| sigma |
Equation Group DLL_U Export Function Load |
stable |
2023-03-09 |
| sigma |
APT27 - Emissary Panda Activity |
test |
2023-03-09 |
| sigma |
HAFNIUM Exchange Exploitation Activity |
test |
2023-03-09 |
| sigma |
Griffon Malware Attack Pattern |
test |
2023-03-09 |
| sigma |
Uninstall Crowdstrike Falcon Sensor |
test |
2023-03-09 |
| snort |
ET TROJAN Win32/I'm_Better Stealer CnC Command - get_key |
rev 1 |
2023-03-08 |
| suricata |
ET MALWARE Win32/I'm_Better Stealer CnC Command - get_key |
rev 1 |
2023-03-08 |
| sigma |
OilRig APT Registry Persistence |
test |
2023-03-08 |
| sigma |
OilRig APT Activity |
test |
2023-03-08 |
| sigma |
APT29 2018 Phishing Campaign CommandLine Indicators |
stable |
2023-03-08 |
| sigma |
Potential Baby Shark Malware Activity |
test |
2023-03-08 |
| sigma |
HackTool - Wmiexec Default Powershell Command |
test |
2023-03-08 |
| sigma |
Potential Russian APT Credential Theft Activity |
stable |
2023-03-08 |
| sigma |
Wmiexec Default Output File |
test |
2023-03-08 |
| sigma |
OilRig APT Schedule Task Persistence - Security |
test |
2023-03-08 |
| sigma |
OilRig APT Schedule Task Persistence - System |
test |
2023-03-08 |
| sigma |
HackTool - CrackMapExec Execution |
test |
2023-03-08 |
| sigma |
Potential APT10 Cloud Hopper Activity |
test |
2023-03-08 |
| snort |
ET TROJAN SYS01 Information Stealer - CnC Checkin |
rev 1 |
2023-03-07 |
| snort |
ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak |
rev 1 |
2023-03-07 |
| suricata |
ET MALWARE SYS01 Information Stealer - CnC Checkin |
rev 1 |
2023-03-07 |
| suricata |
ET INFO External IP Address Lookup - myip.ch |
rev 4 |
2023-03-07 |
| suricata |
ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak |
rev 1 |
2023-03-07 |
| sigma |
Directory Removal Via Rmdir |
test |
2023-03-07 |
| sigma |
Copy From VolumeShadowCopy Via Cmd.EXE |
test |
2023-03-07 |
| sigma |
Read Contents From Stdin Via Cmd.EXE |
test |
2023-03-07 |
| sigma |
Sticky Key Like Backdoor Execution |
test |
2023-03-07 |
| sigma |
Persistence Via Sticky Key Backdoor |
test |
2023-03-07 |
| sigma |
NtdllPipe Like Activity Execution |
test |
2023-03-07 |
| sigma |
Suspicious CodePage Switch Via CHCP |
test |
2023-03-07 |
| snort |
ET CURRENT_EVENTS PUBG Credential Phish 2023-03-06 |
rev 1 |
2023-03-06 |
| snort |
ET CURRENT_EVENTS Roblox Credential Phish 2023-03-06 |
rev 1 |
2023-03-06 |
| snort |
ET INFO Wordpress Error, Cannot modify header information - headers already sent by |
rev 1 |
2023-03-06 |
| snort |
ET MALWARE Win32/Pearfoos.B!ml Checkin |
rev 1 |
2023-03-06 |
| snort |
ET POLICY Cryptocurrency Miner Checkin |
rev 5 |
2023-03-06 |
| suricata |
ET PHISHING PUBG Credential Phish 2023-03-06 |
rev 1 |
2023-03-06 |
| suricata |
ET ADWARE_PUP Win32/Pearfoos.B!ml Checkin |
rev 1 |
2023-03-06 |
| suricata |
ET INFO Wordpress Error, Cannot modify header information - headers already sent by |
rev 1 |
2023-03-06 |
| suricata |
ET PHISHING Roblox Credential Phish 2023-03-06 |
rev 1 |
2023-03-06 |
| suricata |
ET INFO Cryptocurrency Miner Checkin |
rev 5 |
2023-03-06 |