| snort |
ET CURRENT_EVENTS Lucy Security - Phishing Landing Page M3 |
rev 1 |
2023-12-26 |
| snort |
ET INFO Lucy Security - Admin Panel Accessed on External Server |
rev 3 |
2023-12-26 |
| snort |
ET INFO Lucy Security - Admin Panel Accessed on Internal Server |
rev 3 |
2023-12-26 |
| snort |
ET INFO Lucy Security - Awareness Landing Page M2 |
rev 1 |
2023-12-26 |
| snort |
ET CURRENT_EVENTS Lucy Security - Phishing Landing Page M1 |
rev 4 |
2023-12-26 |
| snort |
ET CURRENT_EVENTS Lucy Security - Phishing to Awareness Landing Page |
rev 1 |
2023-12-26 |
| snort |
ET TROJAN Win32/Suspected Reverse Shell Connection |
rev 2 |
2023-12-26 |
| snort |
ET INFO Lucy Security - Awareness Landing Page M1 |
rev 5 |
2023-12-26 |
| snort |
ET CURRENT_EVENTS Lucy Security - Phishing Framework Plugin List POST |
rev 1 |
2023-12-26 |
| snort |
ET CURRENT_EVENTS Lucy Security - Phishing Landing Page M2 |
rev 1 |
2023-12-26 |
| suricata |
ET PHISHING Lucy Security - Phishing Landing Page M1 |
rev 4 |
2023-12-26 |
| suricata |
ET INFO Lucy Security - Admin Panel Accessed on External Server |
rev 2 |
2023-12-26 |
| suricata |
ET PHISHING Lucy Security - Phishing Framework Plugin List POST |
rev 1 |
2023-12-26 |
| suricata |
ET PHISHING Lucy Security - Phishing to Awareness Landing Page |
rev 1 |
2023-12-26 |
| suricata |
ET PHISHING Lucy Security - Phishing Landing Page M3 |
rev 1 |
2023-12-26 |
| suricata |
ET MALWARE Win32/Suspected Reverse Shell Connection |
rev 2 |
2023-12-26 |
| suricata |
ET INFO Lucy Security - Awareness Landing Page M2 |
rev 1 |
2023-12-26 |
| snort |
ET CURRENT_EVENTS Lucy Security Time Tracking - Phishing Simulation |
rev 1 |
2023-12-22 |
| snort |
ET INFO Lucy Security - Server Reply |
rev 4 |
2023-12-22 |
| snort |
ET CURRENT_EVENTS Lucy Security - Successful Phish |
rev 4 |
2023-12-22 |
| snort |
ET INFO Lucy Security Time Tracking - Awareness Training |
rev 1 |
2023-12-22 |
| suricata |
ET PHISHING Lucy Security Time Tracking - Phishing Simulation |
rev 1 |
2023-12-22 |
| suricata |
ET PHISHING Lucy Security - Successful Phish |
rev 4 |
2023-12-22 |
| suricata |
ET INFO Lucy Security Time Tracking - Awareness Training |
rev 1 |
2023-12-22 |
| sigma |
Enable LM Hash Storage - ProcCreation |
test |
2023-12-22 |
| snort |
ET TROJAN Lumma Stealer Related Activity M2 |
rev 1 |
2023-12-21 |
| snort |
ET TROJAN Win32/Unknown Stealer Data Exfiltration Attempt |
rev 1 |
2023-12-21 |
| suricata |
ET MALWARE Win32/Unknown Stealer Data Exfiltration Attempt |
rev 1 |
2023-12-21 |
| sigma |
Access To Sysvol Policies Share By Uncommon Process |
test |
2023-12-21 |
| sigma |
HackTool - EfsPotato Named Pipe Creation |
test |
2023-12-21 |
| sigma |
Potentially Suspicious Desktop Background Change Using Reg.EXE |
test |
2023-12-21 |
| sigma |
Cloudflared Tunnel Connections Cleanup |
test |
2023-12-21 |
| snort |
ET INFO Simplehelp Remote Administration Suite HTTP Server Value in Response |
rev 1 |
2023-12-20 |
| snort |
ET TROJAN JaskaGO CnC Host Profile Exfil |
rev 1 |
2023-12-20 |
| snort |
ET TROJAN Malicious Loader Related Activity Response |
rev 1 |
2023-12-20 |
| snort |
ET INFO web.go HTTP Server Value in Response |
rev 1 |
2023-12-20 |
| snort |
ET TROJAN BlackRain User-Agent Observed |
rev 1 |
2023-12-20 |
| snort |
ET INFO Google DNS Over HTTPS Certificate Inbound |
rev 4 |
2023-12-20 |
| snort |
ET INFO Simplehelp Remote Administration Suite Default SSL Certificate Observed |
rev 1 |
2023-12-20 |
| suricata |
ET INFO Google DNS Over HTTPS Certificate Inbound |
rev 5 |
2023-12-20 |