| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.issurroundedbyidiots .net domain |
rev 1 |
2026-03-23 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.issurroundedbyidiots .net domain |
rev 1 |
2026-03-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.issurroundedbyidiots .net domain |
rev 1 |
2026-03-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.geocen .org domain |
rev 1 |
2026-03-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.geocen .org domain |
rev 1 |
2026-03-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.vsltech .net domain |
rev 1 |
2026-03-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.vsltech .net domain |
rev 1 |
2026-03-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.issurroundedbyidiots .net domain |
rev 1 |
2026-03-23 |
| sigma |
Csc.EXE Execution Form Potentially Suspicious Parent |
test |
2026-03-23 |
| sigma |
Uncommon Svchost Command Line Parameter |
experimental |
2026-03-23 |
| sigma |
Dynamic .NET Compilation Via Csc.EXE |
test |
2026-03-23 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.nigelross .com domain |
rev 1 |
2026-03-21 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.nigelross .com domain |
rev 1 |
2026-03-21 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.nigelross .com domain |
rev 1 |
2026-03-21 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.nigelross .com domain |
rev 1 |
2026-03-21 |
| sigma |
Potential Defense Evasion Via Right-to-Left Override |
test |
2026-03-20 |
| sigma |
Potential File Extension Spoofing Using Right-to-Left Override |
test |
2026-03-20 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.casepractice .com domain |
rev 1 |
2026-03-19 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.anthonythompson .net domain |
rev 1 |
2026-03-19 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.casepractice .com domain |
rev 1 |
2026-03-19 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.sotna .org domain |
rev 1 |
2026-03-19 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.sotna .org domain |
rev 1 |
2026-03-19 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.anthonythompson .net domain |
rev 1 |
2026-03-19 |
| snort |
ET TROJAN UNK_MonkeyWrench Payload Retrieval attempt |
rev 1 |
2026-03-19 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.s4r4 .com domain |
rev 1 |
2026-03-19 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.s4r4 .com domain |
rev 1 |
2026-03-19 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.s4r4 .com domain |
rev 1 |
2026-03-19 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.casepractice .com domain |
rev 1 |
2026-03-19 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.s4r4 .com domain |
rev 1 |
2026-03-19 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.anthonythompson .net domain |
rev 1 |
2026-03-19 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.anthonythompson .net domain |
rev 1 |
2026-03-19 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.casepractice .com domain |
rev 1 |
2026-03-19 |
| suricata |
ET MALWARE UNK_MonkeyWrench Payload Retrieval attempt |
rev 1 |
2026-03-19 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.sotna .org domain |
rev 1 |
2026-03-19 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.sotna .org domain |
rev 1 |
2026-03-19 |
| snort |
ET INFO 302 Redirect to Microsoft Edge Browser |
rev 1 |
2026-03-18 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.ovie .gob .mx domain |
rev 1 |
2026-03-18 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.ovie .gob .mx domain |
rev 1 |
2026-03-18 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.ovie .gob .mx domain |
rev 1 |
2026-03-18 |
| suricata |
ET HUNTING 302 Redirect to Microsoft Edge Browser |
rev 1 |
2026-03-18 |