| snort |
ET TROJAN ELF/MooBot Mirai DDoS Variant Server Response M2 |
rev 2 |
2021-12-09 |
| suricata |
ET MALWARE ELF/MooBot Mirai DDoS Variant Server Keep Alive |
rev 2 |
2021-12-09 |
| suricata |
ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M3 |
rev 2 |
2021-12-09 |
| suricata |
ET MALWARE ELF/MooBot Mirai DDoS Variant Server Response M2 |
rev 2 |
2021-12-09 |
| snort |
ET INFO Python SimpleHTTP ServerBanner |
rev 2 |
2021-12-08 |
| suricata |
ET INFO Python SimpleHTTP ServerBanner |
rev 2 |
2021-12-08 |
| snort |
ET TROJAN NOBELIUM Cobalt Strike CnC Domain in DNS Lookup |
rev 2 |
2021-12-07 |
| snort |
ET TROJAN NOBELIUM Cobalt Strike CnC Domain in DNS Lookup |
rev 2 |
2021-12-07 |
| snort |
ET EXPLOIT MS-Officecmd Remote Code Execution Attempt |
rev 2 |
2021-12-07 |
| snort |
ET TROJAN NOBELIUM - Cobalt Strike Malleable Profile M1 |
rev 2 |
2021-12-07 |
| suricata |
ET MALWARE NOBELIUM Cobalt Strike CnC Domain in DNS Lookup |
rev 1 |
2021-12-07 |
| suricata |
ET EXPLOIT MS-Officecmd Remote Code Execution Attempt |
rev 2 |
2021-12-07 |
| suricata |
ET MALWARE NOBELIUM Cobalt Strike CnC Domain in DNS Lookup |
rev 1 |
2021-12-07 |
| snort |
ET TROJAN TA505 P2P CnC Checkin |
rev 1 |
2021-12-06 |
| suricata |
ET MALWARE TA505 P2P CnC Checkin |
rev 1 |
2021-12-06 |
| snort |
ET EXPLOIT VMware vCenter Unauthorized File Read Inbound |
rev 1 |
2021-12-05 |
| snort |
ET EXPLOIT VMware vCenter SSRF Inbound |
rev 1 |
2021-12-05 |
| suricata |
ET EXPLOIT VMware vCenter SSRF Inbound |
rev 1 |
2021-12-05 |
| suricata |
ET EXPLOIT VMware vCenter Unauthorized File Read Inbound |
rev 1 |
2021-12-05 |
| snort |
ET INFO Terse Request for .txt - Likely Hostile |
rev 1 |
2021-12-03 |
| snort |
ET TROJAN Win64/Agent.NL Variant CnC Activity |
rev 2 |
2021-12-03 |
| snort |
ET TROJAN Matanbuchus Loader CnC M2 |
rev 3 |
2021-12-02 |
| sigma |
Enabled User Right in AD to Control User Objects |
test |
2021-12-02 |
| snort |
ET INFO curl User-Agent to Dotted Quad |
rev 2 |
2021-12-01 |
| suricata |
ET HUNTING curl User-Agent to Dotted Quad |
rev 1 |
2021-12-01 |
| snort |
ET POLICY NetSupport GeoLocation Lookup Request |
rev 1 |
2021-11-30 |
| snort |
ET TROJAN W32.DarkVNC Variant Checkin |
rev 1 |
2021-11-30 |
| suricata |
ET MALWARE W32.DarkVNC Variant Checkin |
rev 1 |
2021-11-30 |
| sigma |
Turla PNG Dropper Service |
test |
2021-11-30 |
| sigma |
Turla Service Install |
test |
2021-11-30 |
| sigma |
StoneDrill Service Install |
test |
2021-11-30 |
| sigma |
USB Device Plugged |
test |
2021-11-30 |
| snort |
ET POLICY owncloud .online Hosted Site Observed in TLS SNI |
rev 2 |
2021-11-29 |
| snort |
ET TROJAN MSIL/Bobik CnC Traffic |
rev 2 |
2021-11-29 |
| snort |
ET POLICY Owncloud Observed Self Signed TLS Certificate |
rev 2 |
2021-11-29 |
| snort |
ET TROJAN VNCStartServer BOT Variant CnC Beacon |
rev 3 |
2021-11-29 |
| snort |
ET CURRENT_EVENTS Possible BulletProofLink Phishkit Activity - Redirect |
rev 1 |
2021-11-29 |
| suricata |
ET MALWARE VNCStartServer BOT Variant CnC Beacon |
rev 3 |
2021-11-29 |
| suricata |
ET INFO Owncloud Observed Self Signed TLS Certificate |
rev 2 |
2021-11-29 |
| suricata |
ET PHISHING Possible BulletProofLink Phishkit Activity - Redirect |
rev 2 |
2021-11-29 |