA!MTB Win.Trojan. Backdoor:MSIL/Remcos!MTB", "hrsbs-review-cycle.json", "uofa-sfs-model.json", "ephesoft-educational.json", "extensionCreateFolderRule.js", "epsb.get.desc.xml", "find.codes", "uafgsrsup-model.xml", "https://4vendeta.com/assets/js/jquery.min.js", "cbsr-study.json", "com.apple.screensharing.agent.launchd", "https://cp.enom.com/responsive/_js/init.min.js", "engineering-coop-security-list.json", "rsoDocSetup.json", "chsAdminStuView.get.html.ftl", "Institutions.json", "wf-email.html_ja.ftl", "uofa-sfs-model.xml", "uoda-faculties.json", "report_rmr_transferReport.html.ftl", "https://www.virustotal.com/graph/embed/g3238715200b747f1a237e03037a4d5ff15d85564ee0740439750d8ff75347031?theme=dark", "hrsbsCreateFolder.js", "APSWorkflowStatus.put.js", "customCSS_FGSR.css", "everyDay2H45MinAM.js", "https://www.gstatic.com/firebasejs/8.1.2/firebase-app.js", "pensionBenefit.html.ftl", "2024-02-12-log.txt", "consignoWebhook.post.json.ftl", "caps-school-board-list.json", "review-studentv2.get.desc.xml", "emailbody_textplain_share_de.ftl", "fgsr-thesis-deposit.json", "2024-01-26-log.txt", "chsFacultyReport.js", "review-supervisor.get.html.ftl", "rso-cfi-financials-doc-type.json", "emailbody_textplain_alfresco.ftl", "mounts.csv", "rma-model.json", "taskForm.get.js", "businessCreateFolderSchedule.js", "ADVEphesoftMove.js", "review-comm01v2.get.desc.xml", "review-comm02v2.get.desc.xml", "ro-slate-folio-material-school-scope.json", "kofaxFailedEmailTemplate.ftl", "xfe-URL-heymman.com-stix2-2.1-export.json", "uofa-set-model.xml", "collegeOfHealthSciencesConfig.json", "2024-04-28-log.txt", "fo-utilities.json", "fgsrCreateFolderFromCSV.js", "backup and log.js", "diskEncryption.csv", "kernel.csv", "FVCA-manual-property-update.js", "following-email.html.ftl", "generatereport.get.js", "main.cf.default", "2024-03-05-log.txt", "https://contabo.com/client/client.a529db28.js", "new-user-email_de.html.ftl", "ADV-notify-type-mapping.json", "everyDay4H30MinAM.js", "PaperFileconfig.json", "everyDay7H30MinPM.js", "uofa-fo-model.json", "https://static.zdassets.com/ekr/snippet.js?key=7342b695-e394-4f25-89a0-da9d262a48da", "alfresco docs.js", "https://cp.enom.com/ScriptResource.axd?d=lDjPFfAIWSrEAVNgTHTrISQmLEFmHAaibvNJQuGRZDbWpGFPLrFwaGVpjCUsI6HkqzbpwmaAa0cJCrq8f0eqEvIsQM8lvN_dVYVyESnohON4oTvdMZHDmwG83uJA4m2oqykP8TTTSIeV2oaNrlIXaX8cOxC5Cv6aGmjpdB2u-227wdn30&t=363be08", "following-email_nl.html.ftl", "createSlateFolioMaterialDropdown.js", "aliases", "applications.csv", "sudoers", "convertTranscript.js", "appointmentStart.get.desc.xml", "createDepartmentJSON.js", "advEntityName.get.js", "module.modulemap", "dept-config.js", "uofa-arts-model.json", "arm64e-apple-macos.swiftinterface", "resolv.conf", "taskReportCSV-Appointment-prod.js", "queryTasks.get.desc.xml", "avmbrowse.get.js", "https://4vendeta.com/assets/js/bootstrap.min.js", "chs-degProgram-list.json", "command_args.json", "https://insurancerateusa.com/webpack-runtime-f014a3267add02a94afb.js", "http://fonts.googleapis.com/css?family=Abril+Fatface%3Aregular&subset=latin%2Ccyrillic&ver=5.7.6", "fgsr-credential-list.json", "https://cp.enom.com/global/TopMenu.ascx.js", "record-rejected-email.ftl", "businessCreateFolderRule.js", "enggConfig.json", "categorysearch.get.atom.404.ftl", "review-cosupervisorv2.get.js", "schoolboard.get.js", "kofaxSendEmail.js", "passwd", "2024-04-22-log.txt", "HRSBS-SyncCCIDs.js", "xfe-URL-Ndevix.com-stix2-2.1-export.json", "coupa.get.html.ftl", "queryTasks.get.js", "https://www.googletagmanager.com/gtag/js?id=G-J9PCW0F6JV", "2024-03-26-log.txt", "uofa-ales-model.json", "hrs-personalInformation.json", "appointmentSubmit.get.js", "UAlbertaSettings.json", "uofa-rso-model.json", "alesCreateFolderSchedule.js", "everyDay1H45MinAM.js", "nativeStudiesCreateFolder.js", "xfe-URL-4vendeta.com-stix2-2.1-export.json", "sfsWorkflowStatus.js", "interfaceAddrs.csv", "rsoCreateFolder.js", "gtaGraProcessToCSV-2AM.js", "enggCoopConfig.json", "eTranscriptVersioningFix.js", "appointmentSubmit.get.html.ftl", "uofa-science-model.xml", "show_audit.ftl", "appointment-report-schedule.js", "fgsr-case-file-report.js", "student-records-bulk-load-testing-site.json", "2024-01-05-log.txt", "invite-email_es.html.ftl", "ist-site.json", "hrsFileShareFolder.js", "TrojanProxy:Win32/Malynfits CodeOverlap TrojanSpy:Win32/Nivdort CodeOverlap virus:Win32/Lywer CodeOverlap", "CreateTranscriptUserMemberships.js", "reappointment-reminder-process.js", "googleAddon.get.json.ftl", "afpovertcp.cfg", "notify_nl.htm", "capstart.get.desc.xml", "onCreate_supersedes.js", "new-user-email.html.ftl", "2024-05-07-log.txt", "cbsrsite-site.json", "review-cosupervisor.get.html.ftl", "eTranscript-bundled-02-jan.js", "2024-01-11-log.txt", "2024-01-23-log.txt", "2024-02-06-log.txt", "https://www.googletagmanager.com/gtag/js?id=UA-185991747-1", "law-security-list.json", "pcm-site.json", "rso-forms-form-type.json", "advScanningMapping.json", "guidelines-student.get.desc.xml", "my_summary.ftl", "https://cdn.segment.com/next-integrations/integrations/google-analytics/2.18.5/google-analytics.dynamic.js.gz", "2024-04-23-log.txt", "chs-provinces-list.json", "emailbody_textplain_share_ja.ftl", "ro-admitType.json", "updatevariables.post.desc.xml.notused", "pcmCreateFolder.js", "2024-06-02-log.txt", "deleteEphesoftDoc.js", "https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.iTmf4rxOyWc.O/m=auth2/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-LTnDn-AS2QlMWYZdnaV1OuFR7Iw/cb=gapi.loaded_0?le=scs", "review-comm01.get.desc.xml", "createSlateApplicationsCSV.js", "scheduleRunEvery60Minutes.js", "avmbrowse.get.html.ftl", "https://fm.ipinyou.com/j/a.js", "roslateexists.get.desc.xml", "review-supervisor.get.js", "ADV-notify-terms-types.js", "roCopyOlderScannedDocumentAdHoc.js", "coi-supervisor.get.desc.xml", "qaRelease.js", "http://alp-vision.com/wp-content/cache/autoptimize/js/autoptimize_78b4f9b28399aa3c8a405e45931ad058.js", "2024-03-29-log.txt", "FandO-Programs.json", "custom_header_checks", "westCanDocumentMove.js", "APSWorkflowStatus.get.js", "scheduleRunEveryday3PMto11PM.js", "save.post.desc.xml", "advScript5.js", "businessFileScanned.js", "every20MinStartingAt15MinPastHour.js", "2024-04-30-log.txt", "emailbody_textplain_share_fr.ftl", "wf-email.html_es.ftl", "sciFileScanned.js", "generatereport.get.json.ftl", "hrs-pension.json", "invite-email-add-direct.html_de.ftl", "emailbody-alfresco-textplain.ftl", "uofaDocTypes.xml", "sharingPreferences.csv", "shells", "APSWorkflowInfo.put.desc.xml", "cbsr-model.json", "https://storage.googleapis.com/inflect-frontend-assets/adb460de2098568d4c3580de1fde2f6690bcbd04/_next/static/s0TytVz2d0zNgb~bjg~~D/pages/search.js", "b257cc536324cd2566432555666307b43d27ee9cbda5e45707e3e97b61b3dff6", "capinfo.get.html.ftl", "consignoMessage.get.desc.xml", "2024-02-23-log.txt", "preboot_archive_errors.log", "readme_ja.html", "2024-05-18-log.txt", "dbixs_rev.h", "MCError.h", "roScript1.js", "folderCreateADV.js", "roDocumentListAPLSTD.js", "recent_docs.ftl", "https://www.virustotal.com/gui/collection/3f5e2fc684dd1957828c6f9c0d1b7d13524218c8402a4a0a91e9135fb662f127", "LocalAuthentication.tbd", "https://securepubads.g.doubleclick.net/gpt/pubads_impl_page_level_ads_2022050201.js", "assignuser.put.js", "relocated", "apptStepZeroStarter.post.desc.xml", "uoda-departments.json", "wf-email_fr.html.ftl", "nativeStudiesCreateFolderRule.js", "MultipeerConnectivity.h", "reappointment-generate-process.js", "fgsrDocRestructure.js", "sciBulkShareFolder.js", "jsonUtils.js", "CapFinalReportSubmit.js", "rso-accounts-receivable-accounts-payable-doc-type.json", "uofa-engg-coop-model.xml", "everyDay2H35MinAM.js", "ro-campusSolutionsTerm.json", "guidelines-student-revision.get.desc.xml", "emailbody_textplain_alfresco_ru.ftl", "2024-03-13-log.txt", "rmFilingDoc.js", "chs-ag-type.json", "moveThesesForTransfer.js", "capinfo.get.js", "folder.get.desc.xml", "review-supervisorv2.get.desc.xml", "MultipeerConnectivity.apinotes", "review-studentTest.get.html.ftl", "review-supervisor.get.desc.xml", "https://ajax.googleapis.com/ajax/libs/angularjs/1.4.2/angular-sanitize.js", "uofa-native-studies-model.xml", "hrsConfig.json", "coi-revise.get.html.ftl", "2024-04-14-log.txt", "activities-email_ja.ftl", "simpleupload.post.desc.xml", "enggCoopFileScanned.js", "ro-slate-folio-material-non-school-scope.json", "NodeInfoByCapId.get.js", "getProjectDetails.js", "manual-tracking-script.js", "student-records-training-site.json", "following-email.html_nl.ftl", "scheduleJobTest.js", "searchPageConfig.json", "student-recordsConfig.json", "rso-sponsor-names.json", "csh.logout", "uofa-hrs-model.json", "2024-01-28-log.txt", "caching.html", "uofa-education-model.xml", "2024-01-13-log.txt", "appointmentSubmit.get.desc.xml", "ro-org-desc.json", "fgsr-thesis-deposit.xml", "activities-email_es.ftl", "review-nextdate.get.js", "tim-sops", "sharedFolders.csv", "augustana-site.json", "extensionDocSetup.json", "review-startv2.get.html.ftl", "auto_home", "every52MinPastHour.js", "bashrc", "uofapersonid.get.html.ftl", "notify_user_email.html.ftl", "getSlateId.get.json.ftl", "folder-create-ro.js", "add_document_type_ro.js", "adv-correspondence-type.json", "educationCreateFolderRule.js", "2024-01-21-log.txt", "protocols", "faculty-model.xml", "virtual", "launchD.csv", "avmstores.get.desc.xml", "psPerson.get.json.ftl", "2024-01-10-log.txt", "security-group-model.json", "cbsr-worksheetType.json", "notify_user_email.ftl", "ro-official.json", "Script2.js", "eraReportGeneration.js", "hrsbs-security-class.json", "2024-05-25-log.txt", "uofaDepartmentList.get.html.ftl", "uofa-science-model.json", "hrsbsDocumentLinking.get.html.ftl", "https://www.clarity.ms/tag/uet/5739677", "emailbody-share-textplain.ftl", "uofapersonidrest.get.js", "edit.get.desc.xml", "ro-academic-pre-pro-programs.json", "https://insurancerateusa.com/app-74647f151b541f3098c2.js", "autofs.conf", "review-student.get.js", "processIdProps.get.js", "completetask.post.json.ftl", "2024-05-03-log.txt", "faculty-model.json", "globalHeader.html.ftl", "syslog.conf", "rso-bulk-scan-doc-type.json", "2024-02-04-log.txt", "fgsrssgLanding.get.js", "emailbody_textplain_share_nl.ftl", "2024-03-16-log.txt", "ro-slate-institution-material.json", "getTaskFilter.get.js", "notify.conf", "roslateexists.get.html.ftl", "move-fgsr-folder.js", "RORoutingWorkflowUtil.js", "ro-model.xml", "uafgsrsup-model.json", "emailbody_textplain_alfresco_zh_CN.ftl", "symplexMetadataUpdate.js", "uappol-api.js", "ua-search-model.json", "scheduleRunEveryday12AMto6AM.js", "makedefs.out", "copy-signed-offer-letter.js", "uofa-arts-model.xml", "https://snap.licdn.com/li.lms-analytics/insight.min.js", "psAcademicDeptAll.get.json.ftl", "roCopyOlderScannedDocument.js", "wfh-seniormanager.get.html.ftl", "2024-03-30-log.txt", "chs-faculty-list.json", "faculty-of-ales-site.json", "SetExpiryDate.js", "review-comm01v2.get.js", "translatable.ftl", "smartFoldersExample.json", "doc_info.ftl", "interfaceDetails.csv", "advChangeDocumentType_confidential.js", "DBIXS.h", "updateVariable.post.desc.xml", "educationCreateAdvisingNotes.js", "advScript3.js", "report_rmr_holdReport.html.ftl", "https://cp.enom.com/responsive/_js/knockout-3.3.0.min.js", "adv-model.xml", "manpaths", "ro-search-match-status.json", "2024-02-13-log.txt", "rmThesis.js", "extension-security-list.json", "fgsrssgLanding.get.html.ftl", "2024-05-08-log.txt", "2024-04-04-log.txt", "ADVmoveRecordsToPreQA.js", "NodeInfo.get.html.ftl", "asl.conf", "2024-02-10-log.txt", "securityWorkflowSetting.json", "rpc", "rsoprojectdetails.get.desc.xml", "advext-model.json", "2024-03-18-log.txt", "review-comm02.get.js", "configuring.html", "Info.plist", "roEtranscriptReport.js", "APSWorkflowStatus.get.desc.xml", "wfh-form.get.js", "removeDonationGrp.js", "rso-agreements-doc-category.json", "blogsearch.get.desc.xml", "appointmentStart.get.html.ftl", "webFormDialog.html.ftl", "review-studentTest.get.js", "config.js", "hrsbs-functionalroles.json", "rmFilingConfig.json", "hrsbsCreateFolderRule.js", "roDailyQA.js", "calendar-year-model.xml", "readme_de.html", "facopr-supportinDocField.json", "guidelines-supervisor.get.desc.xml", "https://www.dwin1.com/13976.js", "review-cosupervisor.get.desc.xml", "chs-Invalid.ftl", "adv-model.json", "roslateapplist.get.js", "AFA_Main.post.desc.xml", "every46MinPastHourBetween4PM12PM.js", "MCNearbyServiceBrowser.h", "advScript4.js", "apptStepOneSave.post.json.ftl", "roEtranscriptsBundle.js", "pllc-site.json", "advSimplexMapping.json", "https://4vendeta.com/assets/js/ajaxchimp.min.js", "uappolCategoryHeirarchy.get.desc.xml", "applyTaskAction.post.json.ftl", "2024-05-09-log.txt", "fgsrCreateGuidelineAPSProcessFromCSV.js", "readme.ftl", "2024-04-12-log.txt", "example test script.js", "version.plist", "guidelines-supervisor.get.html.ftl", "APSWorkflowStatus.put.desc.xml", "uarmTempModel.json", "FVCA-data-import.js", "facopr-model.json", "edit.get.js", "2024-04-01-log.txt", "faculty-of-native-studies-site.json", "hrsbs-file-structure.json", "uappol-upload-rule.js", "hrsbsReviewCycleReport.js", "chsAgreementsConfig.json", "academic-department.json", "command-utils.js", "skynet-dev.tcxn.net tcxn.net Registrar Ascio Technologies, Inc - connection to cloud proxy", "ntp_opendirectory.conf", "APSWorkflowStatus.get.html.ftl", "uploadfile.post.desc.xml", "RONotification.js", "2023-12-30-log.txt", "chs-programYear-list.json", "alesCreateAdvisingNotes.js", "capeamergedoc.get.js", "eTranscriptInstList.js", "avmstores.get.html.ftl", "following-email_ja.html.ftl", "https://cp.enom.com/js/jquery.jgrowl.min.js", "businessCreateFolderRestricted.js", "my_docs.ftl", "uappol-metadata-query.get.desc.xml", "https://aiff.cdn.bcebos.com/sensors%2Fonline%2Fsa-sdk-javascript-1.14.24%2Fsensorsdata.min.js", "collegeOfHealthSciencesDocSetup.json", "engineering-co-op-site.json", "reappointment-generate-schedule.js", "uofapersonidrest.get.html.ftl", "advMetadataUpdate.js", "ro-model.json", "managedPolicies.csv", "2024-06-01-log.txt", "2024-01-07-log.txt", "2024-04-05-log.txt", "rma_isClosed.js", "uofa-business-model.xml", "chromeExtensions.csv", "cap-site.json", "chs-studentExpireSoon.ftl", "hrsbs-site.json", "uofa-esign-model.json", "uofa-caps-model.xml", "thesisDepositArchival.js", "coi-revise.get.js", "advChangeDocumentName.js", "emailbody_textplain_share_nb.ftl", "review-comm03v2.get.js", "uofa-extension-model.json", "profile", "https://www.yunshipei.com/assets/js/app.min.js", "NodeInfoByCapId.get.desc.xml", "https://www.googletagmanager.com/gtag/js?id=G-C3W7T6H5QW&l=dataLayer&cx=c", "2024-05-24-log.txt", "UAlbertaSettings.conf", "kern_loader.conf", "augustana-legacy-transcript-doc-list.json", "uofa-pllc-model.xml", "2024-02-05-log.txt", "rsoprojectdetails.get.js", "roCopyEphesoftMetadataXML.js", "triggerapsprocess.post.json.ftl", "faculty-of-extension-site.json", "locate.rc", "every30MinStartingAt26MinPastHour.js", "sciCreateFolderConfidential.js", "assocModel.json", "https://cryptobit.live/build/assets/app-CkRYqsKL.js \u2022 cryptobit.live \u2022 t.page \u2022 cdn.wallets.cryptobit.live", "educationCreateFolder.js", "student-financial-services-site.json", "https://c.cnzz.com/core.php?web_id=1280305902&t=z", "routableGroups.get.desc.xml", "invite-email-add-direct.html_fr.ftl", "advScanning.js", "2024-04-26-log.txt", "invite-email_nl.html.ftl", "postfix-files", "rmtab", "getSlateId.get.js", "foModel.xml", "lawCreateFolder.js", "eSignatureStatusHistory.get.js", "categorysearch.get.js", "https://contabo.com/client/client-30e55c50.css", "materials.get.json.ftl", "hasownproperty.call \u2022 fireeye.grhd.", "hrsbs-doc-list.json", "2024-04-25-log.txt", "manual-generate-script.js", "updatevariables.post.json.ftl.notused", "AFA_MainFileOnly.post.json.ftl", "2024-06-04-log.txt", "localizable.ftl", "simpleupload.post.js", "https://stats.ipinyou.com/presadv?a=SR..sxcg_4d0DhagaJWCLj_ZdX&cb=py.cb", "https://himado.com/heihei/js/swiper.min.js", "wfh-form.get.desc.xml", "sfs-wf-email.html.ftl", "https://cdn.heapanalytics.com/js/heap-3501642718.js", "educationDocSetup.json", "ttys", "generatereport.get.desc.xml", "chs-agreements.get.js", "2024-02-18-log.txt", "applyTaskAction.post.desc.xml", "2024-01-16-log.txt", "psDeptAll.get.js", "uarmTempModel.xml", "review-startv2.get.js", "convenience.map", "scheduleRunEvery2-10PM.js", "tasklist.get.html.ftl", "emailbody_textplain_share_it.ftl", "xfe-URL-inflect.com-stix2-2.1-export.json", "launchdaemons.txt", "record-superseded-email.ftl", "business-doc-list.json", "https://himado.com/heihei/layui/layui.all.js", "fgsr-programOfStudy.json", "https://www.hotjar.com/persistUtmParams.js", "staff-training-site.json", "acsToApsUserUpdate.js", "changeInitiatorAppt.put.js", "2024-03-01-log.txt", "users.csv", "https://www.hotjar.com/ensureSegmentId.js", "2023-12-29-log.txt", "generic", "uofa-uappol-model.json", "hrsDocSetup.json", "fgsrCreateAPSProcessFromFolder.js", "eTranscriptConfig.json", "2024-01-09-log.txt", "transcript-model.json", "uofaFacultyList.get.desc.xml", "fgsrssgLanding.get.desc.xml", "chs-upload.get.html.ftl", "psPerson.get.desc.xml", "reminder-email-util.js", "archiveFolder.json", "search.get.desc.xml", "activities-email_it.ftl", "systemControls.csv", "rsoprojectdetails.get.html.ftl", "fgsrEnv.js", "2024-03-19-log.txt", "tasklist.get.html.ftl.jquery", "https://viz.greynoise.io/analysis/0cd9177e-8328-4355-a2c0-d05704a64c72", "2024-04-11-log.txt", "https://cp.enom.com/js/jquery.cookie.min.js", "artsCreateFolder.js", "2024-05-31-log.txt", "uofa-education-model.json", "ADVChangeAuthor.js", "roslateapplist.get.json.ftl", "updateSearchMatchStatus.js", "http://alp-vision.com/wp-includes/js/jquery/jquery.min.js?ver=3.5.1", "chsStudentView.get.js", "PaperFileUtils.js", "Virus:DOS/Hellspawn 192.168.122.49 10/16/25\t\u2022 IPv4 142.251.9.105", "hrsbs-employee-class.json", "wfh-manager.get.desc.xml", "hrsbs-action-reasons.json", "BUILDING", "advScanningMetadata.js", "LaunchWorkflowUtils.js", "following-email.html_it.ftl", "uofa-esign-model.xml", "chsEnv.js", "FGSR-Forms-Config.js", "deletingCompletingWorkflow.js", "dropboxCommonAspects.json", "CapApsConfig.json", "routableGroups.get.json.ftl", "emailbody_textplain_alfresco_it.ftl", "2024-02-19-log.txt", "https://cdn.heapanalytics.com/js/heap-2001511295.js", "reappointment-tracking-process.js", "capinfo.get.desc.xml", "enggCoopCreateFolder.js", "googleAddon.get.js", "getapsdbid.get.js", "https://www.hotjar.com/_next/static/chunks/framework-6994461647f52f294af9.js", "roCopyEphesoftMetadataScanned.js", "arts-doc-list.json", "pcm-grab-competitive-noderefs.js", "smb.conf", "eSignDownload.get.js", "native-studies-doc-list.json", "educationConfig.json", "backup.js", "roDocumentTypes.json", "ro-related-record-types.json", "uappol-type.json", "invite-email-add-direct.html_ja.ftl", "ceeb.get.desc.xml", "2024-03-31-log.txt", "following-email.html_fr.ftl", "psDeptAll.get.desc.xml", "rso-financial-reporting-doc-type.json", "uofa-pllc-model.json", "sudo_lecture", "notify_user_email_fr.html.ftl", "OOA-notify-email-template.ftl", "advBatchProcessing.js", "MCSession.h", "invite-email-add-direct.html_nl.ftl", "roSearchMatchQuery.js", "cbsrsite-sopTypes.json", "securityWorkflowUtil.js", "engineering-security-list.json", "savetask.post.desc.xml", "master.cf.proto", "luceneUtil.js", "claimtask.put.js", "APSWorkflowInfo.put.html.ftl", "uofa-base-model.json", "review-cosupervisorv2.get.html.ftl", "MCNearbyServiceAdvertiser.h", "uofapersonidrest.get.desc.xml", "2024-05-12-log.txt", "change-fgsr-pdf-file-name-with-date.js", "nativeStudiesCreateFolderRestricted.js", "coveoGetDocList.get.js", "2024-02-29-log.txt", "advEndowmentName.get.json.ftl", "2024-04-27-log.txt", "updateVariable.post.json.ftl", "alesBulkShareFolder.js", "extensionFileScanned.js", "https://www.virustotal.com/gui/collection/63819e07111e9665ba8602777d782527c54f3fad71ef36f977405a004484787c/iocs", "https://securepubads.g.doubleclick.net/tag/js/gpt.js", "rso-mask.json", "2024-02-09-log.txt", "blogsearch.get.html.ftl", "2024-05-15-log.txt", "capeamergedoc.get.html.ftl", "hrs-employmentFinancial.json", "getapsdbid.get.json.ftl", "new-user-email_ja.html.ftl", "coi-supervisor.get.html.ftl", "nativeStudiesDocSetup.json", "ua-search-model.xml", "rso-site.json", "categorysearch.get.html.404.ftl", "https://www.virustotal.com/graph/embed/g05f1796a358b458d95751d31d1d529aa378f8ffadf0b4305b7fa0bd1c64fe228?theme=dark", "xfe-IP-146.148.236.187-stix2-2.1-export.json", "uappol-metadata-query.get.js", "coi-start.get.js", "psAudit-model.json", "everyDay12H30MinAM.js", "setTaskFilter.post.json.ftl", "alesDaily.js", "claimtask.put.json.ftl", "emailbody_textplain_share_ru.ftl", "2024-05-22-log.txt", "2024-04-18-log.txt", "apptStepOneSave.post.desc.xml", "test-site-site.json", "addPersonAspect.js", "chsReport.js", "fgsrv2Config.json", "2024-04-10-log.txt", "gtaGraStatus.post.json.ftl", "2024-03-06-log.txt", "apsGroupsConfig.json", "invite-email.ftl", "2024-04-21-log.txt", "ro-doctypes.json", "https://cp.enom.com/js/global-functions.js", "hrsbsDocSetup.json", "appointmentStartTest.get.js", "uofaFacultyList.get.html.ftl", "roAddAspectAndMoveTranscript.js", "review-student-revisionv2.get.html.ftl", "zshrc_Apple_Terminal", "launchagents.txt", "pcm-category.json", "emailbody_textplain_alfresco_nl.ftl", "uploadfile.post.js", "MCBrowserViewController.h", "https://hybrid-analysis.com/sample/9bf30967dfbf84d91ff4a1ca66dcd6c3383e679917e8b7aa4f659ff9f4e848d7/6426cf48655f94b6b303704c", "emailbody_textplain_share_pt_BR.ftl", "consignoWebhook.post.desc.xml", "getJson.get.desc.xml", "cronJob.post.desc.xml", "ntp.conf", "Admin.tbd", "2024-01-20-log.txt", "enggCreateFolderRestricted.js", "hrs-security-list.json", "studentupload.get.html.ftl", "hrsDaily.js", "2024-04-06-log.txt", "scheduleRunEvery20Minutes.js", "2024-04-09-log.txt", "2024-02-11-log.txt", "psAuthorizedApprover.get.js", "alesDocSetup.json", "psDeptSingle.get.desc.xml", "https://www.yunshipei.com/", "edit.get.html.ftl", "extensionCreateFolder.js", "ro-aug-model.json", "createReportPermissionsFoldersInASite.js", "applyTaskAction.post.js", "AFAconfig.json", "roAddComment.js", "https://cp.enom.com/js/punycode.min.js", "roScript1BackScan.js", "my_spaces.ftl", "faculty-of-law-site.json", "2024-01-19-log.txt", "apsAppConfig.json", "pcm-update-competitive-noderefs.js", "hrsbs-owner-details.json", "https://insurancerateusa.com/bfcc7b67-0b189ba6da3fc3ae8b88.js", "notify-records-due-for-review-email.ftl", "emailbody_textplain_alfresco_nb.ftl", "https://4vendeta.com/assets/js/popper.min.js", "review-student-revision.get.desc.xml", "apptStepZeroStarter.post.json.ftl", "changeInitiatorAppt.put.desc.xml", "uofa-slate-model.json", "2024-02-03-log.txt", "engineering-coop-doc-list.json", "department.json", "faculty-of-education-site.json", "ADVDonationCalendarToFiscal.js", "artsFileScanned.js", "2024-05-05-log.txt", "https://insurancerateusa.com/framework-19eddc0d879a49dfe606.js", "searchmatchFullDob.js", "rc.netboot", "consignOInitiatorOfferLetterChange.js", "2024-01-22-log.txt", "NodeInfo.get.js", "uofaDocTypes.json", "materials.get.js", "peoplesoftMetadataMergeMissing.js", "faculty-model.xml.json", "roScript9.js", "invite-email-add-direct.html_it.ftl", "publicSiteFileViewer.get.desc.xml", "https://cdn.ampproject.org/rtv/012204221712000/amp4ads-host-v0.js", "fgsrMigrationScript-withTerminationLogic.js", "2024-04-13-log.txt", "https://connect.facebook.net/signals/config/534474930374151?v=2.9.57&r=stable", "rso-cfi-purchasing-doc-type.json", "augCreateFolder.js", "triggerapsprocess.post.js", "hrsFolderCreateSchedule.js", "artsCreateFolderRule.js", "chs-program-list.json", "businessBulkShareFolder.js", "advUtils.js", "wf-email_de.html.ftl", "sponsornames.json", "mounts.txt", "2024-04-03-log.txt", "2024-03-07-log.txt", "thesisDestructionReport.js", "updateVariable.post.js", "zprofile", "notify_user_email_e-transcript_failed.ftl", "augTranscript.js", "hrsbsDocumentLinking.get.desc.xml", "capstart.get.js", "FVCA.json", "guidelines-supervisor.get.js", "chs-commentUpdate.ftl", "enggCreateFolder.js", "psDeptAll.get.json.ftl", "2024-02-15-log.txt", "chsAgreementsDocSetup.json", "activities-email_de.ftl", "queryTasks.get.json.ftl", "Alfresco.zip - 1bf054bded99e2ae414154593d0892066b2e0c7add603f9321e157c77ae52075", "psAcademicDeptAll.get.desc.xml", "2024-01-27-log.txt", "header_checks", "wf-email_it.html.ftl", "uappolCreateFolderRule.js", "2024-04-19-log.txt", "uofa-engg-model.xml", "xtab", "psUtil.js", "eSignDownload.get.html.ftl", "review-comm01.get.html.ftl", "AlfrescoToolkit.info", "invite-email_ja.html.ftl", "http://alp-vision.