| suricata |
ET INFO JSCAPE MFT - Binary Management Service Default TLS Certificate |
rev 1 |
2023-09-08 |
| suricata |
ET MALWARE Red Wolf/RedCurl Payload Retrieval Attempt M3 |
rev 1 |
2023-09-08 |
| suricata |
ET PHISHING [TW] NOTG Password URL Struct |
rev 1 |
2023-09-08 |
| suricata |
ET INFO JSCAPE MFT - HTTP Management Service Detected via Set-Cookie |
rev 1 |
2023-09-08 |
| suricata |
ET PHISHING [TW] NOTG Redirect URL Struct |
rev 1 |
2023-09-08 |
| suricata |
ET PHISHING [TW] NOTG Obfuscation Redirect Observed M1 |
rev 1 |
2023-09-08 |
| suricata |
ET MALWARE Red Wolf/RedCurl Payload Retrieval Attempt M4 |
rev 1 |
2023-09-08 |
| suricata |
ET PHISHING [TW] NOTG Check Add User URL Struct |
rev 1 |
2023-09-08 |
| suricata |
ET MALWARE Red Wolf/RedCurl Payload Retrieval Attempt M2 |
rev 1 |
2023-09-08 |
| suricata |
ET PHISHING [TW] NOTG Obfuscation Redirect Observed M2 |
rev 1 |
2023-09-08 |
| snort |
ET TROJAN Win32/Bumblebee Loader Checkin Activity |
rev 1 |
2023-09-07 |
| suricata |
ET MALWARE Win32/Bumblebee Loader Checkin Activity |
rev 1 |
2023-09-07 |
| sigma |
Azure AD Threat Intelligence |
test |
2023-09-07 |
| sigma |
Malicious IP Address Sign-In Suspicious |
test |
2023-09-07 |
| sigma |
Primary Refresh Token Access Attempt |
test |
2023-09-07 |
| sigma |
Potentially Suspicious DMP/HDMP File Creation |
test |
2023-09-07 |
| sigma |
Malicious IP Address Sign-In Failure Rate |
test |
2023-09-07 |
| sigma |
Windows Update Error |
stable |
2023-09-07 |
| sigma |
DMP/HDMP File Creation |
test |
2023-09-07 |
| snort |
ET INFO Suspected Gamaredon Template Retrieval |
rev 1 |
2023-09-06 |
| sigma |
VMMap Unsigned Dbghelp.DLL Potential Sideloading |
test |
2023-09-05 |
| sigma |
Old TLS1.0/TLS1.1 Protocol Version Enabled |
test |
2023-09-05 |
| sigma |
IE ZoneMap Setting Downgraded To MyComputer Zone For HTTP Protocols Via CLI |
test |
2023-09-05 |
| sigma |
IE ZoneMap Setting Downgraded To MyComputer Zone For HTTP Protocols |
test |
2023-09-05 |
| sigma |
VMMap Signed Dbghelp.DLL Potential Sideloading |
test |
2023-09-05 |
| sigma |
ESXi VM List Discovery Via ESXCLI |
test |
2023-09-04 |
| sigma |
ESXi VM Kill Via ESXCLI |
test |
2023-09-04 |
| sigma |
ESXi VSAN Information Discovery Via ESXCLI |
test |
2023-09-04 |
| sigma |
SQL Injection Strings In URI |
test |
2023-09-04 |
| sigma |
ESXi System Information Discovery Via ESXCLI |
test |
2023-09-04 |
| sigma |
ESXi Syslog Configuration Change Via ESXCLI |
test |
2023-09-04 |
| sigma |
ESXi Storage Information Discovery Via ESXCLI |
test |
2023-09-04 |
| sigma |
ESXi Admin Permission Assigned To Account Via ESXCLI |
test |
2023-09-04 |
| sigma |
ESXi Network Configuration Discovery Via ESXCLI |
test |
2023-09-04 |
| sigma |
ADS Zone.Identifier Deleted |
test |
2023-09-04 |
| sigma |
Azure AD Account Credential Leaked |
test |
2023-09-03 |
| sigma |
Activity From Anonymous IP Address |
test |
2023-09-03 |
| sigma |
Sign-In From Malware Infected IP |
test |
2023-09-03 |
| sigma |
New Country |
test |
2023-09-03 |
| sigma |
Password Spray Activity |
test |
2023-09-03 |