| suricata |
ET MALWARE OSX/AppleJeus CitrineSleet Domain in TLS SNI |
rev 2 |
2024-11-26 |
| suricata |
ET INFO External IP Lookup - ipecho.net |
rev 8 |
2024-11-26 |
| suricata |
ET EXPLOIT Potential External VMware vRealize Automation Authentication Bypass Vulnerability |
rev 5 |
2024-11-26 |
| suricata |
ET INFO External IP Lookup getip.pw |
rev 5 |
2024-11-26 |
| suricata |
ET INFO External IP Lookup - free .ipwhois .io |
rev 4 |
2024-11-26 |
| suricata |
ET EXPLOIT WordPress Plugin video-synchro-pdf 1.7.4 - Local File Inclusion |
rev 2 |
2024-11-26 |
| suricata |
ET WEB_SPECIFIC_APPS Webmin Directory Traversal |
rev 7 |
2024-11-26 |
| suricata |
ET WEB_SERVER ASP.NET Forms Authentication Bypass |
rev 7 |
2024-11-26 |
| sigma |
Suspicious Process By Web Server Process |
test |
2024-11-26 |
| snort |
ET EXPLOIT Linksys E1500/E2500 Remote Command Execution 3 |
rev 1 |
2024-11-25 |
| suricata |
ET EXPLOIT Linksys E1500/E2500 Remote Command Execution 3 |
rev 1 |
2024-11-25 |
| snort |
ET RETIRED ZenRAT CnC OK Response |
rev 2 |
2024-11-24 |
| snort |
ET RETIRED ZenRAT Status Response |
rev 2 |
2024-11-24 |
| suricata |
ET RETIRED ZenRAT CnC OK Response |
rev 2 |
2024-11-24 |
| suricata |
ET RETIRED ZenRAT Status Response |
rev 2 |
2024-11-24 |
| sigma |
PUA - NPS Tunneling Tool Execution |
test |
2024-11-23 |
| sigma |
HackTool - HandleKatz LSASS Dumper Execution |
test |
2024-11-23 |
| sigma |
HackTool - GMER Rootkit Detector and Remover Execution |
test |
2024-11-23 |
| sigma |
HackTool - Impersonate Execution |
test |
2024-11-23 |
| sigma |
HackTool - PPID Spoofing SelectMyParent Tool Execution |
test |
2024-11-23 |
| sigma |
Hacktool Execution - Imphash |
test |
2024-11-23 |
| sigma |
Renamed PAExec Execution |
test |
2024-11-23 |
| sigma |
Potential Compromised 3CXDesktopApp Execution |
test |
2024-11-23 |
| sigma |
PUA - System Informer Execution |
test |
2024-11-23 |
| sigma |
Renamed NetSupport RAT Execution |
test |
2024-11-23 |
| sigma |
PUA - Process Hacker Execution |
test |
2024-11-23 |
| sigma |
Malicious DLL Load By Compromised 3CXDesktopApp |
test |
2024-11-23 |
| sigma |
MpiExec Lolbin |
test |
2024-11-23 |
| sigma |
HackTool - Stracciatella Execution |
test |
2024-11-23 |
| sigma |
Renamed AutoIt Execution |
test |
2024-11-23 |
| sigma |
HackTool - UACMe Akagi Execution |
test |
2024-11-23 |
| sigma |
HackTool - CoercedPotato Execution |
test |
2024-11-23 |
| sigma |
Remote Access Tool - NetSupport Execution From Unusual Location |
test |
2024-11-23 |
| sigma |
GALLIUM IOCs |
test |
2024-11-23 |
| sigma |
HackTool - SharpEvtMute DLL Load |
test |
2024-11-23 |
| sigma |
HackTool - PCHunter Execution |
test |
2024-11-23 |
| sigma |
PUA - Nimgrab Execution |
test |
2024-11-23 |
| sigma |
PUA- IOX Tunneling Tool Execution |
test |
2024-11-23 |
| sigma |
PUA - Fast Reverse Proxy (FRP) Execution |
test |
2024-11-23 |
| sigma |
HackTool - LocalPotato Execution |
test |
2024-11-23 |