| sigma |
OpenCanary - HTTP GET Request |
test |
2024-03-08 |
| sigma |
OpenCanary - FTP Login Attempt |
test |
2024-03-08 |
| sigma |
OpenCanary - MSSQL Login Attempt Via SQLAuth |
test |
2024-03-08 |
| sigma |
OpenCanary - GIT Clone Request |
test |
2024-03-08 |
| sigma |
OpenCanary - MSSQL Login Attempt Via Windows Authentication |
test |
2024-03-08 |
| sigma |
OpenCanary - HTTP POST Login Attempt |
test |
2024-03-08 |
| sigma |
OpenCanary - HTTPPROXY Login Attempt |
test |
2024-03-08 |
| sigma |
OpenCanary - MySQL Login Attempt |
test |
2024-03-08 |
| sigma |
OpenCanary - REDIS Action Command Attempt |
test |
2024-03-08 |
| sigma |
OpenCanary - NTP Monlist Request |
test |
2024-03-08 |
| sigma |
OpenCanary - SIP Request |
test |
2024-03-08 |
| sigma |
OpenCanary - SNMP OID Request |
test |
2024-03-08 |
| sigma |
OpenCanary - SSH New Connection Attempt