| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.auszeiter .ch domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.sarojghimire .com .np domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.wandercoach .ch domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.auszeitcoach .ch domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.patriciarivera .cl domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.lucashouse .info domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.cacdingles .com .br domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.redemanchete .com .br domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.auszeiter .ch domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.ptgrowthasia .com domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.patriciarivera .cl domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.cacdingles .com .br domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.ptgrowthasia .com domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.auszeitcoach .ch domain |
rev 1 |
2025-09-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.sarojghimire .com .np domain |
rev 1 |
2025-09-23 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.coral-shop .ro domain |
rev 1 |
2025-09-22 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.jobvn .com domain |
rev 1 |
2025-09-22 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.coral-shop .ro domain |
rev 1 |
2025-09-22 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.jobvn .com domain |
rev 1 |
2025-09-22 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.coral-shop .ro domain |
rev 1 |
2025-09-22 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.coral-shop .ro domain |
rev 1 |
2025-09-22 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.jobvn .com domain |
rev 1 |
2025-09-22 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.jobvn .com domain |
rev 1 |
2025-09-22 |
| sigma |
No Suitable Encryption Key Found For Generating Kerberos Ticket |
test |
2025-09-22 |
| sigma |
Certificate Use With No Strong Mapping |
test |
2025-09-22 |
| snort |
ET TROJAN Filch Stealer CnC Checkin |
rev 1 |
2025-09-19 |
| snort |
ET CURRENT_EVENTS Observed DNS Query to ClickFix Domain |
rev 1 |
2025-09-19 |
| snort |
ET TROJAN Prince Ransomware GET Wallpaper M1 |
rev 1 |
2025-09-19 |
| snort |
ET CURRENT_EVENTS Observed DNS Query to ClickFix Domain |
rev 1 |
2025-09-19 |
| snort |
ET TROJAN Prince Ransomware GET Wallpaper M3 |
rev 1 |
2025-09-19 |
| snort |
ET TROJAN Prince Ransomware GET Wallpaper M2 |
rev 1 |
2025-09-19 |
| snort |
ET CURRENT_EVENTS Observed DNS Query to ClickFix Domain |
rev 1 |
2025-09-19 |
| suricata |
ET EXPLOIT_KIT Observed ClickFix Domain in TLS SNI |
rev 1 |
2025-09-19 |
| suricata |
ET MALWARE Prince Ransomware GET Wallpaper M1 |
rev 1 |
2025-09-19 |
| suricata |
ET EXPLOIT_KIT Observed ClickFix Domain in TLS SNI |
rev 1 |
2025-09-19 |
| suricata |
ET MALWARE Prince Ransomware GET Wallpaper M2 |
rev 1 |
2025-09-19 |
| suricata |
ET EXPLOIT_KIT Observed DNS Query to ClickFix Domain |
rev 1 |
2025-09-19 |
| suricata |
ET EXPLOIT_KIT Observed DNS Query to ClickFix Domain |
rev 1 |
2025-09-19 |
| suricata |
ET MALWARE Prince Ransomware GET Wallpaper M3 |
rev 1 |
2025-09-19 |
| suricata |
ET EXPLOIT_KIT Observed ClickFix Domain in TLS SNI |
rev 1 |
2025-09-19 |