| elastic |
Base64 Decoded Payload Piped to Interpreter |
production |
2026-10-02 |
| splunk |
Child Processes of Spoolsv exe |
deprecated |
2026-10-02 |
| sigma |
Renamed Schtasks Execution |
experimental |
2026-10-02 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 75 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 67 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 74 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 59 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 49 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 55 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 58 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 63 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 66 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 70 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 73 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 17 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 5 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 20 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 48 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 53 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 54 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 56 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 57 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 61 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 62 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 64 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 65 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 68 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 69 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 71 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 72 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 26 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 14 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 15 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 16 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 19 |
rev 112132 |
2026-10-01 |
| suricata |
ET MALWARE PackClient RAT C2 Information Request |
rev 2 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 21 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 22 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 51 |
rev 112132 |
2026-10-01 |
| suricata |
ET CINS Active Threat Intelligence Poor Reputation IP group 52 |
rev 112132 |
2026-10-01 |