| sigma |
RDP Port Forwarding Rule Added Via Netsh.EXE |
test |
2023-02-13 |
| sigma |
HackTool - TruffleSnout Execution |
test |
2023-02-13 |
| sigma |
PUA - NSudo Execution |
test |
2023-02-13 |
| sigma |
HackTool - SharpChisel Execution |
test |
2023-02-13 |
| sigma |
Potential Crypto Mining Activity |
stable |
2023-02-13 |
| sigma |
PUA - NirCmd Execution As LOCAL SYSTEM |
test |
2023-02-13 |
| sigma |
PUA - NirCmd Execution |
test |
2023-02-13 |
| sigma |
HackTool - SharpUp PrivEsc Tool Execution |
test |
2023-02-13 |
| sigma |
Potential Atlassian Confluence CVE-2021-26084 Exploitation Attempt |
test |
2023-02-13 |
| sigma |
HackTool - SharpImpersonation Execution |
test |
2023-02-13 |
| sigma |
Harvesting Of Wifi Credentials Via Netsh.EXE |
test |
2023-02-13 |
| sigma |
HackTool - SILENTTRINITY Stager Execution |
test |
2023-02-13 |
| sigma |
Potential CVE-2022-21587 Exploitation Attempt |
test |
2023-02-13 |
| sigma |
Suspicious SQL Error Messages |
test |
2023-02-12 |
| sigma |
Potential SpEL Injection In Spring Framework |
test |
2023-02-11 |
| sigma |
Potential Server Side Template Injection In Velocity |
test |
2023-02-11 |
| sigma |
Potential RCE Exploitation Attempt In NodeJS |
test |
2023-02-11 |
| sigma |
Potential XXE Exploitation Attempt In JVM Based Application |
test |
2023-02-11 |
| sigma |
Potential OGNL Injection Exploitation In JVM Based Application |
test |
2023-02-11 |
| sigma |
Potential Local File Read Vulnerability In JVM Based Application |
test |
2023-02-11 |
| sigma |
Potential JNDI Injection Exploitation In JVM Based Application |
test |
2023-02-11 |
| sigma |
Process Execution Error In JVM Based Application |
test |
2023-02-11 |
| sigma |
HackTool - Koadic Execution |
test |
2023-02-11 |
| sigma |
Hidden Executable In NTFS Alternate Data Stream |
test |
2023-02-10 |
| sigma |
GAC DLL Loaded Via Office Applications |
test |
2023-02-10 |
| sigma |
VBA DLL Loaded Via Office Application |
test |
2023-02-10 |
| sigma |
New Firewall Rule Added Via Netsh.EXE |
test |
2023-02-10 |
| sigma |
Unusual File Download from Direct IP Address |
test |
2023-02-10 |
| sigma |
Potential Persistence Via Microsoft Compatibility Appraiser |
test |
2023-02-10 |
| sigma |
Suspicious Microsoft OneNote Child Process |
test |
2023-02-10 |
| snort |
ET TROJAN UAC-0114/Winter Vivern Redirect |
rev 1 |
2023-02-09 |
| snort |
ET GAMES Multiple Game Cheat Application Activity |
rev 1 |
2023-02-09 |
| snort |
ET GAMES Multiple Game Cheat Application Activity |
rev 1 |
2023-02-09 |
| suricata |
ET MALWARE UAC-0114/Winter Vivern Redirect |
rev 1 |
2023-02-09 |
| sigma |
Suspicious NTLM Authentication on the Printer Spooler Service |
test |
2023-02-09 |
| sigma |
Rundll32 Registered COM Objects |
test |
2023-02-09 |
| sigma |
Rundll32 InstallScreenSaver Execution |
test |
2023-02-09 |
| sigma |
Suspicious Key Manager Access |
test |
2023-02-09 |
| sigma |
Code Execution via Pcwutl.dll |
test |
2023-02-09 |
| sigma |
Suspicious Control Panel DLL Load |
test |
2023-02-09 |