| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.raresupply .com domain |
rev 1 |
2025-04-10 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.raresupply .com domain |
rev 1 |
2025-04-10 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.raresupply .com domain |
rev 1 |
2025-04-10 |
| sigma |
Suspicious CrushFTP Child Process |
experimental |
2025-04-10 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.berubnet .com domain |
rev 1 |
2025-04-09 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.berubnet .com domain |
rev 1 |
2025-04-09 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.alabasgames .com domain |
rev 1 |
2025-04-09 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.alabasgames .com domain |
rev 1 |
2025-04-09 |
| snort |
ET EXPLOIT LastPass RCE Attempt |
rev 2 |
2025-04-09 |
| suricata |
ET EXPLOIT LastPass RCE Attempt |
rev 5 |
2025-04-09 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.alabasgames .com domain |
rev 1 |
2025-04-09 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.berubnet .com domain |
rev 1 |
2025-04-09 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.alabasgames .com domain |
rev 1 |
2025-04-09 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.berubnet .com domain |
rev 1 |
2025-04-09 |
| sigma |
Security Event Logging Disabled via MiniNt Registry Key - Process |
experimental |
2025-04-09 |
| sigma |
Security Event Logging Disabled via MiniNt Registry Key - Registry Set |
experimental |
2025-04-09 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.nettekks .com domain |
rev 1 |
2025-04-08 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.nettekks .com domain |
rev 1 |
2025-04-08 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.quality-electronics .com domain |
rev 1 |
2025-04-08 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.quality-electronics .com domain |
rev 1 |
2025-04-08 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.nettekks .com domain |
rev 1 |
2025-04-08 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.quality-electronics .com domain |
rev 1 |
2025-04-08 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.nettekks .com domain |
rev 1 |
2025-04-08 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.quality-electronics .com domain |
rev 1 |
2025-04-08 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.shakemanor .com domain |
rev 1 |
2025-04-07 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.lexgardner .com domain |
rev 1 |
2025-04-07 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.scmdatasolution .com domain |
rev 1 |
2025-04-07 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.lexgardner .com domain |
rev 1 |
2025-04-07 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.shakemanor .com domain |
rev 1 |
2025-04-07 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.scmdatasolution .com domain |
rev 1 |
2025-04-07 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.tyden .name domain |
rev 1 |
2025-04-07 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.tyden .name domain |
rev 1 |
2025-04-07 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.tyden .name domain |
rev 1 |
2025-04-07 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.shakemanor .com domain |
rev 1 |
2025-04-07 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.lexgardner .com domain |
rev 1 |
2025-04-07 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.shakemanor .com domain |
rev 1 |
2025-04-07 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.scmdatasolution .com domain |
rev 1 |
2025-04-07 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.scmdatasolution .com domain |
rev 1 |
2025-04-07 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.lexgardner .com domain |
rev 1 |
2025-04-07 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.tyden .name domain |
rev 1 |
2025-04-07 |