| sigma |
Invoke-Obfuscation Obfuscated IEX Invocation - System |
test |
2022-11-27 |
| sigma |
HybridConnectionManager Service Installation - Registry |
test |
2022-11-27 |
| sigma |
CobaltStrike Service Installations - Security |
test |
2022-11-27 |
| sigma |
Defrag Deactivation - Security |
test |
2022-11-27 |
| sigma |
Security Software Discovery - Linux |
test |
2022-11-27 |
| sigma |
Discovery Using AzureHound |
test |
2022-11-27 |
| sigma |
Scheduled Cron Task/Job - Linux |
test |
2022-11-27 |
| sigma |
Decode Base64 Encoded Text -MacOs |
test |
2022-11-26 |
| sigma |
Commands to Clear or Remove the Syslog - Builtin |
test |
2022-11-26 |
| sigma |
Sudo Privilege Escalation CVE-2019-14287 - Builtin |
test |
2022-11-26 |
| sigma |
System Shutdown/Reboot - Linux |
test |
2022-11-26 |
| sigma |
Network Sniffing - MacOs |
test |
2022-11-26 |
| sigma |
System and Hardware Information Discovery |
stable |
2022-11-26 |
| sigma |
Remove Immutable File Attribute - Auditd |
test |
2022-11-26 |
| sigma |
Clipboard Collection with Xclip Tool - Auditd |
test |
2022-11-26 |
| sigma |
Disabling Security Tools - Builtin |
test |
2022-11-26 |
| sigma |
System Shutdown/Reboot - MacOs |
test |
2022-11-26 |
| sigma |
Sticky Key Like Backdoor Usage - Registry |
test |
2022-11-26 |
| sigma |
DCOM InternetExplorer.Application Iertutil DLL Hijack - Security |
test |
2022-11-26 |
| sigma |
RDP Sensitive Settings Changed to Zero |
test |
2022-11-26 |
| sigma |
Windows Defender Exclusions Added - PowerShell |
test |
2022-11-26 |
| sigma |
WMIC Unquoted Services Path Lookup - PowerShell |
test |
2022-11-25 |
| sigma |
File and Directory Discovery - MacOS |
test |
2022-11-25 |
| snort |
ET CURRENT_EVENTS WalletConnect Stealer Landing Page 2022-11-23 |
rev 1 |
2022-11-23 |
| snort |
ET CURRENT_EVENTS Successful Credit Agricole Credential Phish 2022-11-23 |
rev 1 |
2022-11-23 |
| snort |
ET CURRENT_EVENTS Successful BT GROUP Credential Phish 2022-11-23 |
rev 1 |
2022-11-23 |
| suricata |
ET PHISHING Successful BT GROUP Credential Phish 2022-11-23 |
rev 1 |
2022-11-23 |
| suricata |
ET PHISHING WalletConnect Stealer Landing Page 2022-11-23 |
rev 1 |
2022-11-23 |
| suricata |
ET PHISHING Successful Credit Agricole Credential Phish 2022-11-23 |
rev 1 |
2022-11-23 |
| snort |
ET CURRENT_EVENTS Ulpian Credential Phish Landing Page 2022-11-22 |
rev 1 |
2022-11-22 |
| snort |
ET CURRENT_EVENTS Successful Generic Credential Phish 2022-11-22 |
rev 1 |
2022-11-22 |
| snort |
ET CURRENT_EVENTS Successful Generic Credential OTP Phish 2022-11-22 |
rev 1 |
2022-11-22 |
| suricata |
ET PHISHING Ulpian Credential Phish Landing Page 2022-11-22 |
rev 1 |
2022-11-22 |
| suricata |
ET PHISHING Successful Generic Credential OTP Phish 2022-11-22 |
rev 1 |
2022-11-22 |
| suricata |
ET PHISHING Successful Generic Credential Phish 2022-11-22 |
rev 1 |
2022-11-22 |
| sigma |
UAC Bypass Using EventVwr |
test |
2022-11-22 |
| sigma |
UAC Bypass Using Event Viewer RecentViews |
test |
2022-11-22 |
| snort |
ET INFO Observed DNS Query to .life TLD |
rev 3 |
2022-11-21 |
| snort |
ET INFO Unconfigured nginx Access |
rev 2 |
2022-11-21 |
| snort |
ET INFO Redirect Link in TikTok URL |
rev 1 |
2022-11-21 |