| sigma |
PowerShell Base64 Encoded IEX Cmdlet |
test |
2023-04-06 |
| sigma |
PowerShell Base64 Encoded FromBase64String Cmdlet |
test |
2023-04-06 |
| sigma |
Suspicious Encoded PowerShell Command Line |
test |
2023-04-06 |
| sigma |
PowerShell Base64 Encoded Invoke Keyword |
test |
2023-04-06 |
| sigma |
Suspicious Encoded And Obfuscated Reflection Assembly Load Function Call |
test |
2023-04-06 |
| snort |
ET CURRENT_EVENTS Successful Office365 Credential Phish 2023-03-31 |
rev 2 |
2023-04-05 |
| snort |
ET TROJAN Magecart/Skimmer - AngryBeaver Exfil Attempt |
rev 3 |
2023-04-05 |
| snort |
ET CURRENT_EVENTS Successful o365 Credential Phish 2022-12-19 |
rev 2 |
2023-04-05 |
| snort |
ET TROJAN Observed Karen Ransomware CnC Checkin |
rev 2 |
2023-04-05 |
| snort |
ET TROJAN APT28/SkinnyBoy Payload Request |
rev 2 |
2023-04-05 |
| snort |
ET CURRENT_EVENTS Generic Credential Phish Landing Page 2023-04-05 |
rev 1 |
2023-04-05 |
| snort |
ET CURRENT_EVENTS Successful Coinbase Credential Phish 2023-01-09 |
rev 2 |
2023-04-05 |
| snort |
ET CURRENT_EVENTS Generic Antibot Phish Landing Page 2023-04-05 |
rev 1 |
2023-04-05 |
| snort |
ET CURRENT_EVENTS Successful Alibaba Credential Phish 2022-11-30 |
rev 2 |
2023-04-05 |
| suricata |
ET PHISHING Successful o365 Credential Phish 2022-12-19 |
rev 1 |
2023-04-05 |
| suricata |
ET PHISHING Successful Coinbase Credential Phish 2023-01-09 |
rev 1 |
2023-04-05 |
| suricata |
ET PHISHING Generic Antibot Phish Landing Page 2023-04-05 |
rev 1 |
2023-04-05 |
| suricata |
ET PHISHING Generic Credential Phish Landing Page 2023-04-05 |
rev 1 |
2023-04-05 |
| suricata |
ET PHISHING Successful Alibaba Credential Phish 2022-11-30 |
rev 1 |
2023-04-05 |
| suricata |
ET PHISHING Successful Office365 Credential Phish 2023-03-31 |
rev 1 |
2023-04-05 |
| sigma |
Suspicious Browser Child Process - MacOS |
test |
2023-04-05 |
| sigma |
Potential Powershell ReverseShell Connection |
stable |
2023-04-05 |
| snort |
ET TROJAN DCRat Initial Checkin Server Response M5 |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN Win32/Agent.RDE Checkin |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN Win32/Unk.HRESQ! MultiDownloader Checkin M2 |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN Hyperion Obfuscator Payload Inbound |
rev 2 |
2023-04-04 |
| snort |
ET CURRENT_EVENTS [TW] EvilProxy AiTM Microsoft HTTP HOST M6 |
rev 2 |
2023-04-04 |
| snort |
ET CURRENT_EVENTS [TW] EvilProxy AiTM Microsoft HTTP HOST M7 |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN Win32/RisePro CnC Server Response M3 |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN Linux DarkRadiation Ransomware Telegram Activity M1 |
rev 2 |
2023-04-04 |
| snort |
ET CURRENT_EVENTS Successful Office 365 Phish 2022-07-19 |
rev 2 |
2023-04-04 |
| snort |
ET CURRENT_EVENTS Successful OWA Phish 2022-07-15 |
rev 2 |
2023-04-04 |
| snort |
ET CURRENT_EVENTS [TW] EvilProxy AiTM Microsoft HTTP HOST M9 |
rev 2 |
2023-04-04 |
| snort |
ET CURRENT_EVENTS [TW] EvilProxy AiTM Microsoft HTTP HOST M2 |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN Win32/WarHawk Checkin Activity |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN Go/Hack Browser Data Exfil Attempt |
rev 3 |
2023-04-04 |
| snort |
ET TROJAN Win32/RisePro CnC Server Response M2 |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN Win32/Small.NO Checkin |
rev 2 |
2023-04-04 |
| snort |
ET CURRENT_EVENTS Successful Generic Credential Phish 2022-10-26 |
rev 2 |
2023-04-04 |
| snort |
ET CURRENT_EVENTS [TW] Robin Banks Redirect M2 |
rev 2 |
2023-04-04 |