| suricata |
ET HUNTING JAR Sent Claiming To Be Text Content - Likely Exploit Kit |
rev 4 |
2023-04-24 |
| sigma |
Suspicious Microsoft Office Child Process |
test |
2023-04-24 |
| sigma |
AWS ECS Task Definition That Queries The Credential Endpoint |
test |
2023-04-24 |
| sigma |
Potential Xterm Reverse Shell |
test |
2023-04-24 |
| sigma |
Rorschach Ransomware Execution Activity |
test |
2023-04-22 |
| snort |
ET INFO Observed DNS Query to autoitscript .com |
rev 1 |
2023-04-21 |
| snort |
ET CURRENT_EVENTS Fake Google Chrome Error Landing Page, Anti-Analysis Technique |
rev 1 |
2023-04-21 |
| suricata |
ET HUNTING Observed DNS Query to autoitscript .com |
rev 1 |
2023-04-21 |
| suricata |
ET PHISHING Fake Google Chrome Error Landing Page, Anti-Analysis Technique |
rev 1 |
2023-04-21 |
| sigma |
Suspicious Invoke-WebRequest Execution With DirectIP |
test |
2023-04-21 |
| sigma |
Potential Suspicious PowerShell Keywords |
test |
2023-04-21 |
| sigma |
Windows Defender Firewall Has Been Reset To Its Default Configuration |
test |
2023-04-21 |
| sigma |
Windows Firewall Settings Have Been Changed |
test |
2023-04-21 |
| sigma |
MSMQ Corrupted Packet Encountered |
test |
2023-04-21 |
| snort |
ET INFO Request for EXE via Powershell |
rev 2 |
2023-04-20 |
| snort |
ET CURRENT_EVENTS Successful International Card Services Credential Phish 2023-04-20 |
rev 1 |
2023-04-20 |
| snort |
ET INFO JAVA - Java Class Download By Vulnerable Client |
rev 6 |
2023-04-20 |
| snort |
ET INFO JAVA - Zip/JAR File Downloaded Containing Executable Downloaded |
rev 7 |
2023-04-20 |
| snort |
ET INFO NetSupport Remote Admin Checkin |
rev 2 |
2023-04-20 |
| snort |
ET INFO PDF /FlateDecode and PDF version 1.0 |
rev 2 |
2023-04-20 |
| snort |
ET INFO NetSupport Remote Admin Response |
rev 3 |
2023-04-20 |
| snort |
ET ATTACK_RESPONSE PowerShell Base64 Encoded Content Command Common In Powershell Stagers M2 |
rev 4 |
2023-04-20 |
| snort |
ET INFO AutoIt User-Agent Downloading ZIP |
rev 4 |
2023-04-20 |
| snort |
ET INFO JAVA - Java Archive Download |
rev 7 |
2023-04-20 |
| snort |
ET INFO Microsoft Script Encoder Encoded File |
rev 3 |
2023-04-20 |
| snort |
ET SCAN External Host Probing for ChromeCast Devices |
rev 4 |
2023-04-20 |
| snort |
ET INFO JAVA - Zip/JAR File Downloaded Possibly Containing Serialized Data by By Vulnerable Client |
rev 2 |
2023-04-20 |
| snort |
ET INFO Generic - *.com.exe HTTP Attachment |
rev 3 |
2023-04-20 |
| snort |
ET INFO tor2www .onion Proxy SSL cert |
rev 3 |
2023-04-20 |
| snort |
ET INFO WinHttpRequest Downloading EXE |
rev 7 |
2023-04-20 |
| snort |
ET INFO JAVA - Java Class Download |
rev 5 |
2023-04-20 |
| snort |
ET INFO JAVA - Java Serialized Data Download by Vulnerable Client |
rev 3 |
2023-04-20 |
| snort |
ET INFO JAVA - Java Archive Download By Vulnerable Client |
rev 4 |
2023-04-20 |
| snort |
ET TROJAN Win32/Injector.DYZG Variant Checkin |
rev 1 |
2023-04-20 |
| snort |
ET INFO AutoIt User Agent Executable Request |
rev 4 |
2023-04-20 |
| snort |
ET INFO JAVA - Java Serialized Data Download |
rev 3 |
2023-04-20 |
| suricata |
ET SCAN External Host Probing for ChromeCast Devices |
rev 5 |
2023-04-20 |
| suricata |
ET INFO Request for EXE via Powershell |
rev 2 |
2023-04-20 |
| suricata |
ET PHISHING Successful International Card Services Credential Phish 2023-04-20 |
rev 1 |
2023-04-20 |
| suricata |
ET MALWARE Win32/Injector.DYZG Variant Checkin |
rev 1 |
2023-04-20 |