| sigma |
Cisco BGP Authentication Failures |
test |
2023-01-23 |
| sigma |
Juniper BGP Missing MD5 |
test |
2023-01-23 |
| sigma |
Huawei BGP Authentication Failures |
test |
2023-01-23 |
| sigma |
ProxyLogon MSExchange OabVirtualDirectory |
test |
2023-01-23 |
| sigma |
Exchange Set OabVirtualDirectory ExternalUrl Property |
test |
2023-01-23 |
| sigma |
Certificate Request Export to Exchange Webserver |
test |
2023-01-23 |
| sigma |
Remove Exported Mailbox from Exchange Webserver |
test |
2023-01-23 |
| sigma |
Suspicious IIS Module Registration |
test |
2023-01-23 |
| sigma |
Potential Active Directory Enumeration Using AD Module - ProcCreation |
test |
2023-01-22 |
| sigma |
Disable Windows IIS HTTP Logging |
test |
2023-01-22 |
| sigma |
Microsoft IIS Service Account Password Dumped |
test |
2023-01-22 |
| sigma |
Suspicious IIS URL GlobalRules Rewrite Via AppCmd |
test |
2023-01-22 |
| sigma |
Potential Active Directory Enumeration Using AD Module - PsModule |
test |
2023-01-22 |
| sigma |
Potential Active Directory Enumeration Using AD Module - PsScript |
test |
2023-01-22 |
| sigma |
Potential Exploitation Attempt Of Undocumented WindowsServer RCE |
test |
2023-01-21 |
| sigma |
Suspicious Shells Spawn by Java Utility Keytool |
test |
2023-01-21 |
| sigma |
Exploited CVE-2020-10189 Zoho ManageEngine |
test |
2023-01-21 |
| snort |
ET MOBILE_MALWARE Backdoor.AndroidOS.Xhunter.a CnC Domain in DNS Lookup |
rev 1 |
2023-01-20 |
| snort |
ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Rewardsteal.e CnC Domain in DNS Lookup |
rev 1 |
2023-01-20 |
| snort |
ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Agent.ld CnC Domain in DNS Lookup |
rev 1 |
2023-01-20 |
| snort |
ET MOBILE_MALWARE Android/Spy.Vultur.A CnC Domain in DNS Lookup |
rev 1 |
2023-01-20 |
| snort |
ET MOBILE_MALWARE Android/Spy.Banker.BOF CnC Domain in DNS Lookup |
rev 1 |
2023-01-20 |
| snort |
ET MOBILE_MALWARE Android/Spy.SmsSpy.XC CnC Domain in DNS Lookup |
rev 1 |
2023-01-20 |
| snort |
ET MOBILE_MALWARE Android/Spy.Agent.AKS CnC Domain in DNS Lookup |
rev 1 |
2023-01-20 |
| snort |
ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Rewardsteal.e CnC Domain in DNS Lookup |
rev 1 |
2023-01-20 |
| snort |
ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Banbra.aa CnC Domain in DNS Lookup |
rev 1 |
2023-01-20 |
| snort |
ET MOBILE_MALWARE Trojan-Spy.AndroidOS.SmsThief.ta CnC Domain in DNS Lookup |
rev 1 |
2023-01-20 |
| snort |
ET MOBILE_MALWARE Android.Backdoor.866.origin CnC Domain in DNS Lookup |
rev 1 |
2023-01-20 |
| snort |
ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Agent.ld CnC Domain in DNS Lookup |
rev 1 |
2023-01-20 |
| sigma |
Scheduled Task Deletion |
test |
2023-01-20 |
| sigma |
Github New Secret Created |
test |
2023-01-20 |
| sigma |
AD Groups Or Users Enumeration Using PowerShell - PoshModule |
test |
2023-01-20 |
| sigma |
Remote PowerShell Session (PS Module) |
test |
2023-01-20 |
| sigma |
Github Outside Collaborator Detected |
test |
2023-01-20 |
| sigma |
Suspicious PowerShell Download - PoshModule |
test |
2023-01-20 |
| sigma |
Potential Centos Web Panel Exploitation Attempt - CVE-2022-44877 |
test |
2023-01-20 |
| snort |
ET INFO RustDesk Domain in DNS Lookup |
rev 1 |
2023-01-19 |
| suricata |
ET INFO RustDesk Domain in DNS Lookup |
rev 1 |
2023-01-19 |
| sigma |
Atbroker Registry Change |
test |
2023-01-19 |
| sigma |
Query Usage To Exfil Data |
test |
2023-01-19 |