| snort |
ET SCADA [nsacyber/ELITEWOLF] Tridium Niagara4 Default Cert Issuer Common Name |
rev 1 |
2023-10-23 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Tridium Niagara Default Cert Issuer Common Name |
rev 1 |
2023-10-23 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Tridium Niagara Default X509 Certificate |
rev 1 |
2023-10-23 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Tridium Niagara Default Cert Subject Common Name |
rev 1 |
2023-10-23 |
| snort |
ET TROJAN LUMAR Stealer Exfiltration M2 |
rev 1 |
2023-10-23 |
| suricata |
ET SCADA [nsacyber/ELITEWOLF] Tridium Niagara4 Default Cert Subject Common Name |
rev 1 |
2023-10-23 |
| suricata |
ET SCADA [nsacyber/ELITEWOLF] Tridium NiagaraAX Default Cert Subject Common Name |
rev 2 |
2023-10-23 |
| suricata |
ET SCADA [nsacyber/ELITEWOLF] Tridium Niagara Default Cert Issuer Common Name |
rev 1 |
2023-10-23 |
| suricata |
ET SCADA [nsacyber/ELITEWOLF] Tridium NiagaraN4 Default Cert Subject Common Name |
rev 2 |
2023-10-23 |
| suricata |
ET SCADA [nsacyber/ELITEWOLF] Tridium NiagaraAX Default Cert Issuer Common Name |
rev 2 |
2023-10-23 |
| suricata |
ET SCADA [nsacyber/ELITEWOLF] Tridium NiagaraN4 Default Cert Issuer Common Name |
rev 1 |
2023-10-23 |
| suricata |
ET SCADA [nsacyber/ELITEWOLF] Tridium Niagara Default Cert Subject Common Name |
rev 1 |
2023-10-23 |
| suricata |
ET SCADA [nsacyber/ELITEWOLF] Tridium Niagara4 Default Cert Issuer Common Name |
rev 1 |
2023-10-23 |
| sigma |
PowerShell Profile Modification |
test |
2023-10-23 |
| sigma |
Potential SPN Enumeration Via Setspn.EXE |
test |
2023-10-23 |
| sigma |
Antivirus PrinterNightmare CVE-2021-34527 Exploit Detection |
stable |
2023-10-23 |
| sigma |
Dump Ntds.dit To Suspicious Location |
test |
2023-10-23 |
| sigma |
MSI Installation From Suspicious Locations |
test |
2023-10-23 |
| sigma |
Exploitation Indicators Of CVE-2023-20198 |
test |
2023-10-20 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Siemens S7-1200 Default X509 Certificate String |
rev 1 |
2023-10-19 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL Calibration Access Level Login Success |
rev 1 |
2023-10-19 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - DNPMAP.TXT File Download Attempt |
rev 1 |
2023-10-19 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - Default User Account Password TAIL Login Attempt |
rev 1 |
2023-10-19 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - Access Change |
rev 1 |
2023-10-19 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - DNPMAP.TXT File Upload Attempt |
rev 1 |
2023-10-19 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL-2488 Default Cert Subject Common Name |
rev 1 |
2023-10-19 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - ERR.TXT File Download Attempt |
rev 1 |
2023-10-19 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - STOR SET_DNP1.TXT File Upload Attempt |
rev 1 |
2023-10-19 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Siemens S7 Redpoint NSE Request CPU Function Read SZL attempt |
rev 1 |
2023-10-19 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - SET_ File Upload Attempt |
rev 1 |
2023-10-19 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Siemens S7-1200 Default Cert Subject Common Name |
rev 1 |
2023-10-19 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - SEL-751A FTP Banner Observed |
rev 1 |
2023-10-19 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - Default User Account FTPUSER Login Attempt |
rev 1 |
2023-10-19 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - User ACC Login Attempt |
rev 1 |
2023-10-19 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Possible Siemens S7-1200 Unauthorized Access Attempt - Request for /Images/CPU1200/ |
rev 1 |
2023-10-19 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Tridium NiagaraN4 Default X509 Certificate String |
rev 1 |
2023-10-19 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Possible Siemens S7-1200 Unauthorized Access Attempt - Request for /CSS/S7Web.css |
rev 1 |
2023-10-19 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - Change working directory 2701 |
rev 1 |
2023-10-19 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - SET_DNP1.TXT File Download Attempt |
rev 1 |
2023-10-19 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Tridium NiagaraAX Default X509 Certificate String |
rev 1 |
2023-10-19 |