| sigma |
PUA - TruffleHog Execution |
experimental |
2025-09-24 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.patriciarivera .cl domain |
rev 1 |
2025-09-23 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.cacdingles .com .br domain |
rev 1 |
2025-09-23 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.wandercoach .ch domain |
rev 1 |
2025-09-23 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.projektmetoden .dk domain |
rev 1 |
2025-09-23 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.sarojghimire .com .np domain |
rev 1 |
2025-09-23 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.redemanchete .com .br domain |
rev 1 |
2025-09-23 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.auszeiter .ch domain |
rev 1 |
2025-09-23 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.sarojghimire .com .np domain |
rev 1 |
2025-09-23 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.wandercoach .ch domain |
rev 1 |
2025-09-23 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.auszeitcoach .ch domain |
rev 1 |
2025-09-23 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.auszeiter .ch domain |
rev 1 |
2025-09-23 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.redemanchete .com .br domain |
rev 1 |
2025-09-23 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.projektmetoden .dk domain |
rev 1 |
2025-09-23 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.lucashouse .info domain |
rev 1 |
2025-09-23 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.patriciarivera .cl domain |
rev 1 |
2025-09-23 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.ptgrowthasia .com domain |
rev 1 |
2025-09-23 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.cacdingles .com .br domain |
rev 1 |
2025-09-23 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.auszeitcoach .ch domain |
rev 1 |
2025-09-23 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.ptgrowthasia .com domain |
rev 1 |
2025-09-23 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.lucashouse .info domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.ptgrowthasia .com domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.auszeiter .ch domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.auszeiter .ch domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.sarojghimire .com .np domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.auszeitcoach .ch domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.ptgrowthasia .com domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.projektmetoden .dk domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.projektmetoden .dk domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.cacdingles .com .br domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.cacdingles .com .br domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.redemanchete .com .br domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.sarojghimire .com .np domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.wandercoach .ch domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.patriciarivera .cl domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.patriciarivera .cl domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.lucashouse .info domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.auszeitcoach .ch domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.lucashouse .info domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.wandercoach .ch domain |
rev 1 |
2025-09-23 |