| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.hamrodolakha .com domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.nursph .org domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.autoescuelaelsoto .com domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.e1racecar .com domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.jonmills .org domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.giuras .org domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.le-baux .com domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.hkmtta .org domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.infomasc .com .ar domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.rafflesiagroup .com .my domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.jusiak .net domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.mitcpw .org domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.ekhatri .net domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.hasley .org domain |
rev 1 |
2026-07-02 |
| suricata |
ET MALWARE MarkiRAT CnC Checkin Attempt |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.horizonpublishingllc .com domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.e1racecar .com domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.badrag .net domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.snapsaway .com domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.taoism-dingshun .org domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.technoreform .com domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.homegecko .org domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.uwgraduation .org domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.7btech .com domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.226vitech .com domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.hasley .org domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.luccamonti .com domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.hiswordbroadcasting .net domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.badrag .net domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.edbask .net domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.e1-racecar .com domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.laramonti .com domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.kryksyh .org domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.sostech .net .au domain |
rev 1 |
2026-07-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.savwhatsup .org domain |
rev 1 |
2026-07-02 |
| splunk |
Common Ransomware Notes |
production |
2026-07-02 |
| splunk |
Batch File Write to System32 |
production |
2026-07-02 |
| elastic |
Deprecated - Sudo Heap-Based Buffer Overflow Attempt |
deprecated |
2026-07-02 |
| elastic |
Deprecated - Unusual Process Spawned from Web Server Parent |
deprecated |
2026-07-02 |
| elastic |
Deprecated - Uncommon Destination Port Connection by Web Server |
deprecated |
2026-07-02 |