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.4.4", "mail.rc", "FVCA.xml", "alesCreateFolderConfidential.js", "master.cf", "new-user-email_es.html.ftl", "fgsr-model.json", "components.zip - 2b91fcf852a5f1f57be71a269d82497b37c9f544ebd8f32aaa240e4cde0ffeea", "rmSearchmatchNomatchFiling.js", "startPayActionWorkflow.js", "bashrc_Apple_Terminal", "payActionDecision.html.ftl", "chs-agreements.get.html.ftl", "2024-04-29-log.txt", "foCreateFolder.js", "processIdProps.get.json.ftl", "foModel.json", "2024-01-30-log.txt", "schoolboard.get.html.ftl", "2024-04-20-log.txt", "xfe-URL-Psychz.net-stix2-2.1-export.json", "fgsrDocRelocation.js", "advScriptDaily30minFreq.js", "rsoConfig.json", "dbd_xsh.h", "qaConfig.json", "uarmm-supplement-scanning.json", "every10MinStartingAt5MinPastHour.js", "chsCreateFolder.js", "uofaDepartmentName.get.js", "2024-03-17-log.txt", "setTaskFilter.post.desc.xml", "appointmentLandingPage.get.html.ftl", "review-cosupervisorv2.get.desc.xml", "systemInfo.csv", "chsAgreementCreateFolderRule.js", "review-student-revisionv2.get.js", "alfrescoUserGroupRequest.ftl", "advScriptMonthly.js", "roConfig.json", "2024-02-25-log.txt", "NodeInfo.get.desc.xml", "copy-fgsr-to-graduate-students-records.js", "AFA_Main.post.js", "review-student.get.desc.xml", "http://alp-vision.com/wp-content/themes/alp-vision/css/bootstrap.css?ver=1.0", "https://connect.facebook.net/signals/config/3689470801106673?v=2.9.57&r=stable", "save.post.json.ftl", "epsb.get.js", "my_docs_inline.ftl", "xfe-URL-Cnzz.com-stix2-2.1-export.json", "uofa-augustana-model.xml", "alesFileScanned.js", "advDocSetup.json", "chs-stuEmailNotification.json", "2024-01-25-log.txt", "thesisDepositConfig.json", "process_list.txt", "ro-acad-group.json", "uappol-site.json", "nfs.conf", "sciConfig.json", "extensionConfig.json", "everyDay2H05MinAM.js", "networks", "roDocProcessing-model.xml", "CodeResources", "psAuthorizedApprover.get.json.ftl", "processIdProps.get.desc.xml", "scheduleRunEvery30Minutes.js", "Driver_xst.h", "https://cdn.segment.com/next-integrations/integrations/vendor/commons.54701049fd6fb8497e9e.js.gz", "2024-05-30-log.txt", "2024-01-31-log.txt", "pf.os", "uofa-augustana-model.json", "guidelines-start.get.html.ftl", "apptStepOneStarter.post.js", "augustana-security-list.json", "coveoGetDocList.get.json.ftl", "reappointment-tracking-schedule.js", "roBatchScript.js", "generic2min.js", "https://www.heymman.com/script.js", "advScript2.js", "https://www.google.com/recaptcha/api.js", "command-processor.js", "review-student-revision.get.js", "cronJob.post.js", "invite-email-add-direct.html.ftl", "enggDocSetup.json", "OOA-notify-email.js", "apptStatusDocUpdate.post.json.ftl", "2024-05-10-log.txt", "2024-01-15-log.txt", "office-of-advancement-site.json", "FandO", "fgsr-awards.json", "notify_user_email_ja.html.ftl", "2024-03-23-log.txt", "https://stats.ipinyou.com/adv?a=SR..sxcg_4d0DhagaJWCLj_ZdX&u=https%3A%2F%2Fwww.yunshipei.com%2F&rd=1653485491040&v=2&e=sr%3D390x844%26sc%3D32-bit%26je%3Dfalse%26lg%3Den-us%26vb%3D1%26did%3D%26dt%3D%26ps%3D390x3885%26vp%3D390x664%26ec%3DUTF-8%26vbt%3D1822%26sp%3D0%26ur%3D%26st%3D%26ev%3Dvg", "review-cosupervisor.get.js", "CAPSendMonthlyReportEmail.js", "student-records-site.json", "hrs-leaves.json", "cap-file-load.post.js", "x86_64-apple-macos.swiftinterface", "uofa-hrs-model.xml", "https://insurancerateusa.com/3bea8d40-8926f4790c0b3689a361.js", "2024-05-13-log.txt", "https://cp.enom.com/WebResource.axd?d=6rtXrDcnyiYD-9dFDFOkxTRcPVSrAN8fR-cHKzNqPTy7bHic-2LLMHDnielTzEI-sd1KplHrRBudcZJOm0-lxubO7k41&t=637453818340000000", "gtaGraStatus.post.js", "fgsrCreateFolder.js", "2024-02-17-log.txt", "business-security-list.json", "uofa-law-model.json", "fgsr-official-list.json", "hrsFolderCreateRule.js", "dynamicSecurityMarksModel", "apptStepZeroStarter.post.js", "foDocSetup.json", "ro-slate-institutions.json", "startTwoStepWorkflow.js", "activities-email_nl.ftl", "ro-applicant-type.json", "group", "fgsrCopyMetadataToFolderLevel.js", "createROReconciliationReports.js", "2024-04-08-log.txt", "search.get.html.ftl", "emailbody_textplain_share.ftl", "pllcConfig.json", "wf-email.html_fr.ftl", "2024-03-27-log.txt", "scans.get.desc.xml", "lawConfig.json", "review-studentv2.get.html.ftl", "paperFileUtil.get.js", "roslateapplist.get.html.ftl", "https://unpkg.com/@optimizely/optimizely-sdk@3.5.0/dist/optimizely.browser.umd.min.js", "every22MinPastHour.js", "2024-03-12-log.txt", "bind.html", "extension-doc-list.json", "uofaDepartmentList.get.desc.xml", "https://himado.com/cdn-cgi/challenge-platform/h/g/scripts/invisible.js?ts=1651842000", "googleAddon.get.desc.xml", "2024-05-04-log.txt", "programExtensionScript.js", "pcmDocSetup.json", "invite-email-add-direct.html_es.ftl", "https://cp.enom.com/js/jquery.disableonsubmit.min.js", "completetask.post.js", "appointmentStartTest.get.desc.xml", "2024-02-28-log.txt", "every30MinStartingAt19MinPastHour.js", "2024-04-24-log.txt", "wfh-revise.get.html.ftl", "folder.get.js", "MCAdvertiserAssistant.h", "lber.h", "MyTasks-config.json", "wf-email_ja.html.ftl", "env.js", "roScript4.js", "fgsr-category-list.json", "uploadfile.post.json.ftl", "artsDocSetup.json", "2024-02-26-log.txt", "2024-05-26-log.txt", "ro-authenticity.json", "https://cdn.optimizely.com/js/26241557.js", "coupa.get.desc.xml", "https://fast.appcues.com/79878.js", "security_status.txt", "x86_64-apple-ios-macabi.swiftinterface", "businessCreateAdvisingNotes.js", "uawfh-model.json", "alesCreateFolder.js", "rso-financial-reconciliation-doc-type.json", "rm_event_config.json", "enggCoopCreateFolderRestricted.js", "uofa-business-model.json", "recordsCustomModel.xml", "uappol-metadata-query.get.json.ftl", "https://connect.facebook.net/en_US/fbevents.js", "hrs-benefits.json", "addTimeStamp.js", "new-user-email_nl.html", "coupa.get.js", "science-doc-list.json", "publicSiteFileViewer.get.html.ftl", "advext-model.xml", "2024-01-04-log.txt", "alesConfig.json", "sfsDocSetup.json", "gtaGraProcessToCSV.js", "https://insurancerateusa.com/94297995-69529ad7536f090aa776.js", "assignuser.put.json.ftl", "2024-01-18-log.txt", "addTimeStampRandomFileName.js", "roMoveCompletedSearchMatch.js", "cbsr-model.xml", "https://cp.enom.com/js/openWin.min.js", "2024-05-28-log.txt", "advMoveToFoldersScheduled.js", "2024-05-20-log.txt", "artsCreateFolderRestricted.js", "apsSitesConfig.json", "https://securepubads.g.doubleclick.net/gpt/pubads_impl_2022050201.js", "support-documentation", "MultipeerConnectivity.tbd", "2024-05-01-log.txt", "LDAP.tbd", "https://www.googletagmanager.com/gtag/js?id=G-YFPNZBGTF3&l=dataLayer&cx=c", "sciFileShareFolder.js", "new-user-email_nl.html.ftl", "my-site-site.json", "uatraining.xml", "sciFileADDPFileTypes.js", "every30MinStartingAt11MinPastHour.js", "student-financial-services-doc-list.json", "notify_user_email_es.html.ftl", "uofa-base-model.xml", "guidelines-student-revision.get.js", "disk_structure.txt", "approvethesis.post.js", "2024-05-27-log.txt", "master.cf.default", "uaqa-model.xml", "fgsrCopyMetadata.json", "graduate-student-records-v2-site.json", "invite-email-moderated.html.ftl", "https://cp.enom.com/ScriptResource.axd?d=fVjQa-0YyNqO6JmV36bw6eBJdTjE2YSdtcunOWcKYcBNn73MOJKQA_rxX3YMhcxLTgyDsGTKy0p9NEPvxzpqEpBKtm3GLb2GgI1LFYMC0Xr2lh71ZCttzgNGFnc5mS_Fc_DY5UH0M19Mr958h1jvmK4kzAM1&t=363be08", "wf-email_nl.html.ftl", "bulkload-testing-site.json", "support-documentation-site.json", "https://www.hotjar.com/_next/static/chunks/pages/_app-be5fbad980fd377922f7.js", "review-comm03.get.html.ftl", "advReconcilliation.js", "uofa-chs-model.xml", "2024-03-09-log.txt", "https://www.googletagmanager.com/gtag/js?id=UA-92521958-1", "pllc-doc-list.json", "ro-search-match.xml", "uappolCategoryHeirarchy.get.js", "gettasks.get.js", "uofa-hrsbs-model.xml", "https://www.hotjar.com/_next/static/chunks/pages/index-b7f010d5161cd8f6ddab.js", "startDepartmentAdhocApprovalWorkflow.js", "advEntityName.get.desc.xml", "chsEmailOnUpdateComment.js", "scheduleRunEvery5PMTo10PM.js", "https://unrealservers.net/master.css", "coveoGetDocList.get.desc.xml", "APConfigurationSystem.tbd", "siteFileViewer.get.desc.xml", "scienceASDocumentImport.js", "transcriptResponse.js", "capstart.get.html.ftl", "ro-indigenous-type.json", "blogsearch.get.html.400.ftl", "everyDay11H30MinPM.js", "security-group-user.js", "2024-05-02-log.txt", "guidelines-start.get.js", "paths", "guidelines-student.get.js", "emailbody_textplain_share_zh_CN.ftl", "eSignatureStatusHistory.get.html.ftl", "ceeb.get.json.ftl", "taskUtils.js", "every29MinPastHour.js", "https://cdn.segment.com/next-integrations/integrations/appcues/2.3.0/appcues.dynamic.js.gz", "coi-supervisor.get.js", "wfh-manager.get.html.ftl", "advChangeDocumentType.js", "uappolCreateFolder.js", "2024-05-29-log.txt", "https://281cecd8ae73dff542e13679e60d5fb9.safeframe.googlesyndication.com/safeframe/1-0-38/html/container.html", "coi-revise.get.desc.xml", "scheduleRunEvery2AM.js", "moveToFolders.js", "sfs-wf-completed-email.html.ftl", "invite-email.html_nl.ftl", "custom-error.html", "psUpdateAlfrescoDepartment.js", "getJson.get.json.ftl", "customCSS_FGSR2.css", "engineeringCreateAdvisingNotes.js", "student-transcripts-site.json", "util.js", "ADVSiteContext.js", "archiveDocument.js", "categorysearch.get.desc.xml", "coi-start.get.html.ftl", "zshrc", "apptStepOneStarter.post.desc.xml", "wfh-revise.get.js", "sciDocSetup.json", "roDocSetup.json", "advsearch.json", "apsApplicationList.get.html.ftl", "ua-dummy.xml", "ua-error-model.json", "append copyright.js", "getJson.get.js", "capConfig.js", "2024-03-28-log.txt", "every57MinPastHour.js", "advConfig.json", "invite-email_it.html.ftl", "kofaxMetadataMerge.js", "paperFileUtil.get.desc.xml", "AOSKit.tbd", "https://sgoutong.baidu.com/embed/1652930761/asset/embed/css/mobile/main.css", "https://goutong.baidu.com/site/270/98c14a71a44014f7aa9d23449a55ae8f/b.js?siteId=3064033", "appointmentStartTest.get.html.ftl", "review-studentTest.get.desc.xml", "OOA_SOT_Name_change.js", "consignoMessage.get.json.ftl", "education-doc-list.json", "businessFileShareFolder.js", "uappolConfig.json", "folder.get.html.ftl", "wfh-revise.get.desc.xml", "xfe-URL-Aliyun.com-stix2-2.1-export.json", "chs-campus-list.json", "coi-employee.get.html.ftl", "college-of-health-sciences-site.json", "arm64e-apple-ios-macabi.swiftinterface", "document-query.js", "blogsearch.get.atom.400.ftl", "advEndowmentName.get.desc.xml", "search.get.js", "startBenefitWorkflow.js", "GenerateSponsornamesAndPinames.js", "xfe-URL-Misk.com-stix2-2.1-export.json", "ADVcalendarToFiscal.js", "save.post.js", "eSignatureStatusHistory.get.desc.xml", "index.html.en", "search-responses.js", "emailbody_textplain_alfresco_pt_BR.ftl", "pinames.json", "chsStudentView.get.html.ftl", "office-of-advancement-record-types.json", "2024-01-06-log.txt", "2024-02-24-log.txt", "man.conf", "cronJob.post.json.ftl", "https://fast.appcues.com/generic/main/4.35.3/appcues.main.e826b3c1f5ab15648ac446eafdbb489fd58d7f2d.js", "simpleupload.post.json.ftl", "advMoveToFolder.js", "search-match-attach.get.js", "pcmConfig.json", "2024-03-10-log.txt", "2024-04-16-log.txt", "https://insurancerateusa.com/polyfill-036b4a134d8725752ba0.js" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [] }, "other": { "adversary": [ "DragonForce Malaysia Hacker Group", "TA413 proposed (06.08.24), Callisto, APT38, APT 28/29 - too much time too many problems" ], "malware_families": [ "Trojandropper:win32/muldrop.v!mtb", "Virus:win32/lywer", "Reduceright", "Backdoor:msil/remcos", "Vd", "Firstname", "Lh", "Alf:ransom:win32/babax.sg!mtb", "Virus:dos/hellspawn", "Gc", "Pws:win32/vb.cu", "Tel:trojan:msil/agenttesla.vpa!mtb", "Trcomponent", "Trojanproxy:win32/malynfits", "Trojanspy:win32/nivdort", "Worm:win32/lightmoon.h", "Win.trojan.dialer-266", "Agenttesla", "Alf:jasyp:trojan:win32/ircbot!atmn", "Lastname", "#lowfi:vbexpensiveloop" ], "industries": [ "Education", "Government", "Technology", "Telecommunications", "Healthcare" ] } } }, "false_positive": [] }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 22, "pulses": [ { "id": "6a135614ee83fa05ff58af66", "name": "Validated: Cybercrime - #Alberta Compromise", "description": "Validated: Cybercrime - UofA BEC/ATO -> UAlberta Alfresco & Edmonton Police Compromise (HR Files) & TX - 05.24.26 - edit", "modified": "2026-05-24T19:48:36.416000", "created": "2026-05-24T19:48:36.416000", "tags": [], "references": [ "https://www.virustotal.com/graph/embed/g3238715200b747f1a237e03037a4d5ff15d85564ee0740439750d8ff75347031?theme=dark" ], "public": 1, "adversary": "", "targeted_countries": [ "Canada", "United States of America" ], "malware_families": [], "attack_ids": [], "industries": [ "Education", "Technology", "Healthcare", "Government", "Telecommunications" ], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "UCP_GoA23", "id": "382539", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_382539/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 200, "FileHash-MD5": 60, "FileHash-SHA1": 59, "FileHash-SHA256": 1097, "IPv4": 397, "domain": 341, "hostname": 407 }, "indicator_count": 2561, "is_author": false, "is_subscribing": null, "subscriber_count": 18, "modified_text": "6 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6a10a079d3a0831710f3a0ab", "name": "Catastrophic DataBreach confirmed - UAlberta & Edmonton Police Services - 05.22.26", "description": "BEC/ATO (reported) and unauthorized use & abuse of Stolen Identity/Access/Credentials from the University of Alberta has been demonstrated as the cause of catastrophic Data-Breaches across the ualberta[.]ca domain and Edmonton Police Services (EPS).\nData is comprehensive, includes HR Records, PII/PHI, employment data, addresses, contact information.", "modified": "2026-05-22T18:29:13.092000", "created": "2026-05-22T18:29:13.092000", "tags": [], "references": [ "https://www.virustotal.com/graph/embed/g3238715200b747f1a237e03037a4d5ff15d85564ee0740439750d8ff75347031?theme=dark" ], "public": 1, "adversary": "", "targeted_countries": [ "Canada" ], "malware_families": [], "attack_ids": [], "industries": [ "Education", "Government", "Healthcare", "Technology" ], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 2, "follower_count": 0, "vote": 0, "author": { "username": "UCP_GoA23", "id": "382539", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_382539/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 200, "FileHash-MD5": 61, "FileHash-SHA1": 60, "FileHash-SHA256": 1032, "IPv4": 393, "domain": 340, "hostname": 387 }, "indicator_count": 2473, "is_author": false, "is_subscribing": null, "subscriber_count": 19, "modified_text": "8 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6a0bff94564a0098e02ab37d", "name": "Alfresco Archive // b257cc536324cd2566432555666307b43d27ee9cbda5e45707e3e97b61b3dff6 - 05.19.26", "description": "The full list of Edmonton police officers, officers and staff, as part of the city's Police Complaints Commission (PCC), has been released.", "modified": "2026-05-19T06:16:59.932000", "created": "2026-05-19T06:13:40.134000", "tags": [ "UAlberta", "Edmonton", "Edmontonpolice", "EPS", "YEG" ], "references": [ "https://www.virustotal.com/gui/collection/3f5e2fc684dd1957828c6f9c0d1b7d13524218c8402a4a0a91e9135fb662f127", "https://www.virustotal.com/gui/collection/3f5e2fc684dd1957828c6f9c0d1b7d13524218c8402a4a0a91e9135fb662f127/iocs", "https://www.virustotal.com/graph/embed/g3238715200b747f1a237e03037a4d5ff15d85564ee0740439750d8ff75347031?theme=dark", "b257cc536324cd2566432555666307b43d27ee9cbda5e45707e3e97b61b3dff6" ], "public": 1, "adversary": "", "targeted_countries": [ "Canada" ], "malware_families": [], "attack_ids": [], "industries": [ "Government", "Education", "Telecommunications" ], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "UCP_GoA23", "id": "382539", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_382539/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 58, "FileHash-SHA1": 57, "FileHash-SHA256": 952, "IPv4": 393, "URL": 200, "domain": 340, "hostname": 367 }, "indicator_count": 2367, "is_author": false, "is_subscribing": null, "subscriber_count": 19, "modified_text": "12 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6a09b3b462c09a8bf0daa85b", "name": "Credit: Disable_Duck [\"UAlberta alfresco management\"]", "description": "", "modified": "2026-05-17T12:25:24.282000", "created": "2026-05-17T12:25:24.282000", "tags": [ "note", "home", "lucene paths", "json descriptor", "lucene path", "company home", "actividades", "pageuser", "sie knnen", "sie auf", "link klicken", "recente", "u kunt", "attivit", "possibile", "activits", "vous", "report", "web link", "cvs report", "link", "chs placement", "chs student", "placement", "team", "google form", "university", "alberta", "automation", "please", "following", "followers", "ihnen", "mitarbeitern", "mitarbeiter", "hello", "foreign visitor", "fvca", "human resource", "fvca assessment", "incomplete", "regards", "klik", "wachtwoord", "mijn profiel", "klik op", "hoogachtend", "alfresco", "bonjour", "cliquez sur", "nous", "pour ce", "mon profil", "changer", "invito", "caro", "fare", "password", "il mio", "cambia password", "per rifiutare", "cordiali saluti", "my profile", "change password", "konto", "sie erstellt", "passwort", "wir legen", "ihnen nahe", "passwort bei", "anmeldung zu", "ndern", "gehen sie", "mmm yyyy", "nome utente", "nombre", "contrasea", "para hacerlo", "mi perfil", "atentamente", "account", "alfresco share", "hola", "haga", "los datos", "y seleccione", "si desea", "click", "einladung von", "hallo", "sie eingeladen", "site", "klicken sie", "konto fr", "alfresco client", "kofax index", "inhaltselement", "zur site", "gren alfresco", "pledged gift", "office", "advancement", "datetime", "university vpn", "date", "shared", "support", "auxiliary", "process", "priority", "medium high", "pay action", "sincerely", "uofa ecm", "link um", "aufgaben stehen", "verfgung", "prioritt", "niedrig mittel", "hoch", "klicken", "aufgabe zu", "il seguente", "disponibile", "priorit", "bassa media", "alta", "clicca", "clicca su", "la tche", "tre rcupre", "basse moyenne", "leve", "cliquez", "cordialement", "prioriteit", "laag gemiddeld", "hoog", "la siguiente", "prioridad", "media alta", "saludos", "kb content", "links content", "content url", "download url", "webdav url", "ttulo", "descripcin", "ninguno", "ninguna", "creador", "creado", "modificador", "modificado", "tamao", "webdav", "titre", "aucun", "aucune", "modificateur", "modifi", "taille", "ko liens", "du contenu", "dossier du", "url webdav", "titolo", "nessuno", "nessuna", "creato", "modificato", "dimensioni", "kb link", "al contenuto", "cartella", "ingen", "beskrivelse", "tittel", "opprettet", "modifikator", "modifisert", "strrelse", "lenker for", "innhold mappe", "descrio", "nome", "nenhum", "nenhuma", "criador", "criado", "tamanho", "geen", "beschrijving", "titel", "maker", "gemaakt", "gewijzigd", "grootte", "contenturl", "downloadurl", "beschreibung", "url zum", "keiner", "keine", "ersteller", "erstellt", "bearbeiter", "gendert", "kb links", "download", "navigatebrowse", "pagesite", "readme file", "yesno", "user name", "main", "function", "log debug", "record", "sample rm", "import", "njson", "forms", "sites", "documenttype", "commonfolder", "error", "value", "jsonfile", "service", "false", "moving", "prop", "null", "bearer", "uappol", "uappol function", "contentid", "param", "id var", "call", "post request", "json", "config", "coveo", "uappol metadata", "content id", "and not", "loads", "update", "uploader", "inbox", "rnrn", "create", "contenteml", "inbox folder", "number", "normal", "textpart", "backup", "createchildren", "backupname", "childlist", "name", "content", "array", "write", "childname2", "childname3", "childname4", "reviewgroup", "groupsite", "starting", "started", "delete email", "command", "found", "create content", "resources", "unknown command", "globals", "var title", "rnrncopyright", "copyright", "csvtoarray", "regexp", "jsonstr", "daily", "review", "az09", "format", "hrsfilescanner", "hrs document", "fromscanner", "not type", "matches1", "employee id", "third", "tempfilename", "ldap", "version", "this", "file share", "folder", "trimlr", "namearr", "personid", "document name", "ales file", "scanned", "shared drive", "last", "document type", "document", "advising notes", "debug", "debugstr", "schedule", "descriptorpath", "web service", "inbound rule", "web services", "collaborator", "groupeveryone", "check", "index", "taskassignee", "taskenddate", "filename", "localisotime", "startdatetime", "timeperiod", "uofa edrms", "author", "descommonnode", "nomatch", "iddocumenttype", "siteid", "span", "path", "term", "core", "cap report", "template", "object", "cap mail", "dev testing", "application", "aps status", "cap generate", "monthly report", "extension", "alfresco locale", "september", "pm mdt", "school", "didx", "json response", "cap final", "rebcapiddict", "finalcapiddict", "aps process", "trigger", "chsdocument", "message", "func", "msgstr", "emailobj", "emailtemplate", "emailsubject", "sitepath", "chs docs", "studentfiles", "faculty", "true", "chssiteid", "type", "aspect", "chsdocs", "nodeidx", "find", "expired", "chs school", "defunc", "facultykey", "program", "spasite", "ldapperson", "parent name", "securitytype", "formsengg", "limit", "enggfilescanner", "stuccid", "csv file", "studdept", "supccid", "supdept", "cosupccid", "relocation", "fgsr", "records site", "fgsr doc", "department", "start fgsr", "department doc", "completion of", "oral hlth", "form", "application for", "report of", "admission", "master", "music", "unknown", "comp", "class", "leave", "supervisor", "currentline", "return", "studentid", "superccid", "revdate", "code", "apstaskproperty", "converttocsv", "aps guideline", "aps task", "newdata", "hyperlink", "certificate", "first", "info", "procid", "filecontentstr", "query sort", "create