| snort |
ET WEB_SPECIFIC_APPS VTENext Session Cookie Information Disclosure via Touch Module |
rev 1 |
2025-08-26 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.miguelrsilva .com domain |
rev 1 |
2025-08-26 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.kalinnikova .com domain |
rev 1 |
2025-08-26 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.kalinnikova .com domain |
rev 1 |
2025-08-26 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.miguelrsilva .com domain |
rev 1 |
2025-08-26 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.miguelrsilva .com domain |
rev 1 |
2025-08-26 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.kalinnikova .com domain |
rev 1 |
2025-08-26 |
| suricata |
ET WEB_SPECIFIC_APPS VTENext Session Cookie Information Disclosure via Touch Module |
rev 1 |
2025-08-26 |
| suricata |
ET WEB_SPECIFIC_APPS Commvault Code Injection via User description Property |
rev 1 |
2025-08-26 |
| snort |
ET TROJAN KoiStealer Payload Reqeust |
rev 1 |
2025-08-25 |
| snort |
ET ATTACK_RESPONSE KoiStealer Payload Inbound |
rev 1 |
2025-08-25 |
| suricata |
ET MALWARE KoiStealer Payload Reqeust |
rev 1 |
2025-08-25 |
| suricata |
ET ATTACK_RESPONSE KoiStealer Payload Inbound |
rev 1 |
2025-08-25 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.technova .ro domain |
rev 1 |
2025-08-24 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.dirtchicvt .com domain |
rev 1 |
2025-08-24 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.technova .ro domain |
rev 1 |
2025-08-24 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.dirtchicvt .com domain |
rev 1 |
2025-08-24 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.technova .ro domain |
rev 1 |
2025-08-24 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.dirtchicvt .com domain |
rev 1 |
2025-08-24 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.technova .ro domain |
rev 1 |
2025-08-24 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.dirtchicvt .com domain |
rev 1 |
2025-08-24 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.amango .org domain |
rev 1 |
2025-08-23 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.amango .org domain |
rev 1 |
2025-08-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.amango .org domain |
rev 1 |
2025-08-23 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.amango .org domain |
rev 1 |
2025-08-23 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.ne-t .org domain |
rev 1 |
2025-08-22 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.gotoenail .com domain |
rev 1 |
2025-08-22 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.ne-t .org domain |
rev 1 |
2025-08-22 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.gotoenail .com domain |
rev 1 |
2025-08-22 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.ne-t .org domain |
rev 1 |
2025-08-22 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.gotoenail .com domain |
rev 1 |
2025-08-22 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.gotoenail .com domain |
rev 1 |
2025-08-22 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.ne-t .org domain |
rev 1 |
2025-08-22 |
| sigma |
Suspicious Get Local Groups Information |
test |
2025-08-22 |
| sigma |
Suspicious Uninstall of Windows Defender Feature via PowerShell |
experimental |
2025-08-22 |
| sigma |
Suspicious Get Local Groups Information - PowerShell |
test |
2025-08-22 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.cryptellegram .com domain |
rev 1 |
2025-08-21 |
| snort |
ET TROJAN TA450 CnC Responding with Encryption Key/IV |
rev 1 |
2025-08-21 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.cryptellegram .com domain |
rev 1 |
2025-08-21 |
| suricata |
ET MALWARE TA450 CnC Responding with Encryption Key/IV |
rev 1 |
2025-08-21 |