| snort |
ET TROJAN Latrodectus Alive Response M7 |
rev 1 |
2023-12-15 |
| suricata |
ET MALWARE Latrodectus Alive Response M8 |
rev 1 |
2023-12-15 |
| suricata |
ET MALWARE Latrodectus Alive Response M1 |
rev 2 |
2023-12-15 |
| suricata |
ET MALWARE Latrodectus Alive Response M2 |
rev 1 |
2023-12-15 |
| suricata |
ET MALWARE Latrodectus Alive Response M7 |
rev 1 |
2023-12-15 |
| suricata |
ET MALWARE Latrodectus Alive Response M3 |
rev 1 |
2023-12-15 |
| suricata |
ET MALWARE Latrodectus Alive Response M4 |
rev 1 |
2023-12-15 |
| suricata |
ET MALWARE Latrodectus Alive Response M5 |
rev 1 |
2023-12-15 |
| suricata |
ET MALWARE Latrodectus Alive Response M6 |
rev 1 |
2023-12-15 |
| suricata |
ET MALWARE IcedID CnC Domain in DNS Lookup |
rev 1 |
2023-12-15 |
| elastic |
Potential Process Herpaderping Attempt |
deprecated |
2023-12-15 |
| sigma |
Disabled Volume Snapshots |
test |
2023-12-15 |
| sigma |
Compress-Archive Cmdlet Execution |
test |
2023-12-15 |
| sigma |
Potential Recon Activity Via Nltest.EXE |
test |
2023-12-15 |
| sigma |
Suspicious Wordpad Outbound Connections |
test |
2023-12-15 |
| sigma |
Enable LM Hash Storage |
test |
2023-12-15 |
| snort |
ET CURRENT_EVENTS Generic Credential Phish Landing Page M1 2022-10-11 |
rev 2 |
2023-12-14 |
| snort |
ET CURRENT_EVENTS Successful DarkX Credential Phish 2022-12-19 |
rev 1 |
2023-12-14 |
| snort |
ET CURRENT_EVENTS DarkX Phish Landing Page 2022-12-19 |
rev 3 |
2023-12-14 |
| snort |
ET CURRENT_EVENTS DarkX Phish Landing Page 2022-01-22 |
rev 3 |
2023-12-14 |
| suricata |
ET PHISHING Generic Credential Phish Landing Page M1 2022-10-11 |
rev 1 |
2023-12-14 |
| suricata |
ET PHISHING DarkX Phish Landing Page 2022-12-19 |
rev 3 |
2023-12-14 |
| suricata |
ET PHISHING DarkX Phish Landing Page 2022-01-22 |
rev 3 |
2023-12-14 |
| elastic |
Malicious Remote File Creation |
deprecated |
2023-12-14 |
| sigma |
Change PowerShell Policies to an Insecure Level - PowerShell |
test |
2023-12-14 |
| sigma |
Potential PowerShell Execution Policy Tampering |
test |
2023-12-14 |
| snort |
ET POLICY Vulnerable Java Version 1.6.x Detected |
rev 53 |
2023-12-13 |
| snort |
ET TROJAN Win32/StormKitty CnC Telegram Notification M2 |
rev 2 |
2023-12-13 |
| snort |
ET POLICY Vulnerable Java Version 1.4.x Detected |
rev 11 |
2023-12-13 |
| snort |
ET POLICY Vulnerable Java Version 1.7.x Detected |
rev 62 |
2023-12-13 |
| snort |
ET TROJAN Win32/LeftHook Stealer Browser Extension Config Inbound |
rev 2 |
2023-12-13 |
| snort |
ET TROJAN Suspected Kimsuky APT RevClient Related Activity |
rev 1 |
2023-12-13 |
| snort |
ET POLICY Vulnerable Java Version 14.0.x Detected |
rev 4 |
2023-12-13 |
| snort |
ET WEB_CLIENT WebDAV Retrieving an .url |
rev 2 |
2023-12-13 |
| snort |
ET TROJAN RedLine Stealer - CheckConnect Response |
rev 3 |
2023-12-13 |
| snort |
ET TROJAN RaccoonStealer Admin Console Inbound |
rev 2 |
2023-12-13 |
| snort |
ET POLICY Vulnerable Java Version 13.0.x Detected |
rev 5 |
2023-12-13 |
| snort |
ET INFO WebDAV Retrieving .zip containing .exe |
rev 1 |
2023-12-13 |
| snort |
ET POLICY Vulnerable Java Version 15.0.x Detected |
rev 4 |
2023-12-13 |
| snort |
ET INFO WebDAV Retrieving .zip |
rev 1 |
2023-12-13 |