| suricata |
ET PHISHING BankAustria Phishing Domain Nov 03 2017 |
rev 3 |
2020-08-24 |
| sigma |
Password Change on Directory Service Restore Mode (DSRM) Account |
stable |
2020-08-23 |
| snort |
ET INFO HTTP POST to .php on Appspot Hosting - Possible Phishing |
rev 2 |
2020-08-21 |
| snort |
ET CURRENT_EVENTS Microsoft Account Phishing Landing on Appspot Hosting |
rev 2 |
2020-08-21 |
| snort |
ET CURRENT_EVENTS Microsoft Account Phishing Landing on Appspot Hosting |
rev 2 |
2020-08-21 |
| snort |
ET CURRENT_EVENTS Outlook Web App Phishing Landing on Appspot Hosting |
rev 2 |
2020-08-21 |
| snort |
ET CURRENT_EVENTS OneDrive Phishing Landing on Appspot Hosting |
rev 2 |
2020-08-21 |
| snort |
ET CURRENT_EVENTS Linkedin Phishing Landing on Appspot Hosting |
rev 2 |
2020-08-21 |
| snort |
ET CURRENT_EVENTS Outlook Webapp Phishing Landing on Appspot Hosting |
rev 2 |
2020-08-21 |
| snort |
ET CURRENT_EVENTS Microsoft Account Phishing Landing on Appspot Hosting |
rev 2 |
2020-08-21 |
| suricata |
ET PHISHING OneDrive Phishing Landing on Appspot Hosting |
rev 2 |
2020-08-21 |
| suricata |
ET PHISHING Microsoft Account Phishing Landing on Appspot Hosting |
rev 2 |
2020-08-21 |
| suricata |
ET PHISHING Linkedin Phishing Landing on Appspot Hosting |
rev 2 |
2020-08-21 |
| suricata |
ET HUNTING HTTP POST to .php on Appspot Hosting - Possible Phishing |
rev 2 |
2020-08-21 |
| suricata |
ET PHISHING Outlook Web App Phishing Landing on Appspot Hosting |
rev 2 |
2020-08-21 |
| suricata |
ET PHISHING Outlook Webapp Phishing Landing on Appspot Hosting |
rev 2 |
2020-08-21 |
| suricata |
ET PHISHING Microsoft Account Phishing Landing on Appspot Hosting |
rev 2 |
2020-08-21 |
| suricata |
ET PHISHING Microsoft Account Phishing Landing on Appspot Hosting |
rev 2 |
2020-08-21 |
| suricata |
ET INFO check.torproject.org IP lookup/Tor Usage check over TLS with SNI |
rev 4 |
2020-08-20 |
| suricata |
ET INFO MOBILE Apple device leaking UDID from SpringBoard via GET |
rev 5 |
2020-08-20 |
| suricata |
ET CHAT Gadu-Gadu Chat Client Checkin via HTTP |
rev 10 |
2020-08-20 |
| suricata |
ET EXPLOIT Likely Struts S2-053-CVE-2017-12611 Exploit Attempt M1 |
rev 3 |
2020-08-20 |
| suricata |
ET WEB_SERVER /system32/ in Uri - Possible Protected Directory Access Attempt |
rev 7 |
2020-08-20 |
| suricata |
ET WEB_SERVER SELECT USER SQL Injection Attempt in URI |
rev 7 |
2020-08-20 |
| suricata |
ET WEB_SERVER Possible Attempt to Get SQL Server Version in URI using SELECT VERSION |
rev 6 |
2020-08-20 |
| suricata |
ET CHAT Gadu-Gadu IM Login Server Request |
rev 8 |
2020-08-20 |
| snort |
ET WEB_CLIENT Tech Support Scam Landing 2020-08-19 |
rev 2 |
2020-08-19 |
| snort |
ET TROJAN GORGON APT Download Activity M2 |
rev 2 |
2020-08-19 |
| suricata |
ET MALWARE APT40/Dadstache Related DNS Lookup |
rev 3 |
2020-08-19 |
| suricata |
ET MALWARE Shark Pass Stealer Email Report |
rev 4 |
2020-08-19 |
| suricata |
ET RPC DCERPC SVCCTL - Remote Service Control Manager Access |
rev 3 |
2020-08-19 |
| suricata |
ET MALWARE Metasploit Meterpreter core_channel_* Command Response |
rev 5 |
2020-08-19 |
| suricata |
ET MALWARE MalDoc Retrieving msiexec Commands via DNS TXT |
rev 3 |
2020-08-19 |
| suricata |
ET MALWARE APT40/Dadstache Related DNS Lookup |
rev 3 |
2020-08-19 |
| suricata |
ET MALWARE APT40/Dadstache Related DNS Lookup |
rev 3 |
2020-08-19 |
| suricata |
ET PHISHING Possible Phishing Landing Obfuscation 2016-03-17 |
rev 5 |
2020-08-19 |
| suricata |
ET MALWARE APT40/Dadstache Related DNS Lookup |
rev 3 |
2020-08-19 |
| suricata |
ET WEB_CLIENT SmailMax PHPMailer Accessed on External Server |
rev 2 |
2020-08-19 |
| suricata |
ET MALWARE DPRK HIDDEN COBRA Botnet C2 Host Beacon |
rev 3 |
2020-08-19 |
| suricata |
ET MALWARE Windows route Microsoft Windows DOS prompt command exit OUTBOUND |
rev 3 |
2020-08-19 |