header", "person id", "subject title", "node", "studentccid", "yyyymmdd", "lookupjson", "propidx", "input date", "iso format", "folder level", "query", "duedate", "test java", "dailyschedule", "upload", "ro adm", "workflow", "offset", "adm workflow", "data length", "startindex", "json object", "aps group", "acs site", "user", "getgroupid", "am mst", "acsaps group", "user sync", "january", "start january", "february", "start february", "december", "start december", "march", "start march", "am mdt", "consumer march", "aps student", "april", "start april", "june", "start june", "pm mst", "ro backscan", "edrmsteam", "group", "group december", "aps ro", "copy file", "aps api", "maxfile", "creator", "rand", "hrsbs", "july", "august", "hrsbssyncccids", "zhrroleuserresp", "edrms", "ccids", "prefix", "createdirectory", "directory", "actionreason", "safefilename", "employeeclass", "carry", "csv data", "host", "bachelor", "college level", "mike", "propname", "maxitems", "currjson", "fvca status", "important", "prod", "manual data", "doctoratephd", "medicine", "nodename", "employeeccid", "managerccid", "employeeid", "workingtitle", "regtempdescr", "findkey", "email", "new document", "doctypelabel", "competitive bid", "bid exception", "pcm competitive", "and aspect", "competitive", "nodes", "bid update", "acommonfolder", "formspcm", "peoplesoft", "no data", "qaselectednode", "qaselected", "qanotselected", "qa folder", "preqa", "qa var", "documentcount", "passcount", "qadocument", "qa selected", "moved", "attempts", "accepted", "rm file", "plan", "rm filing", "min to", "rm system", "batch", "time limit", "rmcfg", "string", "already", "load", "valid", "graddate", "uathdep", "ccid", "title", "abstract", "embargo", "datestr", "searchresult", "alfresco afa", "admissions", "student case", "files", "and type", "institution", "inst", "json config", "institution not", "if file", "logger", "needle", "xmlstr", "staus", "document linkn", "getlogfile", "documentlist", "xml field", "not found", "addaspect", "move aspect", "duplicate file", "makes", "to max", "checks", "workflow name", "workflow link", "emplid", "due daten", "total afa", "not path", "afabundling", "change", "not aspect", "logs", "ephesoft", "document moved", "epehsoft", "xmlsourcenode", "batchsize", "filemappingpdf", "entry", "move file", "getcsvfile", "batchprocess", "logging", "completed", "document link", "groupn", "created date", "stdapl", "person", "workflow desc", "json file", "list", "lastmonth", "daily qa", "default", "qastartdate", "query language", "finished", "afa bundle", "transcriptarr", "lucene query", "qacounter", "rrfgroupname", "uaroemplid", "uaropriority", "uaroduedate", "documentlistarr", "uarmm", "profile", "courseauditform", "status", "jile", "searchmatchmove", "logfoldername", "backscanreview", "smfstr", "rosm", "converter", "shortxml", "failedcsvfolder", "xml file", "qaoperatorindex", "qaoperatorlabel", "script", "suresh", "aws promotion", "file", "tasks", "bundlingprop", "tasktype", "grps2", "uarotasktype", "comments", "test", "ro scripts", "xmlnode", "shortdescr", "xmlcont", "firstname", "orgid", "middlename", "lastname", "middle", "final", "script started", "to now", "received date", "first name", "receiveddatestr", "dateofbirthstr", "getdefination", "2005 aug", "dropbox", "foldercreate", "scan doc", "officiality", "search match", "running script", "materialextid", "studentref", "ceeb", "materialcode", "memo", "jsoncontent", "ro document", "paperfileutils", "afaconfig", "ro workflow", "paperfileconfig", "applicationjson", "formsrso", "targetfile", "property name", "pinames today", "addp", "science addp", "addp move", "ro code", "scifilescanner", "desconfnode", "grabnodeprop", "copy", "consumer", "initiators", "hiring", "consigno", "offer letter", "match", "apsmaster", "match2", "reappointment", "expiry date", "today", "finaldate", "task info", "psperson", "complete basic", "hiring info", "employee", "resultdata", "delegategroup", "delegate group", "verify", "bind", "aps appointment", "trevor report", "sfsussl", "drawdown", "refund", "reporttype", "var document", "shareurl", "newgroup", "parentgrp", "group created", "var logfile", "rule folder", "site running", "report on", "get site", "foldername", "create file", "reportlogslogs", "reportlogs", "ist site", "running report", "count", "tran", "var csvfile", "result length", "processid", "process id", "delimiters", "quoted", "standard", "starting name", "morechildren", "pdf var", "length", "newname", "fiscal", "docnamearr", "filenode", "calendar year", "versionhistory", "new doc", "web deployed", "var startdate", "startdate", "maxcount", "prevmonth", "monthcount", "application id", "delete", "get path", "if node", "search length", "arra y", "if csv", "version history", "graduate", "graduate folder", "children", "graduate file", "searchmatchdob", "career", "appl nbr", "jan04 now", "counter", "thesis", "runyear", "spring", "service log", "everything", "this determine", "thesis deposit", "archival", "problem", "filepath", "md import", "arraytocsv", "found document", "start", "food", "yumna", "start kofax", "kofax", "admin", "subject", "sample email", "execute", "koafx", "apasresponseid", "merge", "recruitment", "transcripts", "review request", "admindate", "requesteddate", "approveddate", "approvereject", "getemailbody", "taskid", "sendemail", "request status", "siteconsumer", "sitemanager", "eval", "acshost", "global env", "config file", "apsprod", "params", "alloc", "checkpath", "newpath", "adding entity", "surnamechar", "adding person", "jsonfunction", "text", "syntaxerror", "arraytoxml", "xml related", "change xml", "xmltoarray", "xmlutil", "common folder", "random2digit", "maxlimit", "jsonarchive", "very", "returns", "sitecontext", "arrcounter", "node id", "items", "array length", "therecord", "award sponsor", "rso project", "res0012345", "iso88591", "util function", "project id", "proposal id", "doc name", "newdocname", "prod url", "199899", "property", "typeprop", "barcode", "accepts", "parent", "xmlfilename", "siteconfigjson", "qabatchgrp", "signeddate", "ephdocumenttype", "json document", "qapercentage", "entity", "broker", "add error", "getexecutetime", "qaoperator", "retain title", "idnumber", "assocname", "metaarr", "fund report", "csvcontent", "input folder", "doc00c200004txg", "xmlfile", "node1", "node2", "540am", "240pm", "metadata", "var folder", "filter", "mappedobj", "09azaz", "conditionval", "foldercondition", "file name", "xmlfileobj", "alfresco prop", "setup error", "formatjson", "id property", "move", "getrandomnumber", "result", "newdoctype", "no title", "clioacs update", "clio", "patch", "system overview", "system", "overview", "purpose", "aims", "objectives", "prerequisites", "total", "expected effort", "domain", "urls", "dept param", "department name", "done", "submit form", "saving", "label", "input", "approvers", "information", "user group", "request", "group request", "users", "single family", "edmonton ab", "coverage", "common law", "step workflow", "care", "dental benefits", "direct", "web scripts", "get http", "documentation", "web script", "http method", "http", "apis", "development", "knowledge", "java", "empty argument", "e1234", "im system", "lookupentity", "configfilename", "namespace", "searchterm", "access", "jsonuser", "alfresco search", "page search", "expires", "signer", "reason", "utf8", "stripcharacter", "pull hiring", "getapsdbid", "save", "processsetidset", "saved", "returndata", "boolean", "start building", "varname", "fill", "time click", "initiated all", "submissions", "all submissions", "process landing", "page", "initiators all", "maps initiated", "post doc", "student term", "start form", "middle name", "email address", "retype", "cell", "phone no", "fellow", "secureorigin", "expand", "thank", "here", "please check", "aps list", "pang", "subset", "display", "args", "task", "username", "save form", "data need", "cdkey", "checkdict", "item", "column", "anchor", "multi", "tasks filter", "search", "trigger aps", "process api", "apsprocess", "authentication", "webscript", "getapsperson", "process info", "initsavestatus", "step0statusfail", "signer1", "signer2", "appointment", "taskjson", "groupapiaccess", "checkapiuser", "fgsrpr", "psaudit", "statusname", "unsuccessful1", "apptreappt", "emplobject", "caps aps", "cap epsb", "applicant", "form submitted", "board review", "form applicant", "school district", "start date", "cap application", "home help", "pdfa format", "larger", "upload file", "please click", "uofacap", "applications", "jstr", "processjson", "invalid url", "associate dean", "edmonton public", "october", "elk island", "reutrn false", "mapdoctypeurl", "doctype", "cap document", "doctypes", "doctypemap", "schools", "public schools", "foip", "edmonton area", "epsb", "capid", "server", "aps user", "groupcapadmin", "assignuser", "cap ea", "successfully", "please wait", "successfully ea", "apsservice", "apsserviceprod", "requireddate", "bibliography", "reb approval", "letter", "cprbls", "ahsrespect", "ahscon", "immformdocs", "picvsc", "whmis", "condissi", "hspnet", "conphoto", "conclin", "college", "health", "submission date", "effective date", "expiration date", "chs admin", "student view", "typekey", "placementdocs", "warning", "jobj", "abraniuk", "wendy", "terry harris", "directorhrsbs", "level", "holiday pay", "part time", "payroll", "salariedreg aux", "cheat", "paramname", "getallurlparams", "hrsbs config", "data dictionary", "field", "responsejson", "workflowid", "workflow id", "context", "event", "statusevent", "uaesign", "success", "permission", "progress report", "postdoctoral", "sorry", "deptjson", "fgsr student", "process status", "select", "currentuser", "reports", "student ccid", "populated", "invalid student", "supervisor ccid", "co supervisor", "due date", "freedom", "report process", "fgsr forms", "list fgsr", "report fgsr", "report sorry", "review process", "fgsr supervisor", "thesis programs", "programs", "please enter", "student id", "submit button", "var taskid", "var currentuser", "review sorry", "raheel", "added", "urlorigin", "need", "raheel var", "elmid", "commentkeyarr", "override", "menu", "colour bar", "mdphd", "absence", "completion", "mbameng", "mbamsc", "meng", "jason", "acs property", "available", "subdoctype", "test person", "test effective", "modelnodepath", "sitename", "metadatamap", "sitefile", "google addon", "gtagra", "gta gra", "zhreformengresp", "id otherwise", "university home", "indicate", "monday", "tuesday", "wednesday", "thursday", "friday", "na note", "services", "please contact", "documentname", "time", "docs", "documentlink", "employee ccid", "conflict", "task assigned", "ist coi", "declaration", "jsonobj3", "parse", "stringify", "grouplist", "json post", "taskfilter", "applies", "assigntogroup", "retrieves", "assignee", "queries", "expects", "uri args", "json containing", "applyfilter", "assignment", "avm folder", "avm store", "store id", "fullpath", "store", "storeid", "avm stores", "search term", "blog query", "category", "api call", "returns json", "cached data", "keylabel", "rest", "ldap query", "resultstr", "jsonoutput", "campusid", "jsonobj", "suresh joshee", "raheel bhojani", "desrochers", "first check", "set message", "materialkey", "acommonfolderid", "hasaccess", "siteconfig", "unprocesseddata", "savemetadata", "getcustomscript", "sitetitle", "error occured", "afa admission", "afas", "change log", "date name", "description", "ebeaton script", "tfrith", "afa main", "runasuser", "afas name", "afa paper", "file test", "utility enter", "does", "student", "bad query", "parameters", "add all", "or condition", "batch ids", "case files", "batchid", "afns", "agricultural", "anaesthes", "life", "environmental", "anaesthesiology", "uappol content", "deanaheed", "programyear", "province", "agreementtype", "safety manual", "mtis", "cree", "blackfoot", "nakota sioux", "iroquois", "dene", "treaties", "first nations", "next", "refresh", "site viewer", "facetkey", "sortparameter", "textjavascript", "public site", "viewer access", "acs cron", "job error", "alfrescos", "unauthorized", "enter", "bear tracks", "main department", "choose", "library", "john", "reviewer", "embargodate", "actiondate", "convocation", "graduation", "nodeid", "thesis status", "match result", "match list", "name dob", "view", "searchcriteria", "main function", "method", "chs upload", "stuln", "filetype", "stuid", "chs agreement", "health sciences", "recreation fomd", "dentistry fomd", "fomd", "therapy fomd", "consent for", "disclosure of", "alberta freedom", "protection", "privacy act", "alberta health", "chs form", "intake", "tasks dashlet", "doccd", "val2", "a my", "view error", "view warning", "keyword search", "refresh list" ], "references": [ "old-AlfrescoToolkit.conf", "AlfrescoToolkit.info", "AlfrescoToolkit.conf", "activities-email_es.ftl", "activities-email_ja.ftl", "activities-email_de.ftl", "activities-email_nl.ftl", "activities-email.ftl", "activities-email_it.ftl", "activities-email_fr.ftl", "CAP-notify-monthly-report.ftl", "chs-commentUpdate.ftl", "chs-studentUploadNotification.ftl", "chs-Invalid.ftl", "chs-studentExpireSoon.ftl", "chs-studentExpired.ftl", "following-email.html_it.ftl", "following-email.html_fr.ftl", "following-email.html_ja.ftl", "following-email.html_nl.ftl", "following-email_de.html.ftl", "following-email_fr.html.ftl", "following-email_ja.html.ftl", "following-email_it.html.ftl", "following-email_nl.html.ftl", "following-email.html.ftl", "following-email.html_de.ftl", "fvca-reminder-email.ftl", "fvca-corrections-email.ftl", "invite-email_nl.html.ftl", "invite-email-add-direct.html.ftl", "invite-email-add-direct.html_fr.ftl", "invite-email_fr.html.ftl", "invite-email_it.html.ftl", "invite-email-add-direct.html_es.ftl", "invite-email-add-direct.html_de.ftl", "invite-email_ja.html.ftl", "invite-email-add-direct.html_nl.ftl", "new-user-email.html.ftl", "new-user-email_de.html.ftl", "invite-email-add-direct.html_ja.ftl", "invite-email-moderated.html.ftl", "new-user-email_fr.html.ftl", "new-user-email_it.html.ftl", "new-user-email_ja.html.ftl", "new-user-email_es.html.ftl", "new-user-email_nl.html.ftl", "invite-email-add-direct.html_it.ftl", "new-user-email_nl.html", "invite-email.html_nl.ftl", "invite-email.ftl", "invite-email_es.html.ftl", "invite-email.html.ftl", "invite-email_de.html.ftl", "invite_user_email.ftl", "kofaxFailedEmailTemplate.ftl", "notify_user_email.ftl", "notify_nl.htm", "notify_user_email_es.html.ftl", "notify_user_email_de.html.ftl", "notify_user_email_ooa_failed.ftl", "notify_user_email.html.ftl", "notify_user_email_it.html.ftl", "notify_user_email_e-transcript_failed.ftl", "notify_user_email_ja.html.ftl", "notify_user_email_fr.html.ftl", "notify_user_email_nl.html.ftl", "OOA-notify-email-template.ftl", "ADV-notify-terms-types.ftl", "appt-final-reminder.ftl", "appt-halfway-reminder.ftl", "sfs-wf-email.html.ftl", "sfs-wf-completed-email.html.ftl", "payActionDecision.html.ftl", "departmentAdhocTask.html.ftl", "wf-email.html_de.ftl", "wf-email.html.ftl", "wf-email_it.html.ftl", "wf-email_fr.html.ftl", "wf-email_nl.html.ftl", "wf-email_ja.html.ftl", "wf-email.html_fr.ftl", "wf-email.html_nl.ftl", "wf-email_es.html.ftl", "wf-email.html_ja.ftl", "wf-email.html_it.ftl", "wf-email_de.html.ftl", "wf-email.html_es.ftl", "emailbody_textplain_alfresco.ftl", "emailbody_textplain_alfresco_es.ftl", "emailbody_textplain_alfresco_fr.ftl", "emailbody_textplain_alfresco_it.ftl", "emailbody_textplain_alfresco_ja.ftl", "emailbody_textplain_alfresco_nb.ftl", "emailbody_textplain_alfresco_pt_BR.ftl", "emailbody_textplain_alfresco_nl.ftl", "emailbody_textplain_alfresco_ru.ftl", "emailbody_textplain_alfresco_zh_CN.ftl", "emailbody_textplain_share.ftl", "emailbody_textplain_share_de.ftl", "emailbody_textplain_share_es.ftl", "emailbody_textplain_share_it.ftl", "emailbody_textplain_share_ja.ftl", "emailbody_textplain_share_nb.ftl", "emailbody_textplain_share_nl.ftl", "emailbody_textplain_share_ru.ftl", "emailbody-alfresco-textplain.ftl", "emailbody-share-textplain.ftl", "emailbody_textplain_alfresco_de.ftl", "emailbody_textplain_share_zh_CN.ftl", "emailbody_textplain_share_fr.ftl", "emailbody_textplain_share_pt_BR.ftl", "uofa-pc-model.xml", "uofa-pllc-model.xml", "uofa-science-model.xml", "uofa-rso-model.xml", "uofa-set-model.xml", "uofa-sfs-model.xml", "uofa-slate-model.xml", "uofa-uappol-model.xml", "advext-model.xml", "assocModel.xml", "adv-model.xml", "cbsr-model.xml", "dynamicSecurityMarksModel", "ephesoft-educational.xml", "facopr-model.xml", "fgsr-model.xml", "faculty-model.xml", "psAudit-model.xml", "FVCA.xml", "roDocProcessing-model.xml", "ro-model.xml", "fgsr-thesis-deposit.xml", "security-group-model.xml", "ua-audit-generic-model.xml", "ua-dummy.xml", "calendar-year-model.xml", "ua-error-model.xml", "uafgsrsup-model.xml", "uaqa-model.xml", "transcript-model.xml", "uAlbertaWorkflowGeneral.xml", "uarmm-supplement-scanning.xml", "uarm-rma-filing-model.xml", "ua-search-model.xml", "ro-search-match.xml", "uatraining.xml", "uofa-ales-model.xml", "uofa-arts-model.xml", "uofa-aps-model.xml", "uofa-base-model.xml", "uawfh-model.xml", "uofa-augustana-model.xml", "uofa-business-model.xml", "uarmTempModel.xml", "uofa-cap-model.xml", "uofa-chs-model.xml", "uofa-chs-agreements-model.xml", "uofa-common-model.xml", "uofa-education-model.xml", "tamis-model.xml", "uofa-engg-coop-model.xml", "uofa-engg-model.xml", "uofa-fo-model.xml", "uofa-extension-model.xml", "uofa-esign-model.xml", "uofa-hrsbs-model.xml", "uofa-law-model.xml", "uofa-caps-model.xml", "uofa-hrs-model.xml", "uofa-native-studies-model.xml", "uofa-pllc-model.json", "uofa-rso-model.json", "uofa-pc-model.json", "uofa-native-studies-model.json", "uofa-slate-model.json", "uofa-uappol-model.json", "uofa-science-model.json", "uofa-workflowGeneral.json", "uofa-sfs-model.json", "adv-model.json", "advext-model.json", "assocModel.json", "calendar-year-model.json", "facopr-model.json", "cbsr-model.json", "ephesoft-educational.json", "faculty-model.json", "faculty-model.xml.json", "rma-model.json", "fgsr-model.json", "FVCA.json", "psAudit-model.json", "ro-aug-model.json", "ro-search-match.json", "tamis-model.json", "security-group-model.json", "fgsr-thesis-deposit.json", "transcript-model.json", "ro-model.json", "ua-audit-generic-model.json", "uafgsrsup-model.json", "uaqa-model.json", "uarmm-supplement-scanning.json", "uAlbertaWorkflowGeneral.json", "ua-error-model.json", "uofa-ales-model.json", "ua-search-model.json", "uarmTempModel.json", "uofa-aps-model.json", "uawfh-model.json", "uofa-arts-model.json", "uofa-cap-model.json", "uofa-chs-agreements-model.json", "uofa-augustana-model.json", "uofa-base-model.json", "uofa-chs-model.json", "uofa-engg-coop-model.json", "uofa-common-model.json", "uofa-engg-model.json", "uofa-extension-model.json", "uofa-hrsbs-model.json", "uofa-fo-model.json", "uofa-education-model.json", "uofa-law-model.json", "uofa-hrs-model.json", "uofa-esign-model.json", "uofa-business-model.json", "faculty-of-science-site.json", "FandO-Organizations.json", "FandO-Programs.json", "fgsr-awards.json", "fgsr-category-list.json", "fgsr-exam-list.json", "fgsr-official-list.json", "fgsr-programOfStudy.json", "fgsr-site.json", "fo-emergency-response-manual.json", "graduate-student-records-site.json", "fo-site.json", "fo-utilities.json", "hrs-benefits.json", "hrsbs-action-reasons.json", "graduate-student-records-v2-site.json", "hrsbs-doc-list.json", "hrsbs-file-structure.json", "hrsbs-owner-details.json", "hrsbs-functionalroles.json", "hrsbs-function-module.json", "hrsbs-review-month.json", "hrsbs-security-class.json", "hrsbs-site.json", "hrs-employeeApprovedDeductions.json", "hrs-bulkId.json", "hrsbs-review-cycle.json", "hrs-employmentFinancial.json", "hrs-personalInformation.json", "hrs-pension.json", "hrs-security-list.json", "hrs-leaves.json", "Institutions.json", "ist-site.json", "hrs-site.json", "my-site-site.json", "law-security-list.json", "native-studies-doc-list.json", "fgsr-credential-list.json", "law-doc-list.json", "native-studies-security-list.json", "office-of-advancement-record-types.json", "office-of-advancement-site.json", "pcm-category.json", "pllc-doc-list.json", "ro-academic-pre-pro-programs.json", "pllc-security-list.json", "ro-acad-group.json", "ro-admitType.json", "ro-applicant-type.json", "ro-campusSolutionsTerm.json", "hrsbs-employee-class.json", "pllc-site.json", "ro-indigenous-type.json", "ro-doctypes.json", "pcm-site.json", "ro-official.json", "ro-org-desc.json", "ro-related-record-types.json", "ro-relationship-to-institution.json", "ro-search-match-status.json", "ro-authenticity.json", "ro-slate-folio-material-non-school-scope.json", "ro-slate-institution-material.json", "ro-slate-folio-material-school-scope.json", "ro-method-receipt.json", "ro-slate-institutions.json", "ro-test-id.json", "rso-accounts-receivable-accounts-payable-doc-type.json", "rso-agreements-doc-category.json", "rso-bulk-scan-doc-type.json", "rso-cfi-purchasing-doc-type.json", "rso-cfi-financials-doc-type.json", "rso-financial-reconciliation-doc-type.json", "rso-financial-reporting-doc-type.json", "rso-financials-doc-type.json", "rso-mask.json", "rso-site.json", "rso-sponsor-names.json", "science-doc-list.json", "science-security-list.json", "school-of-business-site.json", "sfs-ussl-report-status.json", "staff-training-site.json", "student-financial-services-doc-list.json", "student-financial-services-site.json", "student-records-bulk-load-testing-site.json", "student-records-training-site.json", "student-records-site.json", "student-transcripts-site.json", "rso-forms-form-type.json", "support-documentation-site.json", "test-site-site.json", "uappol-category-heirarchy.json", "uappol-type.json", "uappol-site.json", "uoda-faculties.json", "academic-department.json", "adv-correspondence-type.json", "uoda-departments.json", "advsearch.json", "ales-security-list.json", "ales-doc-list.json", "arts-doc-list.json", "arts-security-list.json", "augustana-security-list.json", "augustana-site.json", "augustana-legacy-transcript-doc-list.json", "rso-activation-report-doc-type.json", "business-doc-list.json", "business-security-list.json", "bulkload-testing-site.json", "cap-site.json", "caps-school-board-list.json", "cbsrsite-site.json", "cbsrsite-sopTypes.json", "cbsr-study.json", "cbsr-worksheetType.json", "augustana-doc-list.json", "chs-ag-type.json", "chs-agreements-site.json", "chs-campus-list.json", "chs-degProgram-list.json", "chs-emailNotification.json", "chs-document-status.json", "chs-faculty-list.json", "chs-programYear-list.json", "chs-program-list.json", "canada-provinces-list.json", "demo-site-site.json", "education-doc-list.json", "department.json", "education-security-list.json", "chs-stuEmailNotification.json", "college-of-health-sciences-site.json", "chs-provinces-list.json", "engineering-coop-doc-list.json", "engineering-coop-security-list.json", "engineering-co-op-site.json", "engineering-doc-list.json", "extension-doc-list.json", "extension-security-list.json", "facopr-planTypes.json", "facopr-supportinDocField.json", "faculty-of-ales-site.json", "engineering-security-list.json", "faculty-of-education-site.json", "faculty-of-extension-site.json", "faculty-of-native-studies-site.json", "faculty-of-law-site.json", "faculty-of-arts-site.json", "faculty-of-engineering-site.json", "my_docs_inline.ftl", "my_docs.ftl", "my_spaces.ftl", "recent_docs.ftl", "translatable.ftl", "readme.ftl", "show_audit.ftl", "general_example.ftl", "my_summary.ftl", "doc_info.ftl", "localizable.ftl", "recordsCustomModel.xml", "imapConfig.json", "rm_event_config.json", "rmScriptThrowError.js", "report_rmr_transferReport.html.ftl", "report_rmr_destructionReport.html.ftl", "report_rmr_holdReport.html.ftl", "notify-records-due-for-review-email.ftl", "record-rejected-email.ftl", "record-superseded-email.ftl", "onCreate_supersedes.js", "rma_isClosed.js", "PaperFileconfig.json", "MyTasks-config.json", "AFAconfig.json", "roDocumentTypes.json", "uappol-upload-rule.js", "uappolCreateFolderRule.js", "uappolCreateFolder.js", "uappol-api.js", "uappol-functions.js", "command-utils.js", "backup