| snort |
ET INFO jp.tiar DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-19 |
| snort |
ET INFO Hitian .me DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-19 |
| snort |
ET INFO Edgy DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-19 |
| snort |
ET INFO jp.tiar DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-19 |
| snort |
ET INFO Lars Lehmn DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-19 |
| snort |
ET INFO Ibksturm DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-19 |
| snort |
ET INFO FutaDNS DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-19 |
| snort |
ET INFO dnsHome DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-19 |
| snort |
ET INFO Internet Initiative Japan DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-19 |
| snort |
ET INFO Infotek DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-19 |
| snort |
ET INFO La Contre-Voie DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-19 |
| suricata |
ET USER_AGENTS Observed Uclient User-Agent |
rev 1 |
2022-10-19 |
| suricata |
ET PHISHING Successful mail .ru Credential Phish |
rev 1 |
2022-10-19 |
| snort |
ET INFO DnsCrypt DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-18 |
| snort |
ET INFO Charter DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-18 |
| snort |
ET INFO Aaflalo .me DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-18 |
| snort |
ET INFO DNSlow DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-18 |
| snort |
ET INFO Blokada DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-18 |
| snort |
ET INFO Andrews & Arnold DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-18 |
| snort |
ET INFO DNSPod DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-18 |
| snort |
ET INFO ControlId DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-18 |
| snort |
ET INFO CZ.NIC DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-18 |
| snort |
ET INFO Bebasid DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-18 |
| snort |
ET INFO Brahma World DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-18 |
| snort |
ET TROJAN Bortzmeyer DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-18 |
| snort |
ET INFO DnsCrypt DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-18 |
| snort |
ET INFO Artikel10 DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-18 |
| snort |
ET INFO DigitalSize DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-18 |
| snort |
ET INFO AhaDNS DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-18 |
| sigma |
Rclone Activity via Proxy |
test |
2022-10-18 |
| sigma |
PowerShell Script Change Permission Via Set-Acl |
test |
2022-10-18 |
| sigma |
Suspicious Service DACL Modification Via Set-Service Cmdlet |
test |
2022-10-18 |
| sigma |
PowerShell Set-Acl On Windows Folder |
test |
2022-10-18 |
| snort |
ET MOBILE_MALWARE Trojan-Ransom.AndroidOS.Agent.bi CnC Domain in DNS Lookup |
rev 1 |
2022-10-17 |
| snort |
ET MOBILE_MALWARE Trojan-Ransom.AndroidOS.Agent.bi CnC Domain in DNS Lookup |
rev 1 |
2022-10-17 |
| snort |
ET TROJAN Win32/Kryptik.GSKY CnC Checkin |
rev 2 |
2022-10-17 |
| suricata |
ET MALWARE Win32/Kryptik.GSKY CnC Checkin |
rev 2 |
2022-10-17 |
| sigma |
Payload Decoded and Decrypted via Built-in Utilities |
test |
2022-10-17 |
| sigma |
Abuse of Service Permissions to Hide Services Via Set-Service |
test |
2022-10-17 |
| sigma |
Possible Shadow Credentials Added |
test |
2022-10-17 |