| snort |
ET TROJAN CMDEmber Backdoor Style Request |
rev 1 |
2023-06-08 |
| suricata |
ET MALWARE Cobalt Strike Domain in DNS Lookup |
rev 1 |
2023-06-08 |
| sigma |
Unsigned Module Loaded by ClickOnce Application |
test |
2023-06-08 |
| snort |
ET MOBILE_MALWARE Trojan/iOS Operation Triangulation CnC Domain in DNS Lookup |
rev 1 |
2023-06-07 |
| snort |
ET TROJAN Possible MEME#4CHAN Exfil Activity |
rev 1 |
2023-06-07 |
| snort |
ET MOBILE_MALWARE Trojan/iOS Operation Triangulation CnC Domain in DNS Lookup |
rev 1 |
2023-06-07 |
| snort |
ET MOBILE_MALWARE Trojan/iOS Operation Triangulation CnC Domain in DNS Lookup |
rev 1 |
2023-06-07 |
| snort |
ET TROJAN [ANY.RUN] Win32/ObserverStealer CnC Response |
rev 1 |
2023-06-07 |
| snort |
ET MOBILE_MALWARE Trojan/iOS Operation Triangulation CnC Domain in DNS Lookup |
rev 1 |
2023-06-07 |
| snort |
ET MOBILE_MALWARE Trojan/iOS Operation Triangulation CnC Domain in DNS Lookup |
rev 1 |
2023-06-07 |
| snort |
ET MOBILE_MALWARE Trojan/iOS Operation Triangulation CnC Domain in DNS Lookup |
rev 1 |
2023-06-07 |
| snort |
ET MOBILE_MALWARE Trojan/iOS Operation Triangulation CnC Domain in DNS Lookup |
rev 1 |
2023-06-07 |
| snort |
ET SCADA IEC-104 Clock Synchronization Command |
rev 1 |
2023-06-07 |
| snort |
ET MOBILE_MALWARE Trojan/iOS Operation Triangulation CnC Domain in DNS Lookup |
rev 1 |
2023-06-07 |
| snort |
ET MOBILE_MALWARE Trojan/iOS Operation Triangulation CnC Domain in DNS Lookup |
rev 1 |
2023-06-07 |
| snort |
ET MOBILE_MALWARE Trojan/iOS Operation Triangulation CnC Domain in DNS Lookup |
rev 1 |
2023-06-07 |
| snort |
ET MOBILE_MALWARE Trojan/iOS Operation Triangulation CnC Domain in DNS Lookup |
rev 1 |
2023-06-07 |
| snort |
ET TROJAN MEME#4CHAN Redirect Activity to Payload |
rev 1 |
2023-06-07 |
| snort |
ET TROJAN Observed Sharp Panda APT Related Activity M2 |
rev 1 |
2023-06-07 |
| snort |
ET MOBILE_MALWARE Trojan/iOS Operation Triangulation CnC Domain in DNS Lookup |
rev 1 |
2023-06-07 |
| snort |
ET MOBILE_MALWARE Trojan/iOS Operation Triangulation CnC Domain in DNS Lookup |
rev 1 |
2023-06-07 |
| snort |
ET MOBILE_MALWARE Trojan/iOS Operation Triangulation CnC Domain in DNS Lookup |
rev 1 |
2023-06-07 |
| snort |
ET SCADA IEC-104 Station Interrogation - Global ASDU Broadcast |
rev 1 |
2023-06-07 |
| snort |
ET MOBILE_MALWARE Trojan/iOS Operation Triangulation CnC Domain in DNS Lookup |
rev 1 |
2023-06-07 |
| suricata |
ET SCADA IEC-104 Station Interrogation - Global ASDU Broadcast |
rev 1 |
2023-06-07 |
| suricata |
ET MALWARE [ANY.RUN] Win32/ObserverStealer CnC Response |
rev 1 |
2023-06-07 |
| sigma |
CodeIntegrity - Blocked Image/Driver Load For Policy Violation |
test |
2023-06-07 |
| snort |
ET TROJAN Redline Stealer TCP CnC Activity |
rev 1 |
2023-06-06 |
| snort |
ET ATTACK_RESPONSE Redline Stealer Stager WebPage Inbound |
rev 1 |
2023-06-06 |
| suricata |
ET MALWARE Redline Stealer TCP CnC Activity |
rev 1 |
2023-06-06 |
| suricata |
ET JA3 Hash - Possible Rclone Client Activity |
rev 3 |
2023-06-06 |
| suricata |
ET MALWARE Redline Stealer Stager WebPage Inbound |
rev 1 |
2023-06-06 |
| sigma |
CodeIntegrity - Unsigned Kernel Module Loaded |
test |
2023-06-06 |
| sigma |
CodeIntegrity - Disallowed File For Protected Processes Has Been Blocked |
test |
2023-06-06 |
| sigma |
CodeIntegrity - Revoked Kernel Driver Loaded |
test |
2023-06-06 |
| sigma |
CodeIntegrity - Blocked Image Load With Revoked Certificate |
test |
2023-06-06 |
| sigma |
CodeIntegrity - Revoked Image Loaded |
test |
2023-06-06 |
| sigma |
CodeIntegrity - Blocked Driver Load With Revoked Certificate |
test |
2023-06-06 |
| sigma |
CodeIntegrity - Unsigned Image Loaded |
test |
2023-06-06 |
| sigma |
NTLMv1 Logon Between Client and Server |
test |
2023-06-06 |