and log.js", "backup.js", "example test script.js", "test return value.js", "start-pooled-review-workflow.js", "command-processor.js", "command-search.js", "alfresco docs.js", "append copyright.js", "createDepartmentJSON.js", "hrsDaily.js", "hrsFolderCreateSchedule.js", "hrsScanned.js", "hrsCreateFolder.js", "hrsFolderCreateRule.js", "hrsFileShareFolder.js", "alesCreateFolderRestricted.js", "alesCreateFolderSchedule.js", "alesBulkShareFolder.js", "alesFileScanned.js", "alesCreateFolder.js", "alesDaily.js", "alesFileShareFolder.js", "alesCreateFolderConfidential.js", "alesCreateAdvisingNotes.js", "alesFolderCreateSchedule.js", "deployWebServiceDescriptor.js", "taskReportCSV-Appointment-prod.js", "artsFileScanned.js", "artsCreateFolderRule.js", "artsCreateFolder.js", "artsCreateFolderRestricted.js", "augCreateFolderRestricted.js", "augCreateFolder.js", "businessCreateFolderRule.js", "businessCreateFolder.js", "businessCreateFolderSchedule.js", "businessBulkShareFolder.js", "businessFileShareFolder.js", "businessCreateFolderRestricted.js", "businessDaily.js", "businessCreateAdvisingNotes.js", "businessFileScanned.js", "CAPSendMonthlyReportEmail.js", "CAPGenerateMonthlyReport.js", "CapFinalReportSubmit.js", "chsCreateFolderRule.js", "chsEmailOnUpdateComment.js", "chsReport.js", "EmailNotifCHSStudent.js", "SetExpiryDate.js", "chsCreateFolder.js", "chsFacultyReport.js", "chsAgreementCreateFolderRule.js", "chsAgreementCreateFolder.js", "scheduleJobTest.js", "every52MinPastHour.js", "every46MinPastHourBetween4PM12PM.js", "every57MinPastHour.js", "every47MinPastHourBetween4PM12PM.js", "everyDay4H30MinAM.js", "everyDay7H45MinAM.js", "every10MinStartingAt5MinPastHour.js", "every38MinPastHourBetween4PM12PM.js", "every20MinStartingAt15MinPastHour.js", "everyDay2H05MinAM.js", "every2MinStartingAt1MinPastHour.js", "everyDay1H05MinAM.js", "everyDay12H30MinAM.js", "everyDay7H30MinPM.js", "every30MinStartingAt19MinPastHour.js", "every30MinStartingAt11MinPastHour.js", "everyDay2H35MinAM.js", "every30MinStartingAt26MinPastHour.js", "every16MinPastHour.js", "everyDay1H45MinAM.js", "everyDay2H45MinAM.js", "every29MinPastHour.js", "every22MinPastHour.js", "everyDay11H30MinPM.js", "educationCreateFolderRule.js", "educationCreateFolder.js", "educationCreateAdvisingNotes.js", "enggCoopCreateFolderRestricted.js", "enggCoopCreateFolderRule.js", "enggCoopBulkUpload.js", "enggCreateFolderRule.js", "enggCreateFolderRestricted.js", "enggCreateFolder.js", "engineeringCreateAdvisingNotes.js", "enggCoopCreateFolder.js", "enggFileScanned.js", "enggCoopFileScanned.js", "extensionFileScanned.js", "extensionCreateFolder.js", "extensionCreateFolderRule.js", "fgsrCreateGuidelineAPSProcessFromCSV.js", "fgsrDocRestructure.js", "fgsrMigrationScript.js", "fgsrDocRelocation.js", "fgsrCreateFolderFromCSV.js", "guideline-reports.js", "fgsrMigrationScript-withTerminationLogic.js", "modfiyOrUpdatePropertyfromCSV.js", "fgsr-case-file-report.js", "fgsrCreateAPSProcessFromFolder.js", "fgsrCreateFolder.js", "fgsrCopyMetadataToFolderLevel.js", "fgsrCreateAPSProcessFromCSV.js", "foCreateFolder.js", "foCreateFolderRule.js", "Script1.js", "Script2.js", "scheduleRunEvery2-10PM.js", "scheduleRunEvery5PMTo10PM.js", "scheduleRunEvery30Minutes.js", "scheduleRunEvery60Minutes.js", "scheduleRunEveryday3PMto11PM.js", "scheduleRunEveryday12AMto6AM.js", "scheduleRunEvery20Minutes.js", "scheduleRunEvery2AM.js", "acsToApsUserUpdate.js", "2024-01-13-log.txt", "2024-01-15-log.txt", "2024-01-20-log.txt", "2024-01-21-log.txt", "2024-01-22-log.txt", "2024-01-23-log.txt", "2024-02-04-log.txt", "2024-02-05-log.txt", "2024-02-06-log.txt", "2024-02-07-log.txt", "2024-02-08-log.txt", "2024-01-14-log.txt", "2024-01-18-log.txt", "2024-01-11-log.txt", "2024-01-16-log.txt", "2024-01-19-log.txt", "2024-01-26-log.txt", "2024-01-28-log.txt", "2024-01-30-log.txt", "2024-01-12-log.txt", "2024-01-29-log.txt", "2024-01-27-log.txt", "2024-01-31-log.txt", "2024-01-24-log.txt", "2024-02-09-log.txt", "2024-02-02-log.txt", "2024-01-09-log.txt", "2024-02-03-log.txt", "2024-01-05-log.txt", "2024-01-06-log.txt", "2024-01-04-log.txt", "2024-02-01-log.txt", "2024-01-07-log.txt", "2024-01-08-log.txt", "2024-02-10-log.txt", "2024-02-11-log.txt", "2024-02-12-log.txt", "2024-02-13-log.txt", "2023-12-31-log.txt", "2024-02-15-log.txt", "2024-02-16-log.txt", "2024-02-14-log.txt", "2024-02-18-log.txt", "2024-02-20-log.txt", "2024-01-17-log.txt", "2024-02-19-log.txt", "2024-01-10-log.txt", "2024-02-23-log.txt", "2024-02-25-log.txt", "2024-02-21-log.txt", "2024-01-25-log.txt", "2024-02-28-log.txt", "2024-02-22-log.txt", "2024-02-29-log.txt", "2024-03-02-log.txt", "2024-03-03-log.txt", "2024-02-26-log.txt", "2024-03-04-log.txt", "2024-03-06-log.txt", "2024-03-07-log.txt", "2024-03-05-log.txt", "2024-03-08-log.txt", "2024-03-09-log.txt", "2024-03-11-log.txt", "2024-03-10-log.txt", "2024-03-12-log.txt", "2024-03-13-log.txt", "2024-03-14-log.txt", "2024-03-15-log.txt", "2024-03-16-log.txt", "2024-03-17-log.txt", "2024-03-18-log.txt", "2024-03-20-log.txt", "2024-03-21-log.txt", "2024-03-22-log.txt", "2024-03-19-log.txt", "2024-03-23-log.txt", "2024-03-01-log.txt", "2024-03-26-log.txt", "2024-03-25-log.txt", "2024-03-28-log.txt", "2024-03-29-log.txt", "2024-03-27-log.txt", "2024-03-24-log.txt", "2024-03-30-log.txt", "2024-04-02-log.txt", "2024-04-03-log.txt", "2024-03-31-log.txt", "2024-04-05-log.txt", "2024-04-06-log.txt", "2024-04-07-log.txt", "2024-04-08-log.txt", "2024-04-09-log.txt", "2024-04-04-log.txt", "2024-04-11-log.txt", "2024-04-12-log.txt", "2024-04-13-log.txt", "2024-02-17-log.txt", "2024-04-01-log.txt", "2024-04-16-log.txt", "2024-04-15-log.txt", "2024-04-10-log.txt", "2024-04-17-log.txt", "2024-02-24-log.txt", "2024-04-14-log.txt", "2024-04-19-log.txt", "2024-04-21-log.txt", "2024-04-22-log.txt", "2024-04-23-log.txt", "2024-04-24-log.txt", "2024-04-26-log.txt", "2024-04-25-log.txt", "2024-04-29-log.txt", "2024-04-30-log.txt", "2024-05-01-log.txt", "2024-05-02-log.txt", "2024-05-03-log.txt", "2024-05-04-log.txt", "2024-05-05-log.txt", "2024-05-06-log.txt", "2024-04-28-log.txt", "2024-05-07-log.txt", "2024-04-18-log.txt", "2024-05-08-log.txt", "2024-05-09-log.txt", "2024-05-10-log.txt", "2024-05-12-log.txt", "2024-05-14-log.txt", "2024-05-11-log.txt", "2024-05-16-log.txt", "2024-04-27-log.txt", "2024-05-17-log.txt", "2024-05-15-log.txt", "2024-05-18-log.txt", "2024-05-20-log.txt", "2024-05-21-log.txt", "2024-05-19-log.txt", "2024-05-22-log.txt", "2024-05-23-log.txt", "2024-05-25-log.txt", "2024-05-24-log.txt", "2024-05-26-log.txt", "2024-05-27-log.txt", "2024-05-28-log.txt", "2024-05-29-log.txt", "2024-05-30-log.txt", "2024-06-02-log.txt", "2024-05-13-log.txt", "2024-06-01-log.txt", "2024-05-31-log.txt", "2024-04-20-log.txt", "2024-06-03-log.txt", "2024-06-04-log.txt", "2024-06-05-log.txt", "2023-12-30-log.txt", "2023-12-01-log.txt", "2024-02-27-log.txt", "2023-12-29-log.txt", "gtaGraProcessToCSV.js", "gtaGraProcessToCSV-2AM.js", "hrs-benefit-report.js", "westCanDocumentMove.js", "hrsbsReviewCycleReport.js", "hrsbsCreateFolderRule.js", "HRSBS-SyncCCIDs.js", "hrsbsCreateFolder.js", "FVCA-data-import.js", "FVCA-manual-property-update.js", "istPerformanceReviewCreateFolder.js", "lawCreateFolderRestricted.js", "lawFileScanned.js", "lawCreateFolder.js", "lawCreateFolderRule.js", "nativeStudiesCreateFolderRestricted.js", "nsFolderCreateSchedule.js", "nativeStudiesCreateFolder.js", "nativeStudiesCreateFolderRule.js", "ADV-notify-type-mapping.json", "OOA-notify-email.js", "ADV-notify-terms-types.js", "pcm-grab-competitive-noderefs.js", "pcm-update-competitive-noderefs.js", "pcmCreateFolder.js", "psUpdateAlfrescoDepartment.js", "pllcCreateFolder.js", "qaProcess.js", "qaRelease.js", "rmOOABackgroundInformationFiling.js", "rmFilingDoc.js", "rmSearchmatchNomatchFiling.js", "rmFilingConfig.json", "thesisDestructionReport.js", "rmThesis.js", "add_document_type_ro.js", "updateSearchMatchStatus.js", "searchmatchFullDob.js", "createROReconciliationReports.js", "eTranscriptInstList.js", "folder-create-ro.js", "augTranscript.js", "addTimeStamp.js", "missingDocumentList-csv.js", "roAddAspectAndMoveAFA.js", "myTaskDownload.js", "roAddAspectAndMoveTranscript.js", "roAddBundlingAspect.js", "roAddSearchMatchAspect.js", "roCopyEphesoftMetadataXML.js", "roBatchScript.js", "addSearchMatchDocumentType.js", "roCreateEducationalCSV.js", "roCopyOlderScannedDocument.js", "roDocumentListAPLSTD.js", "roCopyOlderScannedDocumentAdHoc.js", "roEtranscriptReport.js", "roDailyQA.js", "roEtranscriptsBundleTest.js", "roFolderCreateLDAPLookup_no_notificatiion.js", "roFolderCreateLDAPLookup.js", "roEtranscriptsBundle.js", "roAddComment.js", "roCopyEphesoftMetadataScanned.js", "roMoveCompleted.js", "roMoveCompletedBackScan.js", "roMoveCompletedSearchMatch.js", "roEtranscriptPDFConverter.js", "roScanningMetadata.js", "roScript1.js", "RORoutingWorkflowUtil.js", "roScript3.js", "roScript2.js", "roScanningMetadataBackScan.js", "roScript7.js", "roScript6.js", "roScript9.js", "roScript1BackScan.js", "roSearchMatchNoMatchReport.js", "roSearchMatchQuery.js", "RONotification.js", "roSlateDocumentExport.js", "roTagAndFileRenderedPDFs.js", "roScript4.js", "roScript5.js", "roScript8.js", "createSlateFolioMaterialDropdown.js", "createSlateApplicationsCSV.js", "LaunchWorkflowUtils.js", "PaperFileUtils.js", "GenerateSponsornamesAndPinames.js", "rsoCreateFolder.js", "sciCreateFolderConfidential.js", "sciCreateFolderPublic.js", "sciCreateFolder.js", "sciCreateFolderRestricted.js", "scienceASDocumentImport.js", "sciFileADDPFileTypes.js", "sciFileShareFolder.js", "sciFileScanned.js", "sciBulkShareFolder.js", "copy-signed-offer-letter.js", "dept-config.js", "reappointment-generate-schedule.js", "reappointment-reminder-schedule.js", "reappointment-generate-process.js", "manual-generate-script.js", "reappointment-reminder-process.js", "reminder-email-util.js", "reappointment-tracking-schedule.js", "reappointment-tracking-process.js", "appointment-report.js", "appointment-report-schedule.js", "manual-tracking-script.js", "sfsCreateFolder.js", "sfsWorkflowStatus.js", "security-group-user.js", "createReportPermissionsFoldersInASite.js", "siteMembersReport.js", "createReportRecursiveGroupsAndUsersInASite.js", "search-responses.js", "advChangeDocumentType.js", "addFolderMetadata.js", "advChangeDocumentType_confidential.js", "consignOInitiatorOfferLetterChange.js", "advChangeDocumentType_background.js", "transcriptResponse.js", "change-fgsr-pdf-file-name-with-date.js", "copy-fgsr-to-graduate-students-records.js", "ADVDonationCalendarToFiscal.js", "document-query.js", "deletingCompletingWorkflow.js", "eTranscriptTemp.js", "eTranscript-bundled-02-jan.js", "eTranscriptVersionModifierFix.js", "fixCheckout.js", "removeDonationGrp.js", "eTranscriptVersioningFix.js", "move-fgsr-folder.js", "search-match-dob-add.js", "thesisDepositArchival.js", "moveThesesForTransfer.js", "eraReportGeneration.js", "kofaxMetadataMerge.js", "kofaxMetadataMergeMissing.js", "generic2min.js", "kofaxSendEmail.js", "PeopleSoft-eTranscript-XML-PDF.js", "startBenefitWorkflow.js", "peoplesoftMetadataMergeMissing.js", "securityWorkflowUtil.js", "startPayActionWorkflow.js", "startDepartmentAdhocApprovalWorkflow.js", "convertTranscript.js", "CreateTranscriptUserMemberships.js", "startTwoStepWorkflow.js", "fix_employee_names.js", "env.js", "folderCreateUtil.js", "folderCreateUtilAA.js", "generalSchedule.js", "JSON.js", "xmlUtil.js", "addPersonAspect.js", "addTimeStampRandomFileName.js", "archiveDocument.js", "luceneUtil.js", "util.js", "archivedItems.js", "getProjectDetails.js", "ADVChangeAuthor.js", "ADVcalendarToFiscal.js", "symplexUtils.js", "advBatchProcessing.js", "advChangeDocumentName.js", "ADVEphesoftMove.js", "advCreateFolderScheduled.js", "advErrorMessageReset.js", "advMetadataUpdate.js", "advMoveToFoldersScheduled.js", "ADVendFundReportFiling.js", "advReconcilliation.js", "ADVmoveRecordsToPreQA.js", "advScanningMetadata.js", "advScript2.js", "advScript3.js", "advScript4.js", "advScript1.js", "advScript5.js", "advScriptDaily.js", "advScriptMonthly.js", "advScriptKofax.js", "ADVSiteContext.js", "advMoveToFolder.js", "deleteEphesoftDoc.js", "advUtils.js", "folderCreateADV.js", "advScriptDaily30minFreq.js", "jsonUtils.js", "advScanning.js", "folderCreateDocumentADV.js", "moveToFolders.js", "symplexMetadataUpdate.js", "OOA_SOT_Name_change.js", "moveToFoldersRetainTitle.js", "advScriptWeekly.js", "symplexMoveToFolder.js", "clioToAcsDocUpdate.js", "ClioUpdateScheduledJob.js", "smartFoldersExample.json", "system-overview.html", "businessDocSetup.json", "uappolDocSetup.json", "businessConfig.json", "augConfig.json", "augDocSetup.json", "lawConfig.json", "uappolConfig.json", "UAlbertaSettings.json", "hrsbsDocSetup.json", "advConfig.json", "hrsbsConfig.json", "hrsConfig.json", "hrsDocSetup.json", "advSimplexMapping.json", "advDocSetup.json", "artsDocSetup.json", "alesConfig.json", "alesDocSetup.json", "archiveFolder.json", "artsConfig.json", "advScanningMapping.json", "collegeOfHealthSciencesConfig.json", "chsAgreementsConfig.json", "dropboxCommonAspects.json", "collegeOfHealthSciencesDocSetup.json", "chsAgreementsDocSetup.json", "educationConfig.json", "extensionConfig.json", "fgsrv2DocSetup.json", "foConfig.json", "foDocSetup.json", "educationDocSetup.json", "lawDocSetup.json", "nativeStudiesDocSetup.json", "pllcConfig.json", "pllcDocSetup.json", "roConfig.json", "fgsrv2Config.json", "rsoConfig.json", "rsoDocSetup.json", "sciConfig.json", "eTranscriptConfig.json", "sciDocSetup.json", "roDocSetup.json", "sfsDocSetup.json", "UAlbertaSettings.conf", "student-recordsConfig.json", "securityWorkflowSetting.json", "thesisDepositConfig.json", "globalHeader.html.ftl", "webFormDialog.html.ftl", "alfrescoUserGroupRequest.ftl", "pensionBenefit.html.ftl", "pinames.json", "sponsornames.json", "searchPageConfig.json", "pcmDocSetup.json", "pcmConfig.json", "qaConfig.json", "apsAppConfig.json", "fgsrCreateApsFromCSV.json", "fgsrCopyMetadata.json", "enggCoopDocSetup.json", "enggDocSetup.json", "enggConfig.json", "enggCoopConfig.json", "CapApsConfig.json", "extensionDocSetup.json", "readme.html", "readme_de.html", "readme_ja.html", "readme_fr.html", "advEndowmentName.get.desc.xml", "advEndowmentName.get.json.ftl", "advEndowmentName.get.js", "advEntityName.get.desc.xml", "advEntityName.get.js", "advEntityName.get.html.ftl", "search.get.desc.xml", "search.get.js", "search.get.html.ftl", "changeInitiatorAppt.put.desc.xml", "eSignatureStatusHistory.get.html.ftl", "changeInitiatorAppt.put.json.ftl", "eSignatureStatusHistory.get.desc.xml", "appointmentSubmit.get.js", "processIdProps.get.desc.xml", "changeInitiatorAppt.put.js", "processIdProps.get.json.ftl", "processIdProps.get.js", "appointmentLandingPage.get.desc.xml", "appointmentLandingPage.get.js", "appointmentLandingPage.get.html.ftl", "appointmentStart.get.desc.xml", "appointmentStart.get.html.ftl", "appointmentStart.get.js", "appointmentStartTest.get.desc.xml", "appointmentStartTest.get.js", "appointmentStartTest.get.html.ftl", "appointmentSubmit.get.desc.xml", "appointmentSubmit.get.html.ftl", "eSignatureStatusHistory.get.js", "apsApplicationList.get.desc.xml", "apsApplicationList.get.html.ftl", "assignuser.put.js", "assignuser.put.json.ftl", "claimtask.put.desc.xml", "claimtask.put.js", "claimtask.put.json.ftl", "completetask.post.desc.xml", "completetask.post.json.ftl", "completetask.post.js", "getapsdbid.get.desc.xml", "getapsdbid.get.json.ftl", "gettasks.get.desc.xml", "gettasks.get.json.ftl", "assignuser.put.desc.xml", "gettasks.get.js", "savetask.post.desc.xml", "savetask.post.js", "savetask.post.json.ftl", "taskForm.get.js", "taskForm.get.desc.xml", "tasklist.get.desc.xml", "apsApplicationList.get.js", "taskForm.get.json.ftl", "tasklist.get.html.ftl.jquery", "tasklist.get.html.ftl", "tasklist.get.js", "triggerapsprocess.post.desc.xml", "triggerapsprocess.post.js", "updatevariables.post.desc.xml.notused", "triggerapsprocess.post.json.ftl", "updatevariables.post.json.ftl.notused", "getapsdbid.get.js", "updatevariables.post.js.notused", "taskUtils.js", "apsGroupsConfig.json", "apsSitesConfig.json", "apptStepZeroStarter.post.desc.xml", "apptStepZeroStarter.post.json.ftl", "apptStepZeroStarter.post.js", "apptStepOneStarter.post.desc.xml", "apptStepOneStarter.post.js", "apptStepOneStarter.post.json.ftl", "apptStepOneSave.post.json.ftl", "apptStepOneSave.post.desc.xml", "apptStepOneSave.post.js", "apptStatusDocUpdate.post.desc.xml", "apptStatusDocUpdate.post.json.ftl", "apptStatusDocUpdate.post.js", "APSWorkflowStatus.get.desc.xml", "APSWorkflowStatus.put.html.ftl", "APSWorkflowStatus.get.html.ftl", "APSWorkflowInfo.put.html.ftl", "APSWorkflowStatus.put.desc.xml", "APSWorkflowInfo.put.desc.xml", "APSWorkflowStatus.get.js", "APSWorkflowStatus.put.js", "APSWorkflowInfo.put.js", "NodeInfo.get.desc.xml", "NodeInfo.get.html.ftl", "capinfo.get.js", "capstart.get.js", "epsb.get.js", "epsb.get.html.ftl", "capstart.get.html.ftl", "epsb.get.desc.xml", "schoolboard.get.html.ftl", "NodeInfo.get.js", "NodeInfoByCapId.get.desc.xml", "updateVariable.post.json.ftl", "updateVariable.post.js", "schoolboard.get.desc.xml", "updateVariable.post.desc.xml", "schoolboard.get.js", "capinfo.get.html.ftl.backup", "cap-file-load.post.json.ftl", "NodeInfoByCapId.get.js", "capinfo.get.html.ftl", "capstart.get.desc.xml", "cap-file-load.post.desc.xml", "capinfo.get.desc.xml", "cap-file-load.post.js", "capeamergedoc.get.js", "capeamergedoc.get.desc.xml", "capeamergedoc.get.html.ftl", "capConfig.js", "chsEnv.js", "chsConfig.js", "chsAdminStuView.get.desc.xml", "chsAdminStuView.get.html.ftl", "chsAdminStuView.get.js", "coupa.get.html.ftl", "coupa.get.desc.xml", "coupa.get.js", "coveoGetDocList.get.desc.xml", "coveoGetDocList.get.json.ftl", "coveoGetDocList.get.js", "getJson.get.desc.xml", "getJson.get.js", "getJson.get.json.ftl", "simpleupload.post.desc.xml", "simpleupload.post.json.ftl", "simpleupload.post.js", "consignoMessage.get.js", "consignoWebhook.post.js", "consignoWebhook.post.json.ftl", "consignoMessage.get.desc.xml", "consignoWebhook.post.desc.xml", "consignoMessage.get.json.ftl", "eSignDownload.get.js", "eSignDownload.get.html.ftl", "eSignDownload.get.desc.xml", "review-supervisorv2.get.desc.xml", "review-supervisorv2.get.js", "review-supervisorv2.get.html.ftl", "fgsrssgLanding.get.js", "review-comm01v2.get.desc.xml", "fgsrssgLanding.get.html.ftl", "review-comm01v2.get.html.ftl", "review-comm02v2.get.desc.xml", "review-comm02v2.get.html.ftl", "fgsrssgLanding.get.desc.xml", "review-studentv2.get.html.ftl", "review-comm03v2.get.html.ftl", "review-comm03v2.get.desc.xml", "review-studentv2.get.desc.xml", "review-cosupervisorv2.get.html.ftl", "review-comm02v2.get.js", "review-startv2.get.desc.xml", "review-studentv2.get.js", "review-cosupervisorv2.get.js", "review-startv2.get.js", "review-student-revisionv2.get.html.ftl", "review-student-revisionv2.get.desc.xml", "review-startv2.get.html.ftl", "review-comm03v2.get.js", "review-cosupervisorv2.get.desc.xml", "review-student-revisionv2.get.js", "review-comm01v2.get.js", "review-comm02.get.desc.xml", "review-comm02.get.html.ftl", "review-comm03.get.desc.xml", "review-comm02.get.js", "review-comm03.get.html.ftl", "review-cosupervisor.get.desc.xml", "review-cosupervisor.get.html.ftl", "review-cosupervisor.get.js", "review-nextdate.get.desc.xml", "review-comm03.get.js", "review-nextdate.get.js", "review-student.get.html.ftl", "review-student.get.js", "review-student-revision.get.desc.xml", "review-student.get.desc.xml", "review-student-revision.get.js", "review-studentTest.get.desc.xml", "review-supervisor.get.desc.xml", "review-studentTest.get.js", "review-supervisor.get.html.ftl", "review-supervisor.get.js", "review-comm01.get.desc.xml", "review-comm01.get.html.ftl", "review-comm01.get.js", "review-student-revision.get.html.ftl", "review-nextdate.get.html.ftl", "review-studentTest.get.html.ftl", "guidelines-supervisor.get.desc.xml", "guidelines-supervisor-revision.get.html.ftl", "guidelines-start.get.desc.xml", "guidelines-start.get.html.ftl", "guidelines-start.get.js", "guidelines-student.get.desc.xml", "guidelines-student.get.html.ftl", "guidelines-student-revision.get.js", "guidelines-student-revision.get.desc.xml", "guidelines-supervisor.get.html.ftl", "guidelines-supervisor-revision.get.desc.xml", "guidelines-student-revision.get.html.ftl", "guidelines-student.get.js", "guidelines-supervisor.get.js", "guidelines-supervisor-revision.get.js", "programExtensionScript.js", "customScript.js", "customCSS_FGSR2.css", "customCSS_FGSR.css", "fgsrEnv.js", "FGSR-Forms-Config.js", "config.js", "googleAddon.get.json.ftl", "googleAddon.get.desc.xml", "googleAddon.get.js", "gtaGraStatus.post.json.ftl", "gtaGraStatus.post.js", "gtaGraStatus.post.desc.xml", "wfh-manager.get.desc.xml", "wfh-form.get.js", "wfh-manager.get.html.ftl", "wfh-form.get.desc.xml", "wfh-revise.get.desc.xml", "wfh-revise.get.html.ftl", "wfh-revise.get.js", "wfh-seniormanager.get.desc.xml", "wfh-manager.get.js", "wfh-seniormanager.get.js", "wfh-seniormanager.get.html.ftl", "wfh-form.get.html.ftl", "hrsbsDocumentLinking.get.desc.xml", "hrsbsDocumentLinking.get.html.ftl", "hrsbsDocumentLinking.get.js", "coi-start.get.desc.xml", "coi-start.get.html.ftl", "coi-revise.get.html.ftl", "coi-employee.get.html.ftl", "coi-employee.get.desc.xml", "coi-revise.get.desc.xml", "coi-start.get.js", "coi-revise.get.js", "coi-supervisor.get.js", "coi-supervisor.get.desc.xml", "coi-employee.get.js", "coi-supervisor.get.html.ftl", "getTaskFilter.get.json.ftl", "queryTasks.get.json.ftl", "routableGroups.get.desc.xml", "routableGroups.get.js", "routableGroups.get.json.ftl", "queryTasks.get.desc.xml", "setTaskFilter.post.js", "setTaskFilter.post.json.ftl", "setTaskFilter.post.desc.xml", "applyTaskAction.post.js", "applyTaskAction.post.json.ftl", "applyTaskAction.post.desc.xml", "getTaskFilter.get.desc.xml", "getTaskFilter.get.js", "queryTasks.get.js", "avmbrowse.get.desc.xml", "avmbrowse.get.html.ftl", "avmbrowse.get.js", "avmstores.get.desc.xml", "avmstores.get.html.ftl", "blogsearch.get.atom.400.ftl", "blogsearch.get.html.400.ftl", "blogsearch.get.desc.xml", "blogsearch.get.js", "categorysearch.get.atom.404.ftl", "blogsearch.get.html.ftl", "categorysearch.get.html.404.ftl", "categorysearch.get.js", "categorysearch.get.html.ftl", "categorysearch.get.desc.xml", "folder.get.desc.xml", "folder.get.html.ftl", "folder.get.js", "psDeptAll.get.js", "psDeptSingle.get.json.ftl", "psDeptSingle.get.js", "psPerson.get.json.ftl", "psUtil.js", "psPerson.get.js", "psAcademicDeptAll.get.desc.xml", "psAcademicDeptAll.get.json.ftl", "psAuthorizedApprover.get.desc.xml", "psDeptAll.get.json.ftl", "psAuthorizedApprover.get.js", "psAuthorizedApprover.get.json.ftl", "psDeptAll.get.desc.xml", "psDeptSingle.get.desc.xml", "psPerson.get.desc.xml", "ceeb.get.desc.xml", "ceeb.get.json.ftl", "getSlateId.get.desc.xml", "getSlateId.get.js", "materials.get.json.ftl", "materials.get.desc.xml", "getSlateId.get.json.ftl", "ceeb.get.js", "materials.get.js", "edit.get.html.ftl", "edit.get.js", "save.post.js", "save.post.json.ftl", "scans.get.desc.xml", "scans.get.js", "uploadfile.post.desc.xml", "uploadfile.post.json.ftl", "edit.get.desc.xml", "uploadfile.post.js", "scans.get.html.ftl", "save.post.desc.xml", "AFA_Main.post.desc.xml", "AFA_MainFileOnly.post.desc.xml", "AFA_MainFileOnly.post.js", "AFA_Main.post.js", "AFA_MainFileOnly.post.json.ftl", "AFA_Main.post.json.ftl", "paperFileUtil.get.desc.xml", "paperFileUtil.get.js", "paperFileUtil.get.html.ftl", "rsoprojectdetails.get.html.ftl", "rsoprojectdetails.get.js", "rsoprojectdetails.get.desc.xml", "roslateapplist.get.html.ftl", "roslateapplist.get.desc.xml", "roslateapplist.get.json.ftl", "roslateexists.get.html.ftl", "roslateexists.get.desc.xml", "roslateapplist.get.js", "roslateexists.get.js", "uofaDepartmentList.get.desc.xml", "uofaDepartmentList.get.js", "uofaDepartmentList.get.html.ftl", "uofaDepartmentName.get.desc.xml", "uofaDepartmentName.get.html.ftl", "uofaFacultyList.get.html.ftl", "uofaFacultyList.get.desc.xml", "uofaDepartmentName.get.js", "uofapersonid.get.desc.xml", "uofapersonidrest.get.html.ftl", "uofapersonidrest.get.desc.xml", "uofapersonid.get.html.ftl", "uofapersonid.get.js", "uofapersonidrest.get.js", "uappolCategoryHeirarchy.get.desc.xml", "uappolCategoryHeirarchy.get.json.ftl", "uappol-metadata-query.get.desc.xml", "uappol-metadata-query.get.js", "uappol-metadata-query.get.json.ftl", "uappolCategoryHeirarchy.get.js", "siteFileViewer.get.desc.xml", "siteFileViewerConfig.js", "siteFileViewer.get.html.ftl", "siteFileViewer.get.js", "publicSiteFileViewer.get.html.ftl", "publicSiteFileViewer.get.desc.xml", "publicSiteFileViewer.get.js", "cronJob.post.desc.xml", "cronJob.post.js", "cronJob.post.json.ftl", "studentupload.get.html.ftl", "generatereport.get.json.ftl", "generatereport.get.desc.xml", "approvethesis.post.js", "generatereport.get.js", "search-match-attach.get.js", "search-match-list.get.html.ftl", "search-match-result.get.html.ftl", "search-match-result.get.js", "search-match-list.get.js.old", "chs-agreements.get.js", "chs-agreements.get.html.ftl", "chs-upload.get.html.ftl", "chs-upload.get.js", "uamytasks.config.get.js", "chsStudentView.get.js", "chsStudentView.get.html.ftl", "foModel.xml", "uofaDocTypes.xml", "uofaDocTypes.json", "foModel.json", "tim-sops", "FandO", "cbsr", "nanofab", "support-documentation", "Alfresco.zip - 1bf054bded99e2ae414154593d0892066b2e0c7add603f9321e157c77ae52075", "https://www.virustotal.com/graph/embed/g05f1796a358b458d95751d31d1d529aa378f8ffadf0b4305b7fa0bd1c64fe228?theme=dark", "https://www.virustotal.com/gui/collection/63819e07111e9665ba8602777d782527c54f3fad71ef36f977405a004484787c/iocs", "https://viz.greynoise.io/analysis/0cd9177e-8328-4355-a2c0-d05704a64c72", "components.zip - 2b91fcf852a5f1f57be71a269d82497b37c9f544ebd8f32aaa240e4cde0ffeea", "https://www.virustotal.com/graph/embed/g2948a5c332eb4614973872a8243215f6aa1fba79749a48ea92806e9b934db91f?theme=dark", "https://viz.greynoise.io/ip/analysis/2610b635-c05a-4f28-a112-7278de8fdf9b" ], "public": 1, "adversary": "TA413 proposed (06.08.24), Callisto, APT38, APT 28/29 - too much time too many problems", "targeted_countries": [ "Canada", "United States of America" ], "malware_families": [], "attack_ids": [], "industries": [ "Education", "Government", "Healthcare", "Technology", "Telecommunications" ], "TLP": "white", "cloned_from": "6665315e25f9dd42a99e4f2f", "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 7132, "hostname": 3118, "URL": 4909, "email": 20, "FileHash-SHA256": 2144, "FileHash-MD5": 29, "FileHash-SHA1": 29 }, "indicator_count": 17381, "is_author": false, "is_subscribing": null, "subscriber_count": 66, "modified_text": "13 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68f45023af873e8d6ac165b9", "name": "UAlberta Alfresco Databreach -> EPS Crimestoppers Alberta RCMP HR Files", "description": "University of Alberta DataBreach(es) -> Alfresco HR Files (included in this Pulse) - Reported. \nCompromise of Edmonton Police Services (EPS), Alberta RCMP (AB RCMP), CrimeStoppers Alberta - All organizations notified, and provided with identified problems (e.g. criminals), offered solutions (e.g. to address compromised infrastructure). Data 'on hand' and publicly available (e.g. in this pulse). Criminal activity ramping up for 2026. Reported by multiple parties no luck, no response.", "modified": "2026-01-03T01:55:41.491000", "created": "2025-10-19T02:42:43.079000", "tags": [ "entity", "EPS", "Alfresco", "UAlberta", "EdmontonPolice" ], "references": [ "https://www.virustotal.com/graph/embed/g8b17f086c8ca45188352d1d054fa3f8948f81bddd2114ea7b99864e585604e72?theme=dark", "https://en.fofa.info/result?qbase64=ZWRtb250b25wb2xpY2UuY2E%3D", "", "https://www.virustotal.com/gui/collection/7774b0b7593e64e019df4e783911800bb322ec28a0f9eb3792fe6f75755f3b88", "https://www.virustotal.com/gui/collection/7774b0b7593e64e019df4e783911800bb322ec28a0f9eb3792fe6f75755f3b88/iocs" ], "public": 1, "adversary": "", "targeted_countries": [ "Canada" ], "malware_families": [], "attack_ids": [], "industries": [ "Government", "Education", "Telecommunications" ], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Disable_Duck", "id": "244325", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_244325/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 743, "FileHash-MD5": 75, "FileHash-SHA1": 60, "FileHash-SHA256": 1364, "domain": 688, "hostname": 763 }, "indicator_count": 3693, "is_author": false, "is_subscribing": null, "subscriber_count": 130, "modified_text": "148 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68c954a80675ccc89b0e9b63", "name": "Trump #45470 | Palantir container | virus:DOS/Hellspawn + ioS (compromised)", "description": "Overt. Trump support campaign text message from #45470. Malicious. Received on a victims hyper compromised iPhone. Attempts to or did take CnC of device. Stutters device, changed App Store , has delete service, device sweep, shuts down service , halts all pages, denial of service, throttles service, steals\npasswords, bots , I don\u2019t know if device can be refurbished or research purposes - Palantir DC DGA domains - Trump. Multiple IoC\u2019s , malware with code overlap, it appears to be from a legitimate text for updates #. Visibly affected all aspects of device and software. Commands device shut down. \n[OTX populated: Failed to retrieve suggested indicator for beta-ui, according to the latest results from the Welsh Government's Office for National Statistics (ONS) and the National Data Centre (NDS))", "modified": "2025-10-16T12:03:14.279000", "created": "2025-09-16T12:14:32.327000", "tags": [ "ttl value", "extraction", "data upload", "failed", "extra data", "include review", "exclude sugges", "stop", "line", "path", "polyline", "getprocaddress", "circle", "span", "ck id", "mitre att", "ck matrix", "null", "error", "open", "spinner", "title", "code", "iframe", "window", "void", "infinity", "crypto", "footer", "generator", "general", "format", "click", "strings", "meta", "install", "encoder", "learn", "command", "name tactics", "suspicious", "informative", "spawns", "evasion att", "t1480 execution", "file defense", "adversaries", "calls", "reads", "defense evasion", "model", "server", "registrar abuse", "ascio", "contact phone", "admin city", "admin country", "admin postal", "dnssec", "http", "ip address", "passive dns", "related nids", "urls", "files location", "united", "flag united", "a domains", "search", "unknown aaaa", "certificate", "yara detections", "av detections", "ids detections", "alerts", "entries elf", "filehash", "name servers", "servers", "moved", "script script", "aaaa", "unknown ns", "domain add", "formbook cnc", "checkin", "lowfi", "mtb jun", "github pages", "twitter", "accept", "cryptobit", "extra", "referen data", "trojanproxy", "dynamicloader", "high", "write c", "medium", "intel", "ms windows", "entries", "pe32", "explorer", "worm", "write", "next", "trojan", "hellspawn", "md5 add", "malware", "data", "included iocs", "script urls", "script domains", "gmt content", "cash amtincart", "expirestue", "domain related", "sea x", "accept encoding", "request id", "body doctype", "apache", "encrypt", "skynet", "third eye tv", "calling", "delete app", "potus", "mtb aug", "backdoor", "gmt cache", "sameorigin", "443 ma2592000", "ipv4 add", "utilads", "trojandropper", "mtb sep", "win32upatre aug", "yara rule", "as15169", "guard", "smartassembly", "associated urls", "date checked", "url hostname", "server response", "domain", "url analysis", "files", "date", "delete service", "45470", "text", "hybrid", "present sep", "body", "fastly error", "please", "xor xor", "sha256 add", "analysis date", "file score", "detections alf", "june", "delphi", "attempts", "yara", "high security", "file type", "pe packer", "ransom" ], "references": [ "skynet-dev.tcxn.net tcxn.net Registrar Ascio Technologies, Inc - connection to cloud proxy", "TrojanProxy:Win32/Malynfits CodeOverlap TrojanSpy:Win32/Nivdort CodeOverlap virus:Win32/Lywer CodeOverlap", "https://cryptobit.live/build/assets/app-CkRYqsKL.js \u2022 cryptobit.live \u2022 t.page \u2022 cdn.wallets.cryptobit.live", "Trump Support campaign \u2022_\u2022 lantana-mgmt.washington.palantircloud.com \u2022 containers-reishi.palantirfedstart.com", "Virus:DOS/Hellspawn 192.168.122.49 10/16/25\t\u2022 IPv4 142.251.9.105", "IDS Detections: Win32/Enosch.A gtalk connectivity check | W32/MoonLight.worm User-Agent (HellSpawn)", "PWS:Win32/Ymacco.AA50 Win.Trojan.Generic-9959068-0\t SLF:MSIL/PSTAnomaly.A Win.Dropper.Shakblades-7614016-0\t#LowFI:VBExpensiveLoop Win.Packed.Barys-10031677-0\tTEL:Trojan:MSIL/AgentTesla.VPA!MTB Win.Trojan. Backdoor:MSIL/Remcos!MTB", "hasownproperty.call \u2022 fireeye.grhd.", "Apple Store verified drop down breach \u2018Apple took a screenshot of pages\u201d" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America" ], "malware_families": [ { "id": "TrojanSpy:Win32/Nivdort", "display_name": "TrojanSpy:Win32/Nivdort", "target": "/malware/TrojanSpy:Win32/Nivdort" }, { "id": "TrojanProxy:Win32/Malynfits", "display_name": "TrojanProxy:Win32/Malynfits", "target": "/malware/TrojanProxy:Win32/Malynfits" }, { "id": "Virus:Win32/Lywer", "display_name": "Virus:Win32/Lywer", "target": "/malware/Virus:Win32/Lywer" }, { "id": "Worm:Win32/Lightmoon.H", "display_name": "Worm:Win32/Lightmoon.H", "target": "/malware/Worm:Win32/Lightmoon.H" }, { "id": "Virus:DOS/Hellspawn", "display_name": "Virus:DOS/Hellspawn", "target": "/malware/Virus:DOS/Hellspawn" }, { "id": "Win.Trojan.Dialer-266", "display_name": "Win.Trojan.Dialer-266", "target": null }, { "id": "AgentTesla", "display_name": "AgentTesla", "target": null }, { "id": "Backdoor:MSIL/Remcos", "display_name": "Backdoor:MSIL/Remcos", "target": "/malware/Backdoor:MSIL/Remcos" }, { "id": "ALF:JASYP:Trojan:Win32/IRCbot!atmn", "display_name": "ALF:JASYP:Trojan:Win32/IRCbot!atmn", "target": null }, { "id": "Trojandropper:Win32/Muldrop.V!MTB", "display_name": "Trojandropper:Win32/Muldrop.V!MTB", "target": "/malware/Trojandropper:Win32/Muldrop.V!MTB" }, { "id": "#LowFI:VBExpensiveLoop", "display_name": "#LowFI:VBExpensiveLoop", "target": null }, { "id": "TEL:Trojan:MSIL/AgentTesla.VPA!MTB", "display_name": "TEL:Trojan:MSIL/AgentTesla.VPA!MTB", "target": null }, { "id": "PWS:Win32/VB.CU", "display_name": "PWS:Win32/VB.CU", "target": "/malware/PWS:Win32/VB.CU" }, { "id": "ALF:Ransom:Win32/Babax.SG!MTB", "display_name": "ALF:Ransom:Win32/Babax.SG!MTB", "target": null } ], "attack_ids": [ { "id": "T1007", "name": "System Service Discovery", "display_name": "T1007 - System Service Discovery" }, { "id": "T1010", "name": "Application Window Discovery", "display_name": "T1010 - Application Window Discovery" }, { "id": "T1012", "name": "Query Registry", "display_name": "T1012 - Query Registry" }, { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" }, { "id": "T1033", "name": "System Owner/User Discovery", "display_name": "T1033 - System Owner/User Discovery" }, { "id": "T1055", "name": "Process Injection", "display_name": "T1055 - Process Injection" }, { "id": "T1057", "name": "Process Discovery", "display_name": "T1057 - Process Discovery" }, { "id": "T1059", "name": "Command and Scripting Interpreter", "display_name": "T1059 - Command and Scripting Interpreter" }, { "id": "T1071", "name": "Application Layer Protocol", "display_name": "T1071 - Application Layer Protocol" }, { "id": "T1082", "name": "System Information Discovery", "display_name": "T1082 - System Information Discovery" }, { "id": "T1083", "name": "File and Directory Discovery", "display_name": "T1083 - File and Directory Discovery" }, { "id": "T1102", "name": "Web Service", "display_name": "T1102 - Web Service" }, { "id": "T1105", "name": "Ingress Tool Transfer", "display_name": "T1105 - Ingress Tool Transfer" }, { "id": "T1106", "name": "Native API", "display_name": "T1106 - Native API" }, { "id": "T1113", "name": "Screen Capture", "display_name": "T1113 - Screen Capture" }, { "id": "T1129", "name": "Shared Modules", "display_name": "T1129 - Shared Modules" }, { "id": "T1140", "name": "Deobfuscate/Decode Files or Information", "display_name": "T1140 - Deobfuscate/Decode Files or Information" }, { "id": "T1489", "name": "Service Stop", "display_name": "T1489 - Service Stop" }, { "id": "T1546", "name": "Event Triggered Execution", "display_name": "T1546 - Event Triggered Execution" }, { "id": "T1555", "name": "Credentials from Password Stores", "display_name": "T1555 - Credentials from Password Stores" }, { "id": "T1564", "name": "Hide Artifacts", "display_name": "T1564 - Hide Artifacts" }, { "id": "T1573", "name": "Encrypted Channel", "display_name": "T1573 - Encrypted Channel" }, { "id": "T1590", "name": "Gather Victim Network Information", "display_name": "T1590 - Gather Victim Network Information" }, { "id": "T1614", "name": "System Location Discovery", "display_name": "T1614 - System Location Discovery" }, { "id": "T1480", "name": "Execution Guardrails", "display_name": "T1480 - Execution Guardrails" }, { "id": "T1056", "name": "Input Capture", "display_name": "T1056 - Input Capture" }, { "id": "T1045", "name": "Software Packing", "display_name": "T1045 - Software Packing" }, { "id": "T1060", "name": "Registry Run Keys / Startup Folder", "display_name": "T1060 - Registry Run Keys / Startup Folder" }, { "id": "T1119", "name": "Automated Collection", "display_name": "T1119 - Automated Collection" }, { "id": "T1063", "name": "Security Software Discovery", "display_name": "T1063 - Security Software Discovery" }, { "id": "T1090", "name": "Proxy", "display_name": "T1090 - Proxy" }, { "id": "T1547", "name": "Boot or Logon Autostart Execution", "display_name": "T1547 - Boot or Logon Autostart Execution" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Q.Vashti", "id": "337942", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 690, "URL": 1479, "domain": 476, "FileHash-MD5": 526, "FileHash-SHA1": 505, "FileHash-SHA256": 1509, "email": 6 }, "indicator_count": 5191, "is_author": false, "is_subscribing": null, "subscriber_count": 142, "modified_text": "226 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6665315e25f9dd42a99e4f2f", "name": "UAlberta Alfresco Management Software Abuse -> Admin/Backdoor Edmonton Police Services", "description": "Just pulled down what was in my employee profile (I don't work there).\nDiscovered after being directed to some management system (unknown at the time).\nPulled down and scanned: 1bf054bded99e2ae414154593d0892066b2e0c7add603f9321e157c77ae52075", "modified": "2025-10-10T19:03:58.376000", "created": "2024-06-09T04:36:46.536000", "tags": [ "note", "home", "lucene paths", "json descriptor", "lucene path", "company home", "actividades", "pageuser", "sie knnen", "sie auf", "link klicken", "recente", "u kunt", "attivit", "possibile", "activits", "vous", "report", "web link", "cvs report", "link", "chs placement", "chs student", "placement", "team", "google form", "university", "alberta", "automation", "please", "following", "followers", "ihnen", "mitarbeitern", "mitarbeiter", "hello", "foreign visitor", "fvca", "human resource", "fvca assessment", "incomplete", "regards", "klik", "wachtwoord", "mijn profiel", "klik op", "hoogachtend", "alfresco", "bonjour", "cliquez sur", "nous", "pour ce", "mon profil", "changer", "invito", "caro", "fare", "password", "il mio", "cambia password", "per rifiutare", "cordiali saluti", "my profile", "change password", "konto", "sie erstellt", "passwort", "wir legen", "ihnen nahe", "passwort bei", "anmeldung zu", "ndern", "gehen sie", "mmm yyyy", "nome utente", "nombre", "contrasea", "para hacerlo", "mi perfil", "atentamente", "account", "alfresco share", "hola", "haga", "los datos", "y seleccione", "si desea", "click", "einladung von", "hallo", "sie eingeladen", "site", "klicken sie", "konto fr", "alfresco client", "kofax index", "inhaltselement", "zur site", "gren alfresco", "pledged gift", "office", "advancement", "datetime", "university vpn", "date", "shared", "support", "auxiliary", "process", "priority", "medium high", "pay action", "sincerely", "uofa ecm", "link um", "aufgaben stehen", "verfgung", "prioritt", "niedrig mittel", "hoch", "klicken", "aufgabe zu", "il seguente", "disponibile", "priorit", "bassa media", "alta", "clicca", "clicca su", "la tche", "tre rcupre", "basse moyenne", "leve", "cliquez", "cordialement", "prioriteit", "laag gemiddeld", "hoog", "la siguiente", "prioridad", "media alta", "saludos", "kb content", "links content", "content url", "download url", "webdav url", "ttulo", "descripcin", "ninguno", "ninguna", "creador", "creado", "modificador", "modificado", "tamao", "webdav", "titre", "aucun", "aucune", "modificateur", "modifi", "taille", "ko liens", "du contenu", "dossier du", "url webdav", "titolo", "nessuno", "nessuna", "creato", "modificato", "dimensioni", "kb link", "al contenuto", "cartella", "ingen", "beskrivelse", "tittel", "opprettet", "modifikator", "modifisert", "strrelse", "lenker for", "innhold mappe", "descrio", "nome", "nenhum", "nenhuma", "criador", "criado", "tamanho", "geen", "beschrijving", "titel", "maker", "gemaakt", "gewijzigd", "grootte", "contenturl", "downloadurl", "beschreibung", "url zum", "keiner", "keine", "ersteller", "erstellt", "bearbeiter", "gendert", "kb links", "download", "navigatebrowse", "pagesite", "readme file", "yesno", "user name", "main", "function", "log debug", "record", "sample rm", "import", "njson", "forms", "sites", "documenttype", "commonfolder", "error", "value", "jsonfile", "service", "false", "moving", "prop", "null", "bearer", "uappol", "uappol function", "contentid", "param", "id var", "call", "post request", "json", "config", "coveo", "uappol metadata", "content id", "and not", "loads", "update", "uploader", "inbox", "rnrn", "create", "contenteml", "inbox folder", "number", "normal", "textpart", "backup", "createchildren", "backupname", "childlist", "name", "content", "array", "write", "childname2", "childname3", "childname4", "reviewgroup", "groupsite", "starting", "started", "delete email", "command", "found", "create content", "resources", "unknown command", "globals", "var title", "rnrncopyright", "copyright", "csvtoarray", "regexp", "jsonstr", "daily", "review", "az09", "format", "hrsfilescanner", "hrs document", "fromscanner", "not type", "matches1", "employee id", "third", "tempfilename", "ldap", "version", "this", "file share", "folder", "trimlr", "namearr", "personid", "document name", "ales file", "scanned", "shared drive", "last", "document type", "document", "advising notes", "debug", "debugstr", "schedule", "descriptorpath", "web service", "inbound rule", "web services", "collaborator", "groupeveryone", "check", "index", "taskassignee", "taskenddate", "filename", "localisotime", "startdatetime", "timeperiod", "uofa edrms", "author", "descommonnode", "nomatch", "iddocumenttype", "siteid", "span", "path", "term", "core", "cap report", "template", "object", "cap mail", "dev testing", "application", "aps status", "cap generate", "monthly report", "extension", "alfresco locale", "september", "pm mdt", "school", "didx", "json response", "cap final", "rebcapiddict", "finalcapiddict", "aps process", "trigger", "chsdocument", "message", "func", "msgstr", "emailobj", "emailtemplate", "emailsubject", "sitepath", "chs docs", "studentfiles", "faculty", "true", "chssiteid", "type", "aspect", "chsdocs", "nodeidx", "find", "expired", "chs school", "defunc", "facultykey", "program", "spasite", "ldapperson", "parent name", "securitytype", "formsengg", "limit", "enggfilescanner", "stuccid", "csv file", "studdept", "supccid", "supdept", "cosupccid", "relocation", "fgsr", "records site", "fgsr doc", "department", "start fgsr", "department doc", "completion of", "oral hlth", "form", "application for", "report of", "admission", "master", "music", "unknown", "comp", "class", "leave", "supervisor", "currentline", "return", "studentid", "superccid", "revdate", "code", "apstaskproperty", "converttocsv", "aps guideline", "aps task", "newdata", "hyperlink", "certificate", "first", "info", "procid", "filecontentstr", "query sort", "create header", "person id", "subject title", "node", "studentccid", "yyyymmdd", "lookupjson", "propidx", "input date", "iso format", "folder level", "query", "duedate", "test java", "dailyschedule", "upload", "ro adm", "workflow", "offset", "adm workflow", "data length", "startindex", "json object", "aps group", "acs site", "user", "getgroupid", "am mst", "acsaps group", "user sync", "january", "start january", "february", "start february", "december", "start december", "march", "start march", "am mdt", "consumer march", "aps student", "april", "start april", "june", "start june", "pm mst", "ro backscan", "edrmsteam", "group", "group december", "aps ro", "copy file", "aps api", "maxfile", "creator", "rand", "hrsbs", "july", "august", "hrsbssyncccids", "zhrroleuserresp", "edrms", "ccids", "prefix", "createdirectory", "directory", "actionreason", "safefilename", "employeeclass", "carry", "csv data", "host", "bachelor", "college level", "mike", "propname", "maxitems", "currjson", "fvca status", "important", "prod", "manual data", "doctoratephd", "medicine", "nodename", "employeeccid", "managerccid", "employeeid", "workingtitle", "regtempdescr", "findkey", "email", "new document", "doctypelabel", "competitive bid", "bid exception", "pcm competitive", "and aspect", "competitive", "nodes", "bid update", "acommonfolder", "formspcm", "peoplesoft", "no