| suricata |
ET MALWARE OSX/AppleJeus CitrineSleet Domain in DNS Lookup |
rev 2 |
2024-11-26 |
| suricata |
ET MALWARE OSX/AppleJeus CitrineSleet Domain in TLS SNI |
rev 2 |
2024-11-26 |
| suricata |
ET EXPLOIT Possible Uniview IPC2322lb Authentication Bypass Attempt - Admin Password Reset Attempt |
rev 2 |
2024-11-26 |
| suricata |
ET WEB_SPECIFIC_APPS Oracle JSF2 Path Traversal Attempt |
rev 5 |
2024-11-26 |
| suricata |
ET INFO Possible External IP Lookup myip.kz |
rev 7 |
2024-11-26 |
| suricata |
ET EXPLOIT phpMyAdmin 4.8.1 - Local File Inclusion |
rev 5 |
2024-11-26 |
| sigma |
Suspicious Process By Web Server Process |
test |
2024-11-26 |
| snort |
ET EXPLOIT Linksys E1500/E2500 Remote Command Execution 3 |
rev 1 |
2024-11-25 |
| suricata |
ET EXPLOIT Linksys E1500/E2500 Remote Command Execution 3 |
rev 1 |
2024-11-25 |
| snort |
ET RETIRED ZenRAT Status Response |
rev 2 |
2024-11-24 |
| snort |
ET RETIRED ZenRAT CnC OK Response |
rev 2 |
2024-11-24 |
| suricata |
ET RETIRED ZenRAT Status Response |
rev 2 |
2024-11-24 |
| suricata |
ET RETIRED ZenRAT CnC OK Response |
rev 2 |
2024-11-24 |
| sigma |
WinDivert Driver Load |
test |
2024-11-23 |
| sigma |
HackTool - PCHunter Execution |
test |
2024-11-23 |
| sigma |
PUA - Fast Reverse Proxy (FRP) Execution |
test |
2024-11-23 |
| sigma |
PUA- IOX Tunneling Tool Execution |
test |
2024-11-23 |
| sigma |
HackTool - LocalPotato Execution |
test |
2024-11-23 |
| sigma |
PUA - Nimgrab Execution |
test |
2024-11-23 |
| sigma |
HackTool - Impersonate Execution |
test |
2024-11-23 |
| sigma |
HackTool - HandleKatz LSASS Dumper Execution |
test |
2024-11-23 |
| sigma |
HackTool - GMER Rootkit Detector and Remover Execution |
test |
2024-11-23 |
| sigma |
Hacktool Execution - Imphash |
test |
2024-11-23 |
| sigma |
Renamed NetSupport RAT Execution |
test |
2024-11-23 |
| sigma |
Renamed PAExec Execution |
test |
2024-11-23 |
| sigma |
HackTool - SharpEvtMute DLL Load |
test |
2024-11-23 |
| sigma |
Vulnerable WinRing0 Driver Load |
test |
2024-11-23 |
| sigma |
Vulnerable HackSys Extreme Vulnerable Driver Load |
test |
2024-11-23 |
| sigma |
PUA - Process Hacker Driver Load |
test |
2024-11-23 |
| sigma |
PUA - System Informer Driver Load |
test |
2024-11-23 |
| sigma |
HackTool Named File Stream Created |
test |
2024-11-23 |
| sigma |
GALLIUM IOCs |
test |
2024-11-23 |
| sigma |
HackTool - Stracciatella Execution |
test |
2024-11-23 |
| sigma |
Potential Compromised 3CXDesktopApp Execution |
test |
2024-11-23 |
| sigma |
Renamed AutoIt Execution |
test |
2024-11-23 |
| sigma |
Remote Access Tool - NetSupport Execution From Unusual Location |
test |
2024-11-23 |
| sigma |
Malicious DLL Load By Compromised 3CXDesktopApp |
test |
2024-11-23 |
| sigma |
HackTool - CoercedPotato Execution |
test |
2024-11-23 |
| sigma |
PUA - System Informer Execution |
test |
2024-11-23 |
| sigma |
PUA - Process Hacker Execution |
test |
2024-11-23 |