| suricata |
ET WEB_SPECIFIC_APPS Jenkins Chained Exploits CVE-2018-1000861 and CVE-2019-1003000 M3 |
rev 2 |
2025-04-11 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.aspdebugger .com domain |
rev 1 |
2025-04-11 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.aspdebugger .com domain |
rev 1 |
2025-04-11 |
| suricata |
ET EXPLOIT Belkin N750 Buffer Overflow Attempt |
rev 6 |
2025-04-11 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.raresupply .com domain |
rev 1 |
2025-04-10 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.raresupply .com domain |
rev 1 |
2025-04-10 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.raresupply .com domain |
rev 1 |
2025-04-10 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.raresupply .com domain |
rev 1 |
2025-04-10 |
| sigma |
Suspicious CrushFTP Child Process |
experimental |
2025-04-10 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.berubnet .com domain |
rev 1 |
2025-04-09 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.alabasgames .com domain |
rev 1 |
2025-04-09 |
| snort |
ET EXPLOIT LastPass RCE Attempt |
rev 2 |
2025-04-09 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.alabasgames .com domain |
rev 1 |
2025-04-09 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.berubnet .com domain |
rev 1 |
2025-04-09 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.alabasgames .com domain |
rev 1 |
2025-04-09 |
| suricata |
ET EXPLOIT LastPass RCE Attempt |
rev 5 |
2025-04-09 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.berubnet .com domain |
rev 1 |
2025-04-09 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.alabasgames .com domain |
rev 1 |
2025-04-09 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.berubnet .com domain |
rev 1 |
2025-04-09 |
| sigma |
Security Event Logging Disabled via MiniNt Registry Key - Process |
experimental |
2025-04-09 |
| sigma |
Security Event Logging Disabled via MiniNt Registry Key - Registry Set |
experimental |
2025-04-09 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.nettekks .com domain |
rev 1 |
2025-04-08 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.quality-electronics .com domain |
rev 1 |
2025-04-08 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.quality-electronics .com domain |
rev 1 |
2025-04-08 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.nettekks .com domain |
rev 1 |
2025-04-08 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.nettekks .com domain |
rev 1 |
2025-04-08 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.quality-electronics .com domain |
rev 1 |
2025-04-08 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.nettekks .com domain |
rev 1 |
2025-04-08 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.quality-electronics .com domain |
rev 1 |
2025-04-08 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.tyden .name domain |
rev 1 |
2025-04-07 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.tyden .name domain |
rev 1 |
2025-04-07 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.shakemanor .com domain |
rev 1 |
2025-04-07 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.lexgardner .com domain |
rev 1 |
2025-04-07 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.scmdatasolution .com domain |
rev 1 |
2025-04-07 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.lexgardner .com domain |
rev 1 |
2025-04-07 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.shakemanor .com domain |
rev 1 |
2025-04-07 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.scmdatasolution .com domain |
rev 1 |
2025-04-07 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.tyden .name domain |
rev 1 |
2025-04-07 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.scmdatasolution .com domain |
rev 1 |
2025-04-07 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.shakemanor .com domain |
rev 1 |
2025-04-07 |