data", "qaselectednode", "qaselected", "qanotselected", "qa folder", "preqa", "qa var", "documentcount", "passcount", "qadocument", "qa selected", "moved", "attempts", "accepted", "rm file", "plan", "rm filing", "min to", "rm system", "batch", "time limit", "rmcfg", "string", "already", "load", "valid", "graddate", "uathdep", "ccid", "title", "abstract", "embargo", "datestr", "searchresult", "alfresco afa", "admissions", "student case", "files", "and type", "institution", "inst", "json config", "institution not", "if file", "logger", "needle", "xmlstr", "staus", "document linkn", "getlogfile", "documentlist", "xml field", "not found", "addaspect", "move aspect", "duplicate file", "makes", "to max", "checks", "workflow name", "workflow link", "emplid", "due daten", "total afa", "not path", "afabundling", "change", "not aspect", "logs", "ephesoft", "document moved", "epehsoft", "xmlsourcenode", "batchsize", "filemappingpdf", "entry", "move file", "getcsvfile", "batchprocess", "logging", "completed", "document link", "groupn", "created date", "stdapl", "person", "workflow desc", "json file", "list", "lastmonth", "daily qa", "default", "qastartdate", "query language", "finished", "afa bundle", "transcriptarr", "lucene query", "qacounter", "rrfgroupname", "uaroemplid", "uaropriority", "uaroduedate", "documentlistarr", "uarmm", "profile", "courseauditform", "status", "jile", "searchmatchmove", "logfoldername", "backscanreview", "smfstr", "rosm", "converter", "shortxml", "failedcsvfolder", "xml file", "qaoperatorindex", "qaoperatorlabel", "script", "suresh", "aws promotion", "file", "tasks", "bundlingprop", "tasktype", "grps2", "uarotasktype", "comments", "test", "ro scripts", "xmlnode", "shortdescr", "xmlcont", "firstname", "orgid", "middlename", "lastname", "middle", "final", "script started", "to now", "received date", "first name", "receiveddatestr", "dateofbirthstr", "getdefination", "2005 aug", "dropbox", "foldercreate", "scan doc", "officiality", "search match", "running script", "materialextid", "studentref", "ceeb", "materialcode", "memo", "jsoncontent", "ro document", "paperfileutils", "afaconfig", "ro workflow", "paperfileconfig", "applicationjson", "formsrso", "targetfile", "property name", "pinames today", "addp", "science addp", "addp move", "ro code", "scifilescanner", "desconfnode", "grabnodeprop", "copy", "consumer", "initiators", "hiring", "consigno", "offer letter", "match", "apsmaster", "match2", "reappointment", "expiry date", "today", "finaldate", "task info", "psperson", "complete basic", "hiring info", "employee", "resultdata", "delegategroup", "delegate group", "verify", "bind", "aps appointment", "trevor report", "sfsussl", "drawdown", "refund", "reporttype", "var document", "shareurl", "newgroup", "parentgrp", "group created", "var logfile", "rule folder", "site running", "report on", "get site", "foldername", "create file", "reportlogslogs", "reportlogs", "ist site", "running report", "count", "tran", "var csvfile", "result length", "processid", "process id", "delimiters", "quoted", "standard", "starting name", "morechildren", "pdf var", "length", "newname", "fiscal", "docnamearr", "filenode", "calendar year", "versionhistory", "new doc", "web deployed", "var startdate", "startdate", "maxcount", "prevmonth", "monthcount", "application id", "delete", "get path", "if node", "search length", "arra y", "if csv", "version history", "graduate", "graduate folder", "children", "graduate file", "searchmatchdob", "career", "appl nbr", "jan04 now", "counter", "thesis", "runyear", "spring", "service log", "everything", "this determine", "thesis deposit", "archival", "problem", "filepath", "md import", "arraytocsv", "found document", "start", "food", "yumna", "start kofax", "kofax", "admin", "subject", "sample email", "execute", "koafx", "apasresponseid", "merge", "recruitment", "transcripts", "review request", "admindate", "requesteddate", "approveddate", "approvereject", "getemailbody", "taskid", "sendemail", "request status", "siteconsumer", "sitemanager", "eval", "acshost", "global env", "config file", "apsprod", "params", "alloc", "checkpath", "newpath", "adding entity", "surnamechar", "adding person", "jsonfunction", "text", "syntaxerror", "arraytoxml", "xml related", "change xml", "xmltoarray", "xmlutil", "common folder", "random2digit", "maxlimit", "jsonarchive", "very", "returns", "sitecontext", "arrcounter", "node id", "items", "array length", "therecord", "award sponsor", "rso project", "res0012345", "iso88591", "util function", "project id", "proposal id", "doc name", "newdocname", "prod url", "199899", "property", "typeprop", "barcode", "accepts", "parent", "xmlfilename", "siteconfigjson", "qabatchgrp", "signeddate", "ephdocumenttype", "json document", "qapercentage", "entity", "broker", "add error", "getexecutetime", "qaoperator", "retain title", "idnumber", "assocname", "metaarr", "fund report", "csvcontent", "input folder", "doc00c200004txg", "xmlfile", "node1", "node2", "540am", "240pm", "metadata", "var folder", "filter", "mappedobj", "09azaz", "conditionval", "foldercondition", "file name", "xmlfileobj", "alfresco prop", "setup error", "formatjson", "id property", "move", "getrandomnumber", "result", "newdoctype", "no title", "clioacs update", "clio", "patch", "system overview", "system", "overview", "purpose", "aims", "objectives", "prerequisites", "total", "expected effort", "domain", "urls", "dept param", "department name", "done", "submit form", "saving", "label", "input", "approvers", "information", "user group", "request", "group request", "users", "single family", "edmonton ab", "coverage", "common law", "step workflow", "care", "dental benefits", "direct", "web scripts", "get http", "documentation", "web script", "http method", "http", "apis", "development", "knowledge", "java", "empty argument", "e1234", "im system", "lookupentity", "configfilename", "namespace", "searchterm", "access", "jsonuser", "alfresco search", "page search", "expires", "signer", "reason", "utf8", "stripcharacter", "pull hiring", "getapsdbid", "save", "processsetidset", "saved", "returndata", "boolean", "start building", "varname", "fill", "time click", "initiated all", "submissions", "all submissions", "process landing", "page", "initiators all", "maps initiated", "post doc", "student term", "start form", "middle name", "email address", "retype", "cell", "phone no", "fellow", "secureorigin", "expand", "thank", "here", "please check", "aps list", "pang", "subset", "display", "args", "task", "username", "save form", "data need", "cdkey", "checkdict", "item", "column", "anchor", "multi", "tasks filter", "search", "trigger aps", "process api", "apsprocess", "authentication", "webscript", "getapsperson", "process info", "initsavestatus", "step0statusfail", "signer1", "signer2", "appointment", "taskjson", "groupapiaccess", "checkapiuser", "fgsrpr", "psaudit", "statusname", "unsuccessful1", "apptreappt", "emplobject", "caps aps", "cap epsb", "applicant", "form submitted", "board review", "form applicant", "school district", "start date", "cap application", "home help", "pdfa format", "larger", "upload file", "please click", "uofacap", "applications", "jstr", "processjson", "invalid url", "associate dean", "edmonton public", "october", "elk island", "reutrn false", "mapdoctypeurl", "doctype", "cap document", "doctypes", "doctypemap", "schools", "public schools", "foip", "edmonton area", "epsb", "capid", "server", "aps user", "groupcapadmin", "assignuser", "cap ea", "successfully", "please wait", "successfully ea", "apsservice", "apsserviceprod", "requireddate", "bibliography", "reb approval", "letter", "cprbls", "ahsrespect", "ahscon", "immformdocs", "picvsc", "whmis", "condissi", "hspnet", "conphoto", "conclin", "college", "health", "submission date", "effective date", "expiration date", "chs admin", "student view", "typekey", "placementdocs", "warning", "jobj", "abraniuk", "wendy", "terry harris", "directorhrsbs", "level", "holiday pay", "part time", "payroll", "salariedreg aux", "cheat", "paramname", "getallurlparams", "hrsbs config", "data dictionary", "field", "responsejson", "workflowid", "workflow id", "context", "event", "statusevent", "uaesign", "success", "permission", "progress report", "postdoctoral", "sorry", "deptjson", "fgsr student", "process status", "select", "currentuser", "reports", "student ccid", "populated", "invalid student", "supervisor ccid", "co supervisor", "due date", "freedom", "report process", "fgsr forms", "list fgsr", "report fgsr", "report sorry", "review process", "fgsr supervisor", "thesis programs", "programs", "please enter", "student id", "submit button", "var taskid", "var currentuser", "review sorry", "raheel", "added", "urlorigin", "need", "raheel var", "elmid", "commentkeyarr", "override", "menu", "colour bar", "mdphd", "absence", "completion", "mbameng", "mbamsc", "meng", "jason", "acs property", "available", "subdoctype", "test person", "test effective", "modelnodepath", "sitename", "metadatamap", "sitefile", "google addon", "gtagra", "gta gra", "zhreformengresp", "id otherwise", "university home", "indicate", "monday", "tuesday", "wednesday", "thursday", "friday", "na note", "services", "please contact", "documentname", "time", "docs", "documentlink", "employee ccid", "conflict", "task assigned", "ist coi", "declaration", "jsonobj3", "parse", "stringify", "grouplist", "json post", "taskfilter", "applies", "assigntogroup", "retrieves", "assignee", "queries", "expects", "uri args", "json containing", "applyfilter", "assignment", "avm folder", "avm store", "store id", "fullpath", "store", "storeid", "avm stores", "search term", "blog query", "category", "api call", "returns json", "cached data", "keylabel", "rest", "ldap query", "resultstr", "jsonoutput", "campusid", "jsonobj", "suresh joshee", "raheel bhojani", "desrochers", "first check", "set message", "materialkey", "acommonfolderid", "hasaccess", "siteconfig", "unprocesseddata", "savemetadata", "getcustomscript", "sitetitle", "error occured", "afa admission", "afas", "change log", "date name", "description", "ebeaton script", "tfrith", "afa main", "runasuser", "afas name", "afa paper", "file test", "utility enter", "does", "student", "bad query", "parameters", "add all", "or condition", "batch ids", "case files", "batchid", "afns", "agricultural", "anaesthes", "life", "environmental", "anaesthesiology", "uappol content", "deanaheed", "programyear", "province", "agreementtype", "safety manual", "mtis", "cree", "blackfoot", "nakota sioux", "iroquois", "dene", "treaties", "first nations", "next", "refresh", "site viewer", "facetkey", "sortparameter", "textjavascript", "public site", "viewer access", "acs cron", "job error", "alfrescos", "unauthorized", "enter", "bear tracks", "main department", "choose", "library", "john", "reviewer", "embargodate", "actiondate", "convocation", "graduation", "nodeid", "thesis status", "match result", "match list", "name dob", "view", "searchcriteria", "main function", "method", "chs upload", "stuln", "filetype", "stuid", "chs agreement", "health sciences", "recreation fomd", "dentistry fomd", "fomd", "therapy fomd", "consent for", "disclosure of", "alberta freedom", "protection", "privacy act", "alberta health", "chs form", "intake", "tasks dashlet", "doccd", "val2", "a my", "view error", "view warning", "keyword search", "refresh list" ], "references": [ "old-AlfrescoToolkit.conf", "AlfrescoToolkit.info", "AlfrescoToolkit.conf", "activities-email_es.ftl", "activities-email_ja.ftl", "activities-email_de.ftl", "activities-email_nl.ftl", "activities-email.ftl", "activities-email_it.ftl", "activities-email_fr.ftl", "CAP-notify-monthly-report.ftl", "chs-commentUpdate.ftl", "chs-studentUploadNotification.ftl", "chs-Invalid.ftl", "chs-studentExpireSoon.ftl", "chs-studentExpired.ftl", "following-email.html_it.ftl", "following-email.html_fr.ftl", "following-email.html_ja.ftl", "following-email.html_nl.ftl", "following-email_de.html.ftl", "following-email_fr.html.ftl", "following-email_ja.html.ftl", "following-email_it.html.ftl", "following-email_nl.html.ftl", "following-email.html.ftl", "following-email.html_de.ftl", "fvca-reminder-email.ftl", "fvca-corrections-email.ftl", "invite-email_nl.html.ftl", "invite-email-add-direct.html.ftl", "invite-email-add-direct.html_fr.ftl", "invite-email_fr.html.ftl", "invite-email_it.html.ftl", "invite-email-add-direct.html_es.ftl", "invite-email-add-direct.html_de.ftl", "invite-email_ja.html.ftl", "invite-email-add-direct.html_nl.ftl", "new-user-email.html.ftl", "new-user-email_de.html.ftl", "invite-email-add-direct.html_ja.ftl", "invite-email-moderated.html.ftl", "new-user-email_fr.html.ftl", "new-user-email_it.html.ftl", "new-user-email_ja.html.ftl", "new-user-email_es.html.ftl", "new-user-email_nl.html.ftl", "invite-email-add-direct.html_it.ftl", "new-user-email_nl.html", "invite-email.html_nl.ftl", "invite-email.ftl", "invite-email_es.html.ftl", "invite-email.html.ftl", "invite-email_de.html.ftl", "invite_user_email.ftl", "kofaxFailedEmailTemplate.ftl", "notify_user_email.ftl", "notify_nl.htm", "notify_user_email_es.html.ftl", "notify_user_email_de.html.ftl", "notify_user_email_ooa_failed.ftl", "notify_user_email.html.ftl", "notify_user_email_it.html.ftl", "notify_user_email_e-transcript_failed.ftl", "notify_user_email_ja.html.ftl", "notify_user_email_fr.html.ftl", "notify_user_email_nl.html.ftl", "OOA-notify-email-template.ftl", "ADV-notify-terms-types.ftl", "appt-final-reminder.ftl", "appt-halfway-reminder.ftl", "sfs-wf-email.html.ftl", "sfs-wf-completed-email.html.ftl", "payActionDecision.html.ftl", "departmentAdhocTask.html.ftl", "wf-email.html_de.ftl", "wf-email.html.ftl", "wf-email_it.html.ftl", "wf-email_fr.html.ftl", "wf-email_nl.html.ftl", "wf-email_ja.html.ftl", "wf-email.html_fr.ftl", "wf-email.html_nl.ftl", "wf-email_es.html.ftl", "wf-email.html_ja.ftl", "wf-email.html_it.ftl", "wf-email_de.html.ftl", "wf-email.html_es.ftl", "emailbody_textplain_alfresco.ftl", "emailbody_textplain_alfresco_es.ftl", "emailbody_textplain_alfresco_fr.ftl", "emailbody_textplain_alfresco_it.ftl", "emailbody_textplain_alfresco_ja.ftl", "emailbody_textplain_alfresco_nb.ftl", "emailbody_textplain_alfresco_pt_BR.ftl", "emailbody_textplain_alfresco_nl.ftl", "emailbody_textplain_alfresco_ru.ftl", "emailbody_textplain_alfresco_zh_CN.ftl", "emailbody_textplain_share.ftl", "emailbody_textplain_share_de.ftl", "emailbody_textplain_share_es.ftl", "emailbody_textplain_share_it.ftl", "emailbody_textplain_share_ja.ftl", "emailbody_textplain_share_nb.ftl", "emailbody_textplain_share_nl.ftl", "emailbody_textplain_share_ru.ftl", "emailbody-alfresco-textplain.ftl", "emailbody-share-textplain.ftl", "emailbody_textplain_alfresco_de.ftl", "emailbody_textplain_share_zh_CN.ftl", "emailbody_textplain_share_fr.ftl", "emailbody_textplain_share_pt_BR.ftl", "uofa-pc-model.xml", "uofa-pllc-model.xml", "uofa-science-model.xml", "uofa-rso-model.xml", "uofa-set-model.xml", "uofa-sfs-model.xml", "uofa-slate-model.xml", "uofa-uappol-model.xml", "advext-model.xml", "assocModel.xml", "adv-model.xml", "cbsr-model.xml", "dynamicSecurityMarksModel", "ephesoft-educational.xml", "facopr-model.xml", "fgsr-model.xml", "faculty-model.xml", "psAudit-model.xml", "FVCA.xml", "roDocProcessing-model.xml", "ro-model.xml", "fgsr-thesis-deposit.xml", "security-group-model.xml", "ua-audit-generic-model.xml", "ua-dummy.xml", "calendar-year-model.xml", "ua-error-model.xml", "uafgsrsup-model.xml", "uaqa-model.xml", "transcript-model.xml", "uAlbertaWorkflowGeneral.xml", "uarmm-supplement-scanning.xml", "uarm-rma-filing-model.xml", "ua-search-model.xml", "ro-search-match.xml", "uatraining.xml", "uofa-ales-model.xml", "uofa-arts-model.xml", "uofa-aps-model.xml", "uofa-base-model.xml", "uawfh-model.xml", "uofa-augustana-model.xml", "uofa-business-model.xml", "uarmTempModel.xml", "uofa-cap-model.xml", "uofa-chs-model.xml", "uofa-chs-agreements-model.xml", "uofa-common-model.xml", "uofa-education-model.xml", "tamis-model.xml", "uofa-engg-coop-model.xml", "uofa-engg-model.xml", "uofa-fo-model.xml", "uofa-extension-model.xml", "uofa-esign-model.xml", "uofa-hrsbs-model.xml", "uofa-law-model.xml", "uofa-caps-model.xml", "uofa-hrs-model.xml", "uofa-native-studies-model.xml", "uofa-pllc-model.json", "uofa-rso-model.json", "uofa-pc-model.json", "uofa-native-studies-model.json", "uofa-slate-model.json", "uofa-uappol-model.json", "uofa-science-model.json", "uofa-workflowGeneral.json", "uofa-sfs-model.json", "adv-model.json", "advext-model.json", "assocModel.json", "calendar-year-model.json", "facopr-model.json", "cbsr-model.json", "ephesoft-educational.json", "faculty-model.json", "faculty-model.xml.json", "rma-model.json", "fgsr-model.json", "FVCA.json", "psAudit-model.json", "ro-aug-model.json", "ro-search-match.json", "tamis-model.json", "security-group-model.json", "fgsr-thesis-deposit.json", "transcript-model.json", "ro-model.json", "ua-audit-generic-model.json", "uafgsrsup-model.json", "uaqa-model.json", "uarmm-supplement-scanning.json", "uAlbertaWorkflowGeneral.json", "ua-error-model.json", "uofa-ales-model.json", "ua-search-model.json", "uarmTempModel.json", "uofa-aps-model.json", "uawfh-model.json", "uofa-arts-model.json", "uofa-cap-model.json", "uofa-chs-agreements-model.json", "uofa-augustana-model.json", "uofa-base-model.json", "uofa-chs-model.json", "uofa-engg-coop-model.json", "uofa-common-model.json", "uofa-engg-model.json", "uofa-extension-model.json", "uofa-hrsbs-model.json", "uofa-fo-model.json", "uofa-education-model.json", "uofa-law-model.json", "uofa-hrs-model.json", "uofa-esign-model.json", "uofa-business-model.json", "faculty-of-science-site.json", "FandO-Organizations.json", "FandO-Programs.json", "fgsr-awards.json", "fgsr-category-list.json", "fgsr-exam-list.json", "fgsr-official-list.json", "fgsr-programOfStudy.json", "fgsr-site.json", "fo-emergency-response-manual.json", "graduate-student-records-site.json", "fo-site.json", "fo-utilities.json", "hrs-benefits.json", "hrsbs-action-reasons.json", "graduate-student-records-v2-site.json", "hrsbs-doc-list.json", "hrsbs-file-structure.json", "hrsbs-owner-details.json", "hrsbs-functionalroles.json", "hrsbs-function-module.json", "hrsbs-review-month.json", "hrsbs-security-class.json", "hrsbs-site.json", "hrs-employeeApprovedDeductions.json", "hrs-bulkId.json", "hrsbs-review-cycle.json", "hrs-employmentFinancial.json", "hrs-personalInformation.json", "hrs-pension.json", "hrs-security-list.json", "hrs-leaves.json", "Institutions.json", "ist-site.json", "hrs-site.json", "my-site-site.json", "law-security-list.json", "native-studies-doc-list.json", "fgsr-credential-list.json", "law-doc-list.json", "native-studies-security-list.json", "office-of-advancement-record-types.json", "office-of-advancement-site.json", "pcm-category.json", "pllc-doc-list.json", "ro-academic-pre-pro-programs.json", "pllc-security-list.json", "ro-acad-group.json", "ro-admitType.json", "ro-applicant-type.json", "ro-campusSolutionsTerm.json", "hrsbs-employee-class.json", "pllc-site.json", "ro-indigenous-type.json", "ro-doctypes.json", "pcm-site.json", "ro-official.json", "ro-org-desc.json", "ro-related-record-types.json", "ro-relationship-to-institution.json", "ro-search-match-status.json", "ro-authenticity.json", "ro-slate-folio-material-non-school-scope.json", "ro-slate-institution-material.json", "ro-slate-folio-material-school-scope.json", "ro-method-receipt.json", "ro-slate-institutions.json", "ro-test-id.json", "rso-accounts-receivable-accounts-payable-doc-type.json", "rso-agreements-doc-category.json", "rso-bulk-scan-doc-type.json", "rso-cfi-purchasing-doc-type.json", "rso-cfi-financials-doc-type.json", "rso-financial-reconciliation-doc-type.json", "rso-financial-reporting-doc-type.json", "rso-financials-doc-type.json", "rso-mask.json", "rso-site.json", "rso-sponsor-names.json", "science-doc-list.json", "science-security-list.json", "school-of-business-site.json", "sfs-ussl-report-status.json", "staff-training-site.json", "student-financial-services-doc-list.json", "student-financial-services-site.json", "student-records-bulk-load-testing-site.json", "student-records-training-site.json", "student-records-site.json", "student-transcripts-site.json", "rso-forms-form-type.json", "support-documentation-site.json", "test-site-site.json", "uappol-category-heirarchy.json", "uappol-type.json", "uappol-site.json", "uoda-faculties.json", "academic-department.json", "adv-correspondence-type.json", "uoda-departments.json", "advsearch.json", "ales-security-list.json", "ales-doc-list.json", "arts-doc-list.json", "arts-security-list.json", "augustana-security-list.json", "augustana-site.json", "augustana-legacy-transcript-doc-list.json", "rso-activation-report-doc-type.json", "business-doc-list.json", "business-security-list.json", "bulkload-testing-site.json", "cap-site.json", "caps-school-board-list.json", "cbsrsite-site.json", "cbsrsite-sopTypes.json", "cbsr-study.json", "cbsr-worksheetType.json", "augustana-doc-list.json", "chs-ag-type.json", "chs-agreements-site.json", "chs-campus-list.json", "chs-degProgram-list.json", "chs-emailNotification.json", "chs-document-status.json", "chs-faculty-list.json", "chs-programYear-list.json", "chs-program-list.json", "canada-provinces-list.json", "demo-site-site.json", "education-doc-list.json", "department.json", "education-security-list.json", "chs-stuEmailNotification.json", "college-of-health-sciences-site.json", "chs-provinces-list.json", "engineering-coop-doc-list.json", "engineering-coop-security-list.json", "engineering-co-op-site.json", "engineering-doc-list.json", "extension-doc-list.json", "extension-security-list.json", "facopr-planTypes.json", "facopr-supportinDocField.json", "faculty-of-ales-site.json", "engineering-security-list.json", "faculty-of-education-site.json", "faculty-of-extension-site.json", "faculty-of-native-studies-site.json", "faculty-of-law-site.json", "faculty-of-arts-site.json", "faculty-of-engineering-site.json", "my_docs_inline.ftl", "my_docs.ftl", "my_spaces.ftl", "recent_docs.ftl", "translatable.ftl", "readme.ftl", "show_audit.ftl", "general_example.ftl", "my_summary.ftl", "doc_info.ftl", "localizable.ftl", "recordsCustomModel.xml", "imapConfig.json", "rm_event_config.json", "rmScriptThrowError.js", "report_rmr_transferReport.html.ftl", "report_rmr_destructionReport.html.ftl", "report_rmr_holdReport.html.ftl", "notify-records-due-for-review-email.ftl", "record-rejected-email.ftl", "record-superseded-email.ftl", "onCreate_supersedes.js", "rma_isClosed.js", "PaperFileconfig.json", "MyTasks-config.json", "AFAconfig.json", "roDocumentTypes.json", "uappol-upload-rule.js", "uappolCreateFolderRule.js", "uappolCreateFolder.js", "uappol-api.js", "uappol-functions.js", "command-utils.js", "backup and log.js", "backup.js", "example test script.js", "test return value.js", "start-pooled-review-workflow.js", "command-processor.js", "command-search.js", "alfresco docs.js", "append