| sigma |
CobaltStrike Named Pipe |
test |
2022-10-31 |
| sigma |
Remote Utilities Host Service Install |
test |
2022-10-31 |
| sigma |
Suspicious User Agent |
test |
2022-10-31 |
| sigma |
NetSupport Manager Service Install |
test |
2022-10-31 |
| sigma |
Suspicious Scheduled Task Name As GUID |
test |
2022-10-31 |
| sigma |
Suspicious Regsvr32 Execution From Remote Share |
test |
2022-10-31 |
| sigma |
Suspicious Vsls-Agent Command With AgentExtensionPath Load |
test |
2022-10-30 |
| snort |
ET MOBILE_MALWARE Trojan-Dropper.AndroidOS.Guerrilla.h CnC Domain in DNS Lookup |
rev 1 |
2022-10-28 |
| snort |
ET CURRENT_EVENTS Generic Credential Phish Landing Page 2022-10-28 |
rev 1 |
2022-10-28 |
| suricata |
ET PHISHING Generic Credential Phish Landing Page 2022-10-28 |
rev 1 |
2022-10-28 |
| snort |
ET CURRENT_EVENTS America First CU Successful Phish 2022-10-27 |
rev 2 |
2022-10-27 |
| snort |
ET CURRENT_EVENTS America First CU Account Recovery 2022-10-27 |
rev 2 |
2022-10-27 |
| suricata |
ET PHISHING America First CU Successful Phish 2022-10-27 |
rev 2 |
2022-10-27 |
| suricata |
ET PHISHING America First CU Account Recovery 2022-10-27 |
rev 2 |
2022-10-27 |
| snort |
ET CURRENT_EVENTS Generic Credential Phish Landing Page 2022-10-26 |
rev 1 |
2022-10-26 |
| snort |
ET TROJAN Win32/Injector.BBYK Checkin |
rev 1 |
2022-10-26 |
| suricata |
ET PHISHING Generic Credential Phish Landing Page 2022-10-26 |
rev 1 |
2022-10-26 |
| suricata |
ET MALWARE Win32/Injector.BBYK Checkin |
rev 1 |
2022-10-26 |
| sigma |
Suspicious PowerShell Mailbox Export to Share - PS |
test |
2022-10-26 |
| sigma |
Suspicious PowerShell Mailbox Export to Share |
test |
2022-10-26 |
| sigma |
PsExec Service File Creation |
test |
2022-10-26 |
| sigma |
PUA - PAExec Default Named Pipe |
test |
2022-10-26 |
| sigma |
PAExec Service Installation |
test |
2022-10-26 |
| snort |
ET INFO Public Array DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-25 |
| snort |
ET INFO WeDNS DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-25 |
| snort |
ET INFO WeDNS DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-25 |
| snort |
ET INFO Ryan Palmer DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-25 |
| snort |
ET TROJAN Cobalt Strike Related Domain in DNS Lookup |
rev 1 |
2022-10-25 |
| snort |
ET INFO Qihoo 360 DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-25 |
| snort |
ET INFO Safe Surfer DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-25 |
| snort |
ET INFO Switch DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-25 |
| snort |
ET INFO Rezhajul DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-25 |
| snort |
ET INFO Public Array DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-25 |
| snort |
ET INFO Usable Privacy DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-25 |
| snort |
ET TROJAN Cobalt Strike Related Domain in DNS Lookup |
rev 1 |
2022-10-25 |
| snort |
ET INFO MyDNS .network DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-25 |
| snort |
ET INFO TheRifleMan DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-25 |
| snort |
ET INFO Restena DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-25 |
| snort |
ET INFO Null31 DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-25 |
| suricata |
ET MALWARE Cobalt Strike Related Domain in DNS Lookup |
rev 1 |
2022-10-25 |