| suricata |
ET MALWARE Cobalt Strike Related Domain in DNS Lookup |
rev 1 |
2022-10-25 |
| sigma |
OpenSSH Server Listening On Socket |
test |
2022-10-25 |
| snort |
ET CURRENT_EVENTS Successful BoA Credential Phish 2022-10-24 |
rev 1 |
2022-10-24 |
| snort |
ET CURRENT_EVENTS Successful Citizens Bank Credential Phish 2022-10-24 |
rev 1 |
2022-10-24 |
| suricata |
ET PHISHING Successful BoA Credential Phish 2022-10-24 |
rev 1 |
2022-10-24 |
| suricata |
ET PHISHING Successful Citizens Bank Credential Phish 2022-10-24 |
rev 1 |
2022-10-24 |
| sigma |
Suspicious Service DACL Modification Via Set-Service Cmdlet - PS |
test |
2022-10-24 |
| sigma |
MSI Installation From Web |
test |
2022-10-23 |
| sigma |
Audit CVE Event |
test |
2022-10-22 |
| sigma |
Potential Initial Access via DLL Search Order Hijacking |
test |
2022-10-21 |
| snort |
ET INFO MegaNerd DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-20 |
| snort |
ET INFO Plan9-dns DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-20 |
| snort |
ET INFO Open Internet DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-20 |
| snort |
ET INFO NextDNS DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-20 |
| snort |
ET INFO Limo Telu DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-20 |
| snort |
ET INFO Plan9-dns DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-20 |
| snort |
ET INFO Mullvad DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-20 |
| snort |
ET CURRENT_EVENTS Successful Luno Credential Phish 2022-10-20 |
rev 1 |
2022-10-20 |
| snort |
ET INFO Mullvad DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-20 |
| snort |
ET INFO Plan9-dns DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-20 |
| snort |
ET INFO Paesa DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-20 |
| snort |
ET INFO Njalla DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-20 |
| snort |
ET TROJAN W32/Nymaim Checkin M2 |
rev 8 |
2022-10-20 |
| snort |
ET CURRENT_EVENTS Successful Generic Credential Phish 2022-10-20 |
rev 1 |
2022-10-20 |
| snort |
ET INFO PureDNS DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-20 |
| snort |
ET CURRENT_EVENTS Generic Credential Phish Landing Page 2022-10-20 |
rev 1 |
2022-10-20 |
| snort |
ET CURRENT_EVENTS Successful Generic Credential Phish 2022-10-20 |
rev 1 |
2022-10-20 |
| snort |
ET INFO LibreDNS DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-20 |
| suricata |
ET PHISHING Successful Luno Credential Phish 2022-10-20 |
rev 1 |
2022-10-20 |
| suricata |
ET PHISHING Generic Credential Phish Landing Page 2022-10-20 |
rev 1 |
2022-10-20 |
| suricata |
ET PHISHING Successful Generic Credential Phish 2022-10-20 |
rev 1 |
2022-10-20 |
| suricata |
ET PHISHING Successful Generic Credential Phish 2022-10-20 |
rev 1 |
2022-10-20 |
| sigma |
Always Install Elevated MSI Spawned Cmd And Powershell |
test |
2022-10-20 |
| snort |
ET INFO dnsHome DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-19 |
| snort |
ET INFO Ibksturm DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-19 |
| snort |
ET INFO FutaDNS DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-19 |
| snort |
ET INFO jp.tiar DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-19 |
| snort |
ET INFO DNS For Family DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-19 |
| snort |
ET USER_AGENTS Observed Uclient User-Agent |
rev 1 |
2022-10-19 |
| snort |
ET INFO ffmuc DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-19 |