copyright.js", "createDepartmentJSON.js", "hrsDaily.js", "hrsFolderCreateSchedule.js", "hrsScanned.js", "hrsCreateFolder.js", "hrsFolderCreateRule.js", "hrsFileShareFolder.js", "alesCreateFolderRestricted.js", "alesCreateFolderSchedule.js", "alesBulkShareFolder.js", "alesFileScanned.js", "alesCreateFolder.js", "alesDaily.js", "alesFileShareFolder.js", "alesCreateFolderConfidential.js", "alesCreateAdvisingNotes.js", "alesFolderCreateSchedule.js", "deployWebServiceDescriptor.js", "taskReportCSV-Appointment-prod.js", "artsFileScanned.js", "artsCreateFolderRule.js", "artsCreateFolder.js", "artsCreateFolderRestricted.js", "augCreateFolderRestricted.js", "augCreateFolder.js", "businessCreateFolderRule.js", "businessCreateFolder.js", "businessCreateFolderSchedule.js", "businessBulkShareFolder.js", "businessFileShareFolder.js", "businessCreateFolderRestricted.js", "businessDaily.js", "businessCreateAdvisingNotes.js", "businessFileScanned.js", "CAPSendMonthlyReportEmail.js", "CAPGenerateMonthlyReport.js", "CapFinalReportSubmit.js", "chsCreateFolderRule.js", "chsEmailOnUpdateComment.js", "chsReport.js", "EmailNotifCHSStudent.js", "SetExpiryDate.js", "chsCreateFolder.js", "chsFacultyReport.js", "chsAgreementCreateFolderRule.js", "chsAgreementCreateFolder.js", "scheduleJobTest.js", "every52MinPastHour.js", "every46MinPastHourBetween4PM12PM.js", "every57MinPastHour.js", "every47MinPastHourBetween4PM12PM.js", "everyDay4H30MinAM.js", "everyDay7H45MinAM.js", "every10MinStartingAt5MinPastHour.js", "every38MinPastHourBetween4PM12PM.js", "every20MinStartingAt15MinPastHour.js", "everyDay2H05MinAM.js", "every2MinStartingAt1MinPastHour.js", "everyDay1H05MinAM.js", "everyDay12H30MinAM.js", "everyDay7H30MinPM.js", "every30MinStartingAt19MinPastHour.js", "every30MinStartingAt11MinPastHour.js", "everyDay2H35MinAM.js", "every30MinStartingAt26MinPastHour.js", "every16MinPastHour.js", "everyDay1H45MinAM.js", "everyDay2H45MinAM.js", "every29MinPastHour.js", "every22MinPastHour.js", "everyDay11H30MinPM.js", "educationCreateFolderRule.js", "educationCreateFolder.js", "educationCreateAdvisingNotes.js", "enggCoopCreateFolderRestricted.js", "enggCoopCreateFolderRule.js", "enggCoopBulkUpload.js", "enggCreateFolderRule.js", "enggCreateFolderRestricted.js", "enggCreateFolder.js", "engineeringCreateAdvisingNotes.js", "enggCoopCreateFolder.js", "enggFileScanned.js", "enggCoopFileScanned.js", "extensionFileScanned.js", "extensionCreateFolder.js", "extensionCreateFolderRule.js", "fgsrCreateGuidelineAPSProcessFromCSV.js", "fgsrDocRestructure.js", "fgsrMigrationScript.js", "fgsrDocRelocation.js", "fgsrCreateFolderFromCSV.js", "guideline-reports.js", "fgsrMigrationScript-withTerminationLogic.js", "modfiyOrUpdatePropertyfromCSV.js", "fgsr-case-file-report.js", "fgsrCreateAPSProcessFromFolder.js", "fgsrCreateFolder.js", "fgsrCopyMetadataToFolderLevel.js", "fgsrCreateAPSProcessFromCSV.js", "foCreateFolder.js", "foCreateFolderRule.js", "Script1.js", "Script2.js", "scheduleRunEvery2-10PM.js", "scheduleRunEvery5PMTo10PM.js", "scheduleRunEvery30Minutes.js", "scheduleRunEvery60Minutes.js", "scheduleRunEveryday3PMto11PM.js", "scheduleRunEveryday12AMto6AM.js", "scheduleRunEvery20Minutes.js", "scheduleRunEvery2AM.js", "acsToApsUserUpdate.js", "2024-01-13-log.txt", "2024-01-15-log.txt", "2024-01-20-log.txt", "2024-01-21-log.txt", "2024-01-22-log.txt", "2024-01-23-log.txt", "2024-02-04-log.txt", "2024-02-05-log.txt", "2024-02-06-log.txt", "2024-02-07-log.txt", "2024-02-08-log.txt", "2024-01-14-log.txt", "2024-01-18-log.txt", "2024-01-11-log.txt", "2024-01-16-log.txt", "2024-01-19-log.txt", "2024-01-26-log.txt", "2024-01-28-log.txt", "2024-01-30-log.txt", "2024-01-12-log.txt", "2024-01-29-log.txt", "2024-01-27-log.txt", "2024-01-31-log.txt", "2024-01-24-log.txt", "2024-02-09-log.txt", "2024-02-02-log.txt", "2024-01-09-log.txt", "2024-02-03-log.txt", "2024-01-05-log.txt", "2024-01-06-log.txt", "2024-01-04-log.txt", "2024-02-01-log.txt", "2024-01-07-log.txt", "2024-01-08-log.txt", "2024-02-10-log.txt", "2024-02-11-log.txt", "2024-02-12-log.txt", "2024-02-13-log.txt", "2023-12-31-log.txt", "2024-02-15-log.txt", "2024-02-16-log.txt", "2024-02-14-log.txt", "2024-02-18-log.txt", "2024-02-20-log.txt", "2024-01-17-log.txt", "2024-02-19-log.txt", "2024-01-10-log.txt", "2024-02-23-log.txt", "2024-02-25-log.txt", "2024-02-21-log.txt", "2024-01-25-log.txt", "2024-02-28-log.txt", "2024-02-22-log.txt", "2024-02-29-log.txt", "2024-03-02-log.txt", "2024-03-03-log.txt", "2024-02-26-log.txt", "2024-03-04-log.txt", "2024-03-06-log.txt", "2024-03-07-log.txt", "2024-03-05-log.txt", "2024-03-08-log.txt", "2024-03-09-log.txt", "2024-03-11-log.txt", "2024-03-10-log.txt", "2024-03-12-log.txt", "2024-03-13-log.txt", "2024-03-14-log.txt", "2024-03-15-log.txt", "2024-03-16-log.txt", "2024-03-17-log.txt", "2024-03-18-log.txt", "2024-03-20-log.txt", "2024-03-21-log.txt", "2024-03-22-log.txt", "2024-03-19-log.txt", "2024-03-23-log.txt", "2024-03-01-log.txt", "2024-03-26-log.txt", "2024-03-25-log.txt", "2024-03-28-log.txt", "2024-03-29-log.txt", "2024-03-27-log.txt", "2024-03-24-log.txt", "2024-03-30-log.txt", "2024-04-02-log.txt", "2024-04-03-log.txt", "2024-03-31-log.txt", "2024-04-05-log.txt", "2024-04-06-log.txt", "2024-04-07-log.txt", "2024-04-08-log.txt", "2024-04-09-log.txt", "2024-04-04-log.txt", "2024-04-11-log.txt", "2024-04-12-log.txt", "2024-04-13-log.txt", "2024-02-17-log.txt", "2024-04-01-log.txt", "2024-04-16-log.txt", "2024-04-15-log.txt", "2024-04-10-log.txt", "2024-04-17-log.txt", "2024-02-24-log.txt", "2024-04-14-log.txt", "2024-04-19-log.txt", "2024-04-21-log.txt", "2024-04-22-log.txt", "2024-04-23-log.txt", "2024-04-24-log.txt", "2024-04-26-log.txt", "2024-04-25-log.txt", "2024-04-29-log.txt", "2024-04-30-log.txt", "2024-05-01-log.txt", "2024-05-02-log.txt", "2024-05-03-log.txt", "2024-05-04-log.txt", "2024-05-05-log.txt", "2024-05-06-log.txt", "2024-04-28-log.txt", "2024-05-07-log.txt", "2024-04-18-log.txt", "2024-05-08-log.txt", "2024-05-09-log.txt", "2024-05-10-log.txt", "2024-05-12-log.txt", "2024-05-14-log.txt", "2024-05-11-log.txt", "2024-05-16-log.txt", "2024-04-27-log.txt", "2024-05-17-log.txt", "2024-05-15-log.txt", "2024-05-18-log.txt", "2024-05-20-log.txt", "2024-05-21-log.txt", "2024-05-19-log.txt", "2024-05-22-log.txt", "2024-05-23-log.txt", "2024-05-25-log.txt", "2024-05-24-log.txt", "2024-05-26-log.txt", "2024-05-27-log.txt", "2024-05-28-log.txt", "2024-05-29-log.txt", "2024-05-30-log.txt", "2024-06-02-log.txt", "2024-05-13-log.txt", "2024-06-01-log.txt", "2024-05-31-log.txt", "2024-04-20-log.txt", "2024-06-03-log.txt", "2024-06-04-log.txt", "2024-06-05-log.txt", "2023-12-30-log.txt", "2023-12-01-log.txt", "2024-02-27-log.txt", "2023-12-29-log.txt", "gtaGraProcessToCSV.js", "gtaGraProcessToCSV-2AM.js", "hrs-benefit-report.js", "westCanDocumentMove.js", "hrsbsReviewCycleReport.js", "hrsbsCreateFolderRule.js", "HRSBS-SyncCCIDs.js", "hrsbsCreateFolder.js", "FVCA-data-import.js", "FVCA-manual-property-update.js", "istPerformanceReviewCreateFolder.js", "lawCreateFolderRestricted.js", "lawFileScanned.js", "lawCreateFolder.js", "lawCreateFolderRule.js", "nativeStudiesCreateFolderRestricted.js", "nsFolderCreateSchedule.js", "nativeStudiesCreateFolder.js", "nativeStudiesCreateFolderRule.js", "ADV-notify-type-mapping.json", "OOA-notify-email.js", "ADV-notify-terms-types.js", "pcm-grab-competitive-noderefs.js", "pcm-update-competitive-noderefs.js", "pcmCreateFolder.js", "psUpdateAlfrescoDepartment.js", "pllcCreateFolder.js", "qaProcess.js", "qaRelease.js", "rmOOABackgroundInformationFiling.js", "rmFilingDoc.js", "rmSearchmatchNomatchFiling.js", "rmFilingConfig.json", "thesisDestructionReport.js", "rmThesis.js", "add_document_type_ro.js", "updateSearchMatchStatus.js", "searchmatchFullDob.js", "createROReconciliationReports.js", "eTranscriptInstList.js", "folder-create-ro.js", "augTranscript.js", "addTimeStamp.js", "missingDocumentList-csv.js", "roAddAspectAndMoveAFA.js", "myTaskDownload.js", "roAddAspectAndMoveTranscript.js", "roAddBundlingAspect.js", "roAddSearchMatchAspect.js", "roCopyEphesoftMetadataXML.js", "roBatchScript.js", "addSearchMatchDocumentType.js", "roCreateEducationalCSV.js", "roCopyOlderScannedDocument.js", "roDocumentListAPLSTD.js", "roCopyOlderScannedDocumentAdHoc.js", "roEtranscriptReport.js", "roDailyQA.js", "roEtranscriptsBundleTest.js", "roFolderCreateLDAPLookup_no_notificatiion.js", "roFolderCreateLDAPLookup.js", "roEtranscriptsBundle.js", "roAddComment.js", "roCopyEphesoftMetadataScanned.js", "roMoveCompleted.js", "roMoveCompletedBackScan.js", "roMoveCompletedSearchMatch.js", "roEtranscriptPDFConverter.js", "roScanningMetadata.js", "roScript1.js", "RORoutingWorkflowUtil.js", "roScript3.js", "roScript2.js", "roScanningMetadataBackScan.js", "roScript7.js", "roScript6.js", "roScript9.js", "roScript1BackScan.js", "roSearchMatchNoMatchReport.js", "roSearchMatchQuery.js", "RONotification.js", "roSlateDocumentExport.js", "roTagAndFileRenderedPDFs.js", "roScript4.js", "roScript5.js", "roScript8.js", "createSlateFolioMaterialDropdown.js", "createSlateApplicationsCSV.js", "LaunchWorkflowUtils.js", "PaperFileUtils.js", "GenerateSponsornamesAndPinames.js", "rsoCreateFolder.js", "sciCreateFolderConfidential.js", "sciCreateFolderPublic.js", "sciCreateFolder.js", "sciCreateFolderRestricted.js", "scienceASDocumentImport.js", "sciFileADDPFileTypes.js", "sciFileShareFolder.js", "sciFileScanned.js", "sciBulkShareFolder.js", "copy-signed-offer-letter.js", "dept-config.js", "reappointment-generate-schedule.js", "reappointment-reminder-schedule.js", "reappointment-generate-process.js", "manual-generate-script.js", "reappointment-reminder-process.js", "reminder-email-util.js", "reappointment-tracking-schedule.js", "reappointment-tracking-process.js", "appointment-report.js", "appointment-report-schedule.js", "manual-tracking-script.js", "sfsCreateFolder.js", "sfsWorkflowStatus.js", "security-group-user.js", "createReportPermissionsFoldersInASite.js", "siteMembersReport.js", "createReportRecursiveGroupsAndUsersInASite.js", "search-responses.js", "advChangeDocumentType.js", "addFolderMetadata.js", "advChangeDocumentType_confidential.js", "consignOInitiatorOfferLetterChange.js", "advChangeDocumentType_background.js", "transcriptResponse.js", "change-fgsr-pdf-file-name-with-date.js", "copy-fgsr-to-graduate-students-records.js", "ADVDonationCalendarToFiscal.js", "document-query.js", "deletingCompletingWorkflow.js", "eTranscriptTemp.js", "eTranscript-bundled-02-jan.js", "eTranscriptVersionModifierFix.js", "fixCheckout.js", "removeDonationGrp.js", "eTranscriptVersioningFix.js", "move-fgsr-folder.js", "search-match-dob-add.js", "thesisDepositArchival.js", "moveThesesForTransfer.js", "eraReportGeneration.js", "kofaxMetadataMerge.js", "kofaxMetadataMergeMissing.js", "generic2min.js", "kofaxSendEmail.js", "PeopleSoft-eTranscript-XML-PDF.js", "startBenefitWorkflow.js", "peoplesoftMetadataMergeMissing.js", "securityWorkflowUtil.js", "startPayActionWorkflow.js", "startDepartmentAdhocApprovalWorkflow.js", "convertTranscript.js", "CreateTranscriptUserMemberships.js", "startTwoStepWorkflow.js", "fix_employee_names.js", "env.js", "folderCreateUtil.js", "folderCreateUtilAA.js", "generalSchedule.js", "JSON.js", "xmlUtil.js", "addPersonAspect.js", "addTimeStampRandomFileName.js", "archiveDocument.js", "luceneUtil.js", "util.js", "archivedItems.js", "getProjectDetails.js", "ADVChangeAuthor.js", "ADVcalendarToFiscal.js", "symplexUtils.js", "advBatchProcessing.js", "advChangeDocumentName.js", "ADVEphesoftMove.js", "advCreateFolderScheduled.js", "advErrorMessageReset.js", "advMetadataUpdate.js", "advMoveToFoldersScheduled.js", "ADVendFundReportFiling.js", "advReconcilliation.js", "ADVmoveRecordsToPreQA.js", "advScanningMetadata.js", "advScript2.js", "advScript3.js", "advScript4.js", "advScript1.js", "advScript5.js", "advScriptDaily.js", "advScriptMonthly.js", "advScriptKofax.js", "ADVSiteContext.js", "advMoveToFolder.js", "deleteEphesoftDoc.js", "advUtils.js", "folderCreateADV.js", "advScriptDaily30minFreq.js", "jsonUtils.js", "advScanning.js", "folderCreateDocumentADV.js", "moveToFolders.js", "symplexMetadataUpdate.js", "OOA_SOT_Name_change.js", "moveToFoldersRetainTitle.js", "advScriptWeekly.js", "symplexMoveToFolder.js", "clioToAcsDocUpdate.js", "ClioUpdateScheduledJob.js", "smartFoldersExample.json", "system-overview.html", "businessDocSetup.json", "uappolDocSetup.json", "businessConfig.json", "augConfig.json", "augDocSetup.json", "lawConfig.json", "uappolConfig.json", "UAlbertaSettings.json", "hrsbsDocSetup.json", "advConfig.json", "hrsbsConfig.json", "hrsConfig.json", "hrsDocSetup.json", "advSimplexMapping.json", "advDocSetup.json", "artsDocSetup.json", "alesConfig.json", "alesDocSetup.json", "archiveFolder.json", "artsConfig.json", "advScanningMapping.json", "collegeOfHealthSciencesConfig.json", "chsAgreementsConfig.json", "dropboxCommonAspects.json", "collegeOfHealthSciencesDocSetup.json", "chsAgreementsDocSetup.json", "educationConfig.json", "extensionConfig.json", "fgsrv2DocSetup.json", "foConfig.json", "foDocSetup.json", "educationDocSetup.json", "lawDocSetup.json", "nativeStudiesDocSetup.json", "pllcConfig.json", "pllcDocSetup.json", "roConfig.json", "fgsrv2Config.json", "rsoConfig.json", "rsoDocSetup.json", "sciConfig.json", "eTranscriptConfig.json", "sciDocSetup.json", "roDocSetup.json", "sfsDocSetup.json", "UAlbertaSettings.conf", "student-recordsConfig.json", "securityWorkflowSetting.json", "thesisDepositConfig.json", "globalHeader.html.ftl", "webFormDialog.html.ftl", "alfrescoUserGroupRequest.ftl", "pensionBenefit.html.ftl", "pinames.json", "sponsornames.json", "searchPageConfig.json", "pcmDocSetup.json", "pcmConfig.json", "qaConfig.json", "apsAppConfig.json", "fgsrCreateApsFromCSV.json", "fgsrCopyMetadata.json", "enggCoopDocSetup.json", "enggDocSetup.json", "enggConfig.json", "enggCoopConfig.json", "CapApsConfig.json", "extensionDocSetup.json", "readme.html", "readme_de.html", "readme_ja.html", "readme_fr.html", "advEndowmentName.get.desc.xml", "advEndowmentName.get.json.ftl", "advEndowmentName.get.js", "advEntityName.get.desc.xml", "advEntityName.get.js", "advEntityName.get.html.ftl", "search.get.desc.xml", "search.get.js", "search.get.html.ftl", "changeInitiatorAppt.put.desc.xml", "eSignatureStatusHistory.get.html.ftl", "changeInitiatorAppt.put.json.ftl", "eSignatureStatusHistory.get.desc.xml", "appointmentSubmit.get.js", "processIdProps.get.desc.xml", "changeInitiatorAppt.put.js", "processIdProps.get.json.ftl", "processIdProps.get.js", "appointmentLandingPage.get.desc.xml", "appointmentLandingPage.get.js", "appointmentLandingPage.get.html.ftl", "appointmentStart.get.desc.xml", "appointmentStart.get.html.ftl", "appointmentStart.get.js", "appointmentStartTest.get.desc.xml", "appointmentStartTest.get.js", "appointmentStartTest.get.html.ftl", "appointmentSubmit.get.desc.xml", "appointmentSubmit.get.html.ftl", "eSignatureStatusHistory.get.js", "apsApplicationList.get.desc.xml", "apsApplicationList.get.html.ftl", "assignuser.put.js", "assignuser.put.json.ftl", "claimtask.put.desc.xml", "claimtask.put.js", "claimtask.put.json.ftl", "completetask.post.desc.xml", "completetask.post.json.ftl", "completetask.post.js", "getapsdbid.get.desc.xml", "getapsdbid.get.json.ftl", "gettasks.get.desc.xml", "gettasks.get.json.ftl", "assignuser.put.desc.xml", "gettasks.get.js", "savetask.post.desc.xml", "savetask.post.js", "savetask.post.json.ftl", "taskForm.get.js", "taskForm.get.desc.xml", "tasklist.get.desc.xml", "apsApplicationList.get.js", "taskForm.get.json.ftl", "tasklist.get.html.ftl.jquery", "tasklist.get.html.ftl", "tasklist.get.js", "triggerapsprocess.post.desc.xml", "triggerapsprocess.post.js", "updatevariables.post.desc.xml.notused", "triggerapsprocess.post.json.ftl", "updatevariables.post.json.ftl.notused", "getapsdbid.get.js", "updatevariables.post.js.notused", "taskUtils.js", "apsGroupsConfig.json", "apsSitesConfig.json", "apptStepZeroStarter.post.desc.xml", "apptStepZeroStarter.post.json.ftl", "apptStepZeroStarter.post.js", "apptStepOneStarter.post.desc.xml", "apptStepOneStarter.post.js", "apptStepOneStarter.post.json.ftl", "apptStepOneSave.post.json.ftl", "apptStepOneSave.post.desc.xml", "apptStepOneSave.post.js", "apptStatusDocUpdate.post.desc.xml", "apptStatusDocUpdate.post.json.ftl", "apptStatusDocUpdate.post.js", "APSWorkflowStatus.get.desc.xml", "APSWorkflowStatus.put.html.ftl", "APSWorkflowStatus.get.html.ftl", "APSWorkflowInfo.put.html.ftl", "APSWorkflowStatus.put.desc.xml", "APSWorkflowInfo.put.desc.xml", "APSWorkflowStatus.get.js", "APSWorkflowStatus.put.js", "APSWorkflowInfo.put.js", "NodeInfo.get.desc.xml", "NodeInfo.get.html.ftl", "capinfo.get.js", "capstart.get.js", "epsb.get.js", "epsb.get.html.ftl", "capstart.get.html.ftl", "epsb.get.desc.xml", "schoolboard.get.html.ftl", "NodeInfo.get.js", "NodeInfoByCapId.get.desc.xml", "updateVariable.post.json.ftl", "updateVariable.post.js", "schoolboard.get.desc.xml", "updateVariable.post.desc.xml", "schoolboard.get.js", "capinfo.get.html.ftl.backup", "cap-file-load.post.json.ftl", "NodeInfoByCapId.get.js", "capinfo.get.html.ftl", "capstart.get.desc.xml", "cap-file-load.post.desc.xml", "capinfo.get.desc.xml", "cap-file-load.post.js", "capeamergedoc.get.js", "capeamergedoc.get.desc.xml", "capeamergedoc.get.html.ftl", "capConfig.js", "chsEnv.js", "chsConfig.js", "chsAdminStuView.get.desc.xml", "chsAdminStuView.get.html.ftl", "chsAdminStuView.get.js", "coupa.get.html.ftl", "coupa.get.desc.xml", "coupa.get.js", "coveoGetDocList.get.desc.xml", "coveoGetDocList.get.json.ftl", "coveoGetDocList.get.js", "getJson.get.desc.xml", "getJson.get.js", "getJson.get.json.ftl", "simpleupload.post.desc.xml", "simpleupload.post.json.ftl", "simpleupload.post.js", "consignoMessage.get.js", "consignoWebhook.post.js", "consignoWebhook.post.json.ftl", "consignoMessage.get.desc.xml", "consignoWebhook.post.desc.xml", "consignoMessage.get.json.ftl", "eSignDownload.get.js", "eSignDownload.get.html.ftl", "eSignDownload.get.desc.xml", "review-supervisorv2.get.desc.xml", "review-supervisorv2.get.js", "review-supervisorv2.get.html.ftl", "fgsrssgLanding.get.js", "review-comm01v2.get.desc.xml", "fgsrssgLanding.get.html.ftl", "review-comm01v2.get.html.ftl", "review-comm02v2.get.desc.xml", "review-comm02v2.get.html.ftl", "fgsrssgLanding.get.desc.xml", "review-studentv2.get.html.ftl", "review-comm03v2.get.html.ftl", "review-comm03v2.get.desc.xml", "review-studentv2.get.desc.xml", "review-cosupervisorv2.get.html.ftl", "review-comm02v2.get.js", "review-startv2.get.desc.xml", "review-studentv2.get.js", "review-cosupervisorv2.get.js", "review-startv2.get.js", "review-student-revisionv2.get.html.ftl", "review-student-revisionv2.get.desc.xml", "review-startv2.get.html.ftl", "review-comm03v2.get.js", "review-cosupervisorv2.get.desc.xml", "review-student-revisionv2.get.js", "review-comm01v2.get.js", "review-comm02.get.desc.xml", "review-comm02.get.html.ftl", "review-comm03.get.desc.xml", "review-comm02.get.js", "review-comm03.get.html.ftl", "review-cosupervisor.get.desc.xml", "review-cosupervisor.get.html.ftl", "review-cosupervisor.get.js", "review-nextdate.get.desc.xml", "review-comm03.get.js", "review-nextdate.get.js", "review-student.get.html.ftl", "review-student.get.js", "review-student-revision.get.desc.xml", "review-student.get.desc.xml", "review-student-revision.get.js", "review-studentTest.get.desc.xml", "review-supervisor.get.desc.xml", "review-studentTest.get.js", "review-supervisor.get.html.ftl", "review-supervisor.get.js", "review-comm01.get.desc.xml", "review-comm01.get.html.ftl", "review-comm01.get.js", "review-student-revision.get.html.ftl", "review-nextdate.get.html.ftl", "review-studentTest.get.html.ftl", "guidelines-supervisor.get.desc.xml", "guidelines-supervisor-revision.get.html.ftl", "guidelines-start.get.desc.xml", "guidelines-start.get.html.ftl", "guidelines-start.get.js", "guidelines-student.get.desc.xml", "guidelines-student.get.html.ftl", "guidelines-student-revision.get.js", "guidelines-student-revision.get.desc.xml", "guidelines-supervisor.get.html.ftl", "guidelines-supervisor-revision.get.desc.xml", "guidelines-student-revision.get.html.ftl", "guidelines-student.get.js", "guidelines-supervisor.get.js", "guidelines-supervisor-revision.get.js", "programExtensionScript.js", "customScript.js", "customCSS_FGSR2.css", "customCSS_FGSR.css", "fgsrEnv.js", "FGSR-Forms-Config.js", "config.js", "googleAddon.get.json.ftl", "googleAddon.get.desc.xml", "googleAddon.get.js", "gtaGraStatus.post.json.ftl", "gtaGraStatus.post.js", "gtaGraStatus.post.desc.xml", "wfh-manager.get.desc.xml", "wfh-form.get.js", "wfh-manager.get.html.ftl", "wfh-form.get.desc.xml", "wfh-revise.get.desc.xml", "wfh-revise.get.html.ftl", "wfh-revise.get.js", "wfh-seniormanager.get.desc.xml", "wfh-manager.get.js", "wfh-seniormanager.get.js", "wfh-seniormanager.get.html.ftl", "wfh-form.get.html.ftl", "hrsbsDocumentLinking.get.desc.xml", "hrsbsDocumentLinking.get.html.ftl", "hrsbsDocumentLinking.get.js", "coi-start.get.desc.xml", "coi-start.get.html.ftl", "coi-revise.get.html.ftl", "coi-employee.get.html.ftl", "coi-employee.get.desc.xml", "coi-revise.get.desc.xml", "coi-start.get.js", "coi-revise.get.js", "coi-supervisor.get.js", "coi-supervisor.get.desc.xml", "coi-employee.get.js", "coi-supervisor.get.html.ftl", "getTaskFilter.get.json.ftl", "queryTasks.get.json.ftl", "routableGroups.get.desc.xml", "routableGroups.get.js", "routableGroups.get.json.ftl", "queryTasks.get.desc.xml", "setTaskFilter.post.js", "setTaskFilter.post.json.ftl", "setTaskFilter.post.desc.xml", "applyTaskAction.post.js", "applyTaskAction.post.json.ftl", "applyTaskAction.post.desc.xml", "getTaskFilter.get.desc.xml", "getTaskFilter.get.js", "queryTasks.get.js", "avmbrowse.get.desc.xml", "avmbrowse.get.html.ftl", "avmbrowse.get.js", "avmstores.get.desc.xml", "avmstores.get.html.ftl", "blogsearch.get.atom.400.ftl", "blogsearch.get.html.400.ftl", "blogsearch.get.desc.xml", "blogsearch.get.js", "categorysearch.get.atom.404.ftl", "blogsearch.get.html.ftl", "categorysearch.get.html.404.ftl", "categorysearch.get.js", "categorysearch.get.html.ftl", "categorysearch.get.desc.xml", "folder.get.desc.xml", "folder.get.html.ftl", "folder.get.js", "psDeptAll.get.js", "psDeptSingle.get.json.ftl", "psDeptSingle.get.js", "psPerson.get.json.ftl", "psUtil.js", "psPerson.get.js", "psAcademicDeptAll.get.desc.xml", "psAcademicDeptAll.get.json.ftl", "psAuthorizedApprover.get.desc.xml", "psDeptAll.get.json.ftl", "psAuthorizedApprover.get.js", "psAuthorizedApprover.get.json.ftl", "psDeptAll.get.desc.xml", "psDeptSingle.get.desc.xml", "psPerson.get.desc.xml", "ceeb.get.desc.xml", "ceeb.get.json.ftl", "getSlateId.get.desc.xml", "getSlateId.get.js", "materials.get.json.ftl", "materials.get.desc.xml", "getSlateId.get.json.ftl", "ceeb.get.js", "materials.get.js", "edit.get.html.ftl", "edit.get.js", "save.post.js", "save.post.json.ftl", "scans.get.desc.xml", "scans.get.js", "uploadfile.post.desc.xml", "uploadfile.post.json.ftl", "edit.get.desc.xml", "uploadfile.post.js", "scans.get.html.ftl", "save.post.desc.xml", "AFA_Main.post.desc.xml", "AFA_MainFileOnly.post.desc.xml", "AFA_MainFileOnly.post.js", "AFA_Main.post.js", "AFA_MainFileOnly.post.json.ftl", "AFA_Main.post.json.ftl", "paperFileUtil.get.desc.xml", "paperFileUtil.get.js", "paperFileUtil.get.html.ftl", "rsoprojectdetails.get.html.ftl", "rsoprojectdetails.get.js", "rsoprojectdetails.get.desc.xml", "roslateapplist.get.html.ftl", "roslateapplist.get.desc.xml", "roslateapplist.get.json.ftl", "roslateexists.get.html.ftl", "roslateexists.get.desc.xml", "roslateapplist.get.js", "roslateexists.get.js", "uofaDepartmentList.get.desc.xml", "uofaDepartmentList.get.js", "uofaDepartmentList.get.html.ftl", "uofaDepartmentName.get.desc.xml", "uofaDepartmentName.get.html.ftl", "uofaFacultyList.get.html.ftl", "uofaFacultyList.get.desc.xml", "uofaDepartmentName.get.js", "uofapersonid.get.desc.xml", "uofapersonidrest.get.html.ftl", "uofapersonidrest.get.desc.xml", "uofapersonid.get.html.ftl", "uofapersonid.get.js", "uofapersonidrest.get.js", "uappolCategoryHeirarchy.get.desc.xml", "uappolCategoryHeirarchy.get.json.ftl", "uappol-metadata-query.get.desc.xml", "uappol-metadata-query.get.js", "uappol-metadata-query.get.json.ftl", "uappolCategoryHeirarchy.get.js", "siteFileViewer.get.desc.xml", "siteFileViewerConfig.js", "siteFileViewer.get.html.ftl", "siteFileViewer.get.js", "publicSiteFileViewer.get.html.ftl", "publicSiteFileViewer.get.desc.xml", "publicSiteFileViewer.get.js", "cronJob.post.desc.xml", "cronJob.post.js", "cronJob.post.json.ftl", "studentupload.get.html.ftl", "generatereport.get.json.ftl", "generatereport.get.desc.xml", "approvethesis.post.js", "generatereport.get.js", "search-match-attach.get.js", "search-match-list.get.html.ftl", "search-match-result.get.html.ftl", "search-match-result.get.js", "search-match-list.get.js.old", "chs-agreements.get.js", "chs-agreements.get.html.ftl", "chs-upload.get.html.ftl", "chs-upload.get.js", "uamytasks.config.get.js", "chsStudentView.get.js", "chsStudentView.get.html.ftl", "foModel.xml", "uofaDocTypes.xml", "uofaDocTypes.json", "foModel.json", "tim-sops", "FandO", "cbsr", "nanofab", "support-documentation", "Alfresco.zip - 1bf054bded99e2ae414154593d0892066b2e0c7add603f9321e157c77ae52075", "https://www.virustotal.com/graph/embed/g05f1796a358b458d95751d31d1d529aa378f8ffadf0b4305b7fa0bd1c64fe228?theme=dark", "https://www.virustotal.com/gui/collection/63819e07111e9665ba8602777d782527c54f3fad71ef36f977405a004484787c/iocs", "https://viz.greynoise.io/analysis/0cd9177e-8328-4355-a2c0-d05704a64c72", "components.zip - 2b91fcf852a5f1f57be71a269d82497b37c9f544ebd8f32aaa240e4cde0ffeea", "https://www.virustotal.com/graph/embed/g2948a5c332eb4614973872a8243215f6aa1fba79749a48ea92806e9b934db91f?theme=dark", "https://viz.greynoise.io/ip/analysis/2610b635-c05a-4f28-a112-7278de8fdf9b" ], "public": 1, "adversary": "TA413 proposed (06.08.24), Callisto, APT38, APT 28/29 - too much time too many problems", "targeted_countries": [ "Canada", "United States of America" ], "malware_families": [], "attack_ids": [], "industries": [ "Education", "Government", "Healthcare", "Technology", "Telecommunications" ], "TLP": "white", "cloned_from": null, "export_count": 57, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 4, "follower_count": 0, "vote": 0, "author": { "username": "Disable_Duck", "id": "244325", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_244325/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 7132, "hostname": 3118, "URL": 4909, "email": 20, "FileHash-SHA256": 2144, "FileHash-MD5": 29, "FileHash-SHA1": 29 }, "indicator_count": 17381, "is_author": false, "is_subscribing": null, "subscriber_count": 131, "modified_text": "232 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "67f5555b6ce863d998e83e26", "name": "macOS Threat Infrastructure Leveraging Remote Agents via remotewd.com and rtmsprod.net", "description": "This pulse identifies an actively observed macOS-focused remote access infrastructure abusing trusted native Apple agents (ARDAgent.app, SSMenuAgent.app) and communicating with a distributed network of C2-like endpoints under domains such as remotewd.com, idsremoteurlconnectionagent.app, and rtmsprod.net.\n\nThe infrastructure is composed of dynamically generated subdomains \u2014 many in the form of device-.remotewd.com \u2014 indicative of automated deployment, system tracking, or per-host remote access configurations.\n\nAdditional indicators include HTTP/S URLs pointing directly to embedded binary paths within macOS agents, suggesting possible delivery vectors, staging, or persistence techniques.\n\nThis campaign shows signs of structured, programmatic targeting and is highly likely to be pre-operational infrastructure for wide-scale surveillance or access operations. All listed indicators should be considered high-risk. If observed in your environment, initiate a full forensic and IR process immediately.", "modified": "2025-05-11T19:03:59.885000", "created": "2025-04-08T16:56:59.641000", "tags": [ "generated from", "do not", "edit uri", "urls", "edit", "rewriteengine", "rewritecond", "rewriterule", "r301", "xml2encalias", "beralloct", "berbvarrayadd", "berbvarrayfree", "berbvdup", "berbvecadd", "berbvecfree", "berbvfree", "berdump", "berdup", "berdupbv", "laerrordomain", "laerrornoncekey", "lamechanismtree", "lacontext", "ladomainstate", "laenvironment", "lanotification", "laprivatekey", "lapublickey", "laright", "apple swift", "o librarylevel", "combine import", "foundation", "swift import", "mcpeerid", "mcsession", "property", "copyright", "protocol", "class", "bonjour", "ascii lowercase", "abc company", "section", "bonjour txt", "note", "ui element", "utf8 encoding", "nscopying", "nsdictionary", "nsstring", "mcextern", "attribute", "mcextern extern", "mcexternweak", "nsenum", "nsinteger", "mcerrorcode", "mcerrorunknown", "mcerrortimedout", "peer", "example", "bonjour apis", "stop", "tags", "session", "nsprogress", "nserror", "nsurl", "nsarray", "create", "nsuinteger", "notifies", "mcsession api", "interface", "dbictrace", "dbivporth", "dbictracelevel", "dbdtffoo", "dbihseterrchar", "dbicstate", "dbictraceflags", "provides macros", "dbi release", "only", "sqlsuccess", "odbc", "sqlok", "tim bunce", "england", "sql cli", "sql datatype", "sqlguid", "sqlwlongvarchar", "main", "beware", "sv sth", "sv dbh", "impsth", "impdbh", "sv keysv", "sv params", "sv attr", "sv attribs", "sv drh", "void", "fri jul", "mixed", "dbixsrevision", "plsvundef", "license", "spagain", "perlioprintf", "dbiclogpio", "putback", "ireland", "gnu general", "super", "magic", "dbicflags", "dbis", "svrv", "null", "imp2com", "dbicactivekids", "dbicfiadestroy", "sv h", "dbicdbistate", "code", "copy", "refer", "trace", "error", "unknown", "hookopcheckh", "startexternc", "hookopcheckcb", "userdata", "endexternc", "isinternalbuild", "kickmcxdforuid", "loadappkit", "ardconfig", "authenticator", "dsauthenticator", "dsnode", "dsrecord", "group", "hostconfig", "apfsvolumelock", "apfsvolumerole", "aoskgetosinfo", "aoskgetuserinfo", "aosaddappleid", "aosdisablepcs", "aosenablepcs", "aoslog", "aoslogforce", "aosrelaycookie", "didfailcallback", "kaosaccountkey", "kapcsbundle", "kapcspath", "kjsonextension", "apcsbucketid", "apcsreports", "apconfiguration", "apversiondata", "apversionhelper", "systemvolumesvm", "name size", "identifier", "gb disk0s3", "devdisk3", "apfs container", "scheme", "physical store", "macintosh hd", "apfs snapshot", "preboot", "refs address", "size wired", "name", "version", "uuid", "linked against", "renderer", "helper", "chrome helper", "contains", "cloud ui", "macintosh", "khtml", "gecko", "ui helper", "plugin", "service", "good", "battery power", "apfs encryption", "jumpcloud go", "chrome web", "store", "privacy badger", "flowcrypt", "encrypt gmail", "simple", "google", "b2b phone", "number", "apollo", "future", "exccrash", "sigkill", "code signature", "invalid", "sigabrt", "protonvpn", "excguard", "excbreakpoint", "sigtrap", "excbadaccess", "appl", "english", "adobe crash", "adobe", "acrobat dcadobe", "processor", "uninstaller", "assistant", "install", "cloud", "dock", "calendar", "music", "terminal", "tips", "installer", "updater", "proton", "tools", "stub", "python", "clock", "powershell", "team", "rave scout", "cookies", "public folder", "key cert", "sign", "crl sign", "root ca", "authority", "public primary", "global root", "verisign", "academic", "premium", "adaptive", "interactive", "background", "standard", "launchd sandbox", "s mdworker", "agent", "command line", "progress", "yubico", "macos13action", "disableoverride", "disableairdrop", "denyactivation", "enable", "loginwindowtext", "jumpcloud", "autoupdate", "loggingoption", "enablefirewall", "arm64e", "apple m2", "mac142", "kjqqtw7pqt", "daemon", "server", "open directory", "user", "account", "kerberos admin", "kerberos change", "device daemon", "network", "desktop", "screensaver", "bridge", "aesxtsarm", "aesecbarm", "sha512vngarmhw", "sha384vngarmhw", "sha256vngarm", "sha1vngarm", "darwin kernel", "wed mar", "wkarraycreate", "wkbooleancreate", "wkcontextcreate", "wkdatacreate", "wkdatagettypeid", "wkdoublecreate", "wkframecopyurl", "wkgettypeid", "wkimagecreate", "wkpagecandelete", "webview", "notice", "this software", "including", "but not", "limited to", "redistribution", "is provided", "by apple", "direct", "damage", "apiavailable", "webkit", "nsswiftname", "document", "a block", "as is", "hasinclude", "wkdownload", "abstract", "wkerrorcode", "wkerrorunknown", "discussion", "bool", "whether", "wkcontentworld", "wkwebview", "javascript", "nsunavailable", "vaargs", "nsswiftasync", "wkswiftasync", "wkcookiepolicy", "wkswiftuiactor", "nshttpcookie", "targetosiphone", "wknavigation", "decides", "boolean value", "apideprecated", "methodkind", "wkerrordomain", "wkscriptmessage", "promise", "fulfill", "const", "url scheme", "mark", "wkuserscript", "targetosvision", "param", "wkframeinfo", "targetosios", "pass", "window", "mime type", "link", "nsimage", "returns", "nsset", "checks", "matches", "a boolean", "defaults", "wkwebextension", "cgsize", "uiimage", "apis", "nsdate", "wkcontentmode", "wkextern", "possible", "cgfloat", "media", "cgrect", "apiunavailable", "framework", "nsswiftuiactor", "targetoswatch", "confirms", "apple upgrade", "nsstring user", "nsobject", "provider", "apple", "password", "uicontrol", "nscontrol", "asuseragerange", "check", "opaque user", "apple id", "initiate", "asauthorization", "operation", "state", "nserrorenum", "nsdata", "relying party", "asapiavailable", "perform", "realm", "http response", "authorization", "http", "oauth", "saml", "a byte", "nsdata userid", "relying", "a string", "nsdata readdata", "bool didwrite", "a cose", "nsdata first", "nsdata second", "nsstring name", "bool appid", "targetosxr", "nsstring appid", "bluetooth", "mdm profile", "nsurl url", "returns yes", "a state", "a json", "web token", "private seckeys", "enables", "keychain", "asswiftsendable", "cose algorithm", "ecdsa", "sha256", "cose curve", "p256", "nullable", "bool success", "remove", "call", "complete", "initializes", "time code", "extensions", "asextern extern", "asextern", "nsswiftsendable", "prepare", "list", "nsextension", "attempt", "nsstring label", "creates", "nsstring code", "a key", "webauthn", "nssecurecoding", "input", "output", "initialize", "nsinteger rank", "json", "inputs", "hash", "nsstring origin", "settings app", "extension", "https urls", "safari", "cancel", "nsuuid uuid", "r uftpexu", "nsmutabledata", "vnsdate", "mprcjy", "postfix", "domain", "canonical", "tables", "ldap", "post", "replace user", "address", "wietse venema", "bugs", "mail", "aliases", "postfix version", "restrict", "sample", "person", "basic system", "general", "reject empty", "postfix smtp", "ipv6 host", "reject", "reply", "access", "prior", "hold", "info", "mail delivery", "charset", "system", "report", "postfix dsn", "mail returned", "this", "generic", "smtp", "isp mail", "mime", "headerchecks", "readme files", "filters while", "posix", "empty", "body", "write", "date", "smtp server", "specify", "mx host", "unix password", "user unknown", "pathbin", "postfix queue", "unix", "cyrus", "path", "uucp", "shell", "local", "program", "agreement", "contributor", "recipient", "contribution", "the program", "corporation", "contributors", "product x", "as expressly", "arch", "arch x8664", "pipe wall", "wimplicit", "ranlib", "warn", "switch", "start", "systype", "outlook", "postfix master", "begin", "server admin", "mail backend", "modern smtp", "iana", "many", "postfix pipe", "recent cyrus", "amos gouaux", "old example", "or even", "lutz jaenicke", "technology", "cottbus", "germany", "openssl package", "openssl project", "europe", "remember that", "use of", "file", "update", "usrsbin", "file format", "no group", "daemondirectory", "deliver mail", "transport", "description", "result format", "virtual", "virtual alias", "redirect mail", "relocated", "matches user", "synopsis", "lastname", "firstname", "apple computer", "tcpip", "supported", "quantum", "facility", "level", "level info", "broadcast", "ignore", "rules", "sender", "automounter map", "use directory", "get home", "home autohome", "true", "t option", "mount", "force", "environment", "automountdenv", "promptcommand", "shellsessiondir", "histfile", "histfilesize", "myvar", "histtimeformat", "arrange", "bashrematch", "tell", "ps1h", "make bash", "s checkwinsize", "etcbashrc", "termprogram", "inpck", "nnnbaud", "berkeley", "parity", "pc entry", "pass8", "parenb istrip", "fixed speed", "entry", "clocal mode", "maxhistsize", "promptmode", "verbose end", "etcirbrcloaded", "default", "setup", "history file", "kernel", "readline", "jabber", "group database", "dovecot", "postfix scsd", "networkd", "searchpaths", "freebsd", "tmpdir", "fcodes", "prunepaths", "vartmp", "prunedirs", "filesystems", "nroff", "manpath", "uncomment", "manpager", "whatispager", "manlocale", "every", "manpath optman", "maybe", "troff", "status mailfrom", "returnpath via", "pidfile", "flags", "bcgjnuwz", "bin usrsbin", "sbin", "default pf", "care", "audio", "user database", "unix copy", "gate daemon", "bashno", "r etcbashrc", "rfc1323", "m1460", "macos x", "signature", "linux", "opera", "xp sp1", "windows sp1", "nmap syn", "m265", "synack", "mind", "macos", "warp", "ipv6", "internet", "icmp", "cisco", "monitoring", "argus", "chaos", "rsvp", "encapsulation", "aris", "isis", "netbootmount", "netbootshadow", "computername", "localonly", "localnetbootdir", "netboot", "define", "purpose", "networkonly", "waiting", "networkup", "term", "devnull", "common setup", "configure", "set command", "dns hostname", "dns query", "see also", "kame", "sunnet manager", "rpcsrc", "netlicense", "ftpd", "bindash binksh", "binsh bintcsh", "jumpcloud ldap", "smb2", "security", "workgroup", "standalone", "samba server", "enforce", "smb3", "example share", "improper use", "ctrlc", "none", "fax reception", "hardwired", "0007", "must", "visudo", "blocksize", "charset lang", "language lcall", "lines columns", "lscolors", "sshauthsock", "orion", "setup user", "home", "zdotdir", "delete", "beep", "vendor", "kf10", "kf11", "kf12", "kf13", "backspace", "insert", "resume", "termsessionid", "savehist", "sharehistory", "h do", "volume", "de l", "l uuid", "m tra", "n est", "suuid", "prfen", "fusion", "syst", "look", "executant", "alla", "over", "test", "overie", "zapis", "rapid", "disco usa", "de macos", "nie s", "i denne", "adgjmpsvx", "diskgthis disk", "01k8x j", "34disk", "levy kytt", "dict", "array", "plist", "apple root", "code signing", "inode64r", "xofkoxzh", "integer", "doctype", "brain", "abcd", "ogwo", "boaw", "cobwa", "uhawavauatsh", "ip bitmap", "foewdc", "could", "ip block", "funcs", "cogwo", "trash", "double", "hunt", "affa", "carr", "crypto", "docwbac", "q1b0", "q1 0", "h h5", "docwbag", "slice", "format", "zero", "alfa", "hera", "lelei", "hehe", "hisp", "fail", "katy", "zakk", "eodwcbgao", "hhk8di", "alma", "topo", "open", "huhk", "piper", "hehx", "eh ui", "h20hph", "hif h", "hmhhihqhyla hq", "r11b0", "target", "uus10u", "hifh", "loghookfailed", "loghook", "hell", "q1b 0", "f duh", "aqw1", "1160" ], "references": [ "index.html.en", "bind.html", "caching.html", "BUILDING", "configuring.html", "content-negotiation.html", "custom-error.html", "convenience.map", "LDAP.tbd", "lber.h", "ldap.h", "LocalAuthentication.tbd", "arm64e-apple-macos.swiftinterface", "x86_64-apple-ios-macabi.swiftinterface", "arm64e-apple-ios-macabi.swiftinterface", "x86_64-apple-macos.swiftinterface", "MultipeerConnectivity.tbd", "module.modulemap", "MCNearbyServiceAdvertiser.h", "MCPeerID.h", "MCError.h", "MCNearbyServiceBrowser.h", "MCAdvertiserAssistant.h", "MultipeerConnectivity.apinotes", "MultipeerConnectivity.h", "MCSession.h", "MCBrowserViewController.h", "dbivport.h", "dbi_sql.h", "dbd_xsh.h", "dbixs_rev.h", "Driver_xst.h", "DBIXS.h", "hook_op_check.h", "Admin.tbd", "AirPlayReceiver.tbd", "apfs_boot_mount.tbd", "AOSKit.tbd", "APConfigurationSystem.tbd", "AppleFirmwareUpdate.tbd", "launchdaemons.txt", "preboot_archive_errors.log", "mounts.txt", "launchagents.txt", "disk_structure.txt", "user_launchagents.txt", "security_status.txt", "kexts.txt", "process_list.txt", "battery.csv", "diskEncryption.csv", "chromeExtensions.csv", "crashes.csv", "interfaceAddrs.csv", "kernel.csv", "interfaceDetails.csv", "etcHosts.csv", "applications.csv", "mounts.csv", "sharedFolders.csv", "certificates.csv", "sharingPreferences.csv", "launchD.csv", "usbDevices.csv", "managedPolicies.csv", "systemInfo.csv", "users.csv", "sipConfig.csv", "systemControls.csv", "canonical", "aliases", "custom_header_checks", "access", "bounce.cf.default", "generic", "header_checks", "main.cf.default", "LICENSE", "makedefs.out", "main.cf", "master.cf.default", "main.cf.proto", "master.cf.proto", "master.cf", "TLS_LICENSE", "postfix-files", "transport", "virtual", "relocated", "afpovertcp.cfg", "asl.conf", "auto_home", "auto_master", "autofs.conf", "bashrc_Apple_Terminal", "com.apple.screensharing.agent.launchd", "bashrc", "command_args.json", "csh.cshrc", "csh.login", "find.codes", "csh.logout", "ftpusers", "gettytab", "irbrc", "kern_loader.conf", "group", "locate.rc", "man.conf", "mail.rc", "manpaths", "networks", "nfs.conf", "newsyslog.conf", "ntp_opendirectory.conf", "ntp.conf", "notify.conf", "paths", "pf.conf", "passwd", "profile", "pf.os", "protocols", "rc.netboot", "rc.common", "rmtab", "resolv.conf", "rtadvd.conf", "rpc", "shells", "smb.conf", "sudo_lecture", "ttys", "syslog.conf", "xtab", "sudoers", "zprofile", "zshrc", "zshrc_Apple_Terminal", "CodeResources", "version.plist", "Info.plist" ], "public": 1, "adversary": "DragonForce Malaysia Hacker Group", "targeted_countries": [], "malware_families": [ { "id": "Lastname", "display_name": "Lastname", "target": null }, { "id": "Firstname", "display_name": "Firstname", "target": null } ], "attack_ids": [ { "id": "T1040", "name": "Network Sniffing", "display_name": "T1040 - Network Sniffing" }, { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" }, { "id": "T1056", "name": "Input Capture", "display_name": "T1056 - Input Capture" }, { "id": "T1090", "name": "Proxy", "display_name": "T1090 - Proxy" }, { "id": "T1547", "name": "Boot or Logon Autostart Execution", "display_name": "T1547 - Boot or Logon Autostart Execution" }, { "id": "T1106", "name": "Native API", "display_name": "T1106 - Native API" }, { "id": "T1176", "name": "Browser Extensions", "display_name": "T1176 - Browser Extensions" }, { "id": "T1574", "name": "Hijack Execution Flow", "display_name": "T1574 - Hijack Execution Flow" }, { "id": "T1140", "name": "Deobfuscate/Decode Files or Information", "display_name": "T1140 - Deobfuscate/Decode Files or Information" }, { "id": "T1071", "name": "Application Layer Protocol", "display_name": "T1071 - Application Layer Protocol" }, { "id": "T1566", "name": "Phishing", "display_name": "T1566 - Phishing" }, { "id": "T1059", "name": "Command and Scripting Interpreter", "display_name": "T1059 - Command and Scripting Interpreter" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 66, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "ilyailya", "id": "298851", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 4449, "domain": 3847, "URL": 14263, "FileHash-SHA256": 2356, "FileHash-MD5": 223, "FileHash-SHA1": 523, "email": 223, "CVE": 40, "CIDR": 12, "SSLCertFingerprint": 302 }, "indicator_count": 26238, "is_author": false, "is_subscribing": null, "subscriber_count": 37, "modified_text": "384 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "663d2869e0f3a42bbddc42ff", "name": "UPX executable packer.", "description": "A new rule has been introduced a \"suspicious\" ELF binary that is packed with the UPX executable packer.\nSuggested ATT&CK IDs: rule SUSP_ELF_LNX_UPX_Compressed_File { meta: description = \"Detects a suspicious ELF binary with UPX compression\" author = \"Florian Roth (Nextron Systems)\" reference = \"Internal Research\" date = \"2018-12-12\" score = 40 hash1 = \"038ff8b2fef16f8ee9d70e6c219c5f380afe1a21761791e8cbda21fa4d09fdb4\" id = \"078937de-59b3-538e-a5c3-57f4e6050212\" strings: $s1 = \"PROT_EXEC|PROT_WRITE failed.\" fullword ascii $s2 = \"$Id: UPX\" fullword ascii $s3 = \"$Info: This file is packed with the UPX executable packer\" ascii $fp1 = \"check your UCL installation !\"", "modified": "2024-10-14T00:01:17.069000", "created": "2024-05-09T19:47:53.786000", "tags": [ "cioch adrian", "centrum usug", "sieciowych", "elf binary", "upx compression", "roth", "nextron", "info", "javascript", "html", "office open", "xml document", "network capture", "win32 exe", "xml pakietu", "pdf zestawy", "przechwytywanie", "office", "filehashsha1", "url https", "cve cve20201070", "cve cve20203153", "cve cve20201048", "cve cve20211732", "cve20201048 apr", "filehashmd5", "cve cve20010901", "cve cve20021841", "cve20153202 apr", "cve cve20160728", "cve cve20161807", "cve cve20175123", "cve20185407 apr", "cve cve20054605", "cve cve20060745", "cve cve20070452", "cve cve20070453", "cve cve20070454", "cve cve20071355", "cve cve20071358", "cve cve20071871", "cve20149614 apr", "cve cve20151503", "cve cve20152080", "cve cve20157377", "cve cve20170131", "cve20200796 may", "cve cve20113403" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [ { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 6861, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Arek-BTC", "id": "212764", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_212764/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 5771, "domain": 3139, "URL": 14525, "FileHash-SHA1": 2610, "IPv4": 108, "CIDR": 40, "FileHash-SHA256": 10705, "FileHash-MD5": 3373, "YARA": 2, "CVE": 148, "Mutex": 7, "FilePath": 3, "SSLCertFingerprint": 3, "email": 23, "JA3": 1, "IPv6": 2 }, "indicator_count": 40460, "is_author": false, "is_subscribing": null, "subscriber_count": 138, "modified_text": "594 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65708ef0cdb40fa0e7d239ca", "name": "either emotet or a part of it", "description": "", "modified": "2023-12-06T15:10:40.867000", "created": "2023-12-06T15:10:40.867000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 342, "hostname": 456, "domain": 349, "URL": 1730, "FileHash-MD5": 1, "FileHash-SHA1": 1 }, "indicator_count": 2879, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "906 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "v.name", "type": "Domain" }, "abuseipdb": null, "urlhaus": { "indicator": "v.name", "found": false, "verdict": "clean", "urls": [], "error": null }, "from_cache": true, "_cached_at": 1780214984.339956 }