| snort |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - ERR.TXT File Download Attempt |
rev 1 |
2023-10-19 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Siemens S7 Redpoint NSE Request CPU Function Read SZL attempt |
rev 1 |
2023-10-19 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - SET_ File Upload Attempt |
rev 1 |
2023-10-19 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - STOR SET_DNP1.TXT File Upload Attempt |
rev 1 |
2023-10-19 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - Default User Account Password TAIL Login Attempt |
rev 1 |
2023-10-19 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - Default Password otter |
rev 1 |
2023-10-19 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Tridium NiagaraAX Default Cert Subject Common Name |
rev 1 |
2023-10-19 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - User ACC Login Attempt |
rev 1 |
2023-10-19 |
| suricata |
ET JA3 Hash - Remcos 3.x/4.x TLS Connection |
rev 1 |
2023-10-19 |
| suricata |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - User ACC Login Attempt |
rev 1 |
2023-10-19 |
| suricata |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - DNPMAP.TXT File Upload Attempt |
rev 1 |
2023-10-19 |
| suricata |
ET SCADA [nsacyber/ELITEWOLF] Siemens S7-1200 Default Cert Issuer Common Name |
rev 1 |
2023-10-19 |
| suricata |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL-2488 Default Cert Subject Common Name |
rev 1 |
2023-10-19 |
| suricata |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - Default User Account Password TAIL Login Attempt |
rev 1 |
2023-10-19 |
| suricata |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - Current directory /SEL-2701 |
rev 1 |
2023-10-19 |
| suricata |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - DNPMAP.TXT File Download Attempt |
rev 1 |
2023-10-19 |
| suricata |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - SET_DNP1.TXT File Download Attempt |
rev 1 |
2023-10-19 |
| suricata |
ET SCADA [nsacyber/ELITEWOLF] Possible Siemens S7-1200 Unauthorized Access Attempt - Request for /Images/CPU1200/ |
rev 1 |
2023-10-19 |
| suricata |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - SET_ File Download Attempt |
rev 1 |
2023-10-19 |
| suricata |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL 2032 Processor Telnet Banner |
rev 1 |
2023-10-19 |
| suricata |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - ERR.TXT File Download Attempt |
rev 1 |
2023-10-19 |
| suricata |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - SEL-751A FTP Banner Observed |
rev 1 |
2023-10-19 |
| suricata |
ET SCADA [nsacyber/ELITEWOLF] Possible Siemens S7-1200 Unauthorized Access Attempt - Request for /CSS/S7Web.css |
rev 1 |
2023-10-19 |
| suricata |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - Default User Account FTPUSER Login Attempt |
rev 1 |
2023-10-19 |
| suricata |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - SET_ File Upload Attempt |
rev 1 |
2023-10-19 |
| suricata |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL-2488 Default Cert Issuer Common Name |
rev 1 |
2023-10-19 |
| suricata |
ET SCADA [nsacyber/ELITEWOLF] Siemens S7-1200 Default Cert Subject Common Name |
rev 1 |
2023-10-19 |
| suricata |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - STOR SET_DNP1.TXT File Upload Attempt |
rev 1 |
2023-10-19 |
| suricata |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - Access Change |
rev 1 |
2023-10-19 |
| suricata |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL Calibration Access Level Login Success |
rev 1 |
2023-10-19 |
| suricata |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL FTP Server Activity - Default Password otter |
rev 1 |
2023-10-19 |
| sigma |
LSASS Process Memory Dump Creation Via Taskmgr.EXE |
test |
2023-10-19 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Allen-Bradley/Rockwell Automation Advanced Diagnostics Information Disclosure Attempt - ICMP Statistics |
rev 1 |
2023-10-18 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL-3620 Default Cert Issuer Common Name |
rev 1 |
2023-10-18 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboratories SEL-series Possible Unauthorized Access - Request for default.sel |
rev 1 |
2023-10-18 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboraties SEL-series Possible Unauthorized Access Attempt - Request for err401.sel |
rev 1 |
2023-10-18 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Schweitzer Engineering Laboraties SEL-2488 Possible Unauthorized Access Attempt - Request for /scripts/dScripts.sel |
rev 1 |
2023-10-18 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Allen-Bradley/Rockwell Automation Advanced Diagnostics Information Disclosure Attempt - UDP Statistics |
rev 1 |
2023-10-18 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Allen-Bradley/Rockwell Automation Possible Unauthorized Access Attempt - Request for radevice.css |
rev 1 |
2023-10-18 |
| snort |
ET SCADA [nsacyber/ELITEWOLF] Allen-Bradley/Rockwell Automation Information Disclosure Attempt - Browse Chasis |
rev 1 |
2023-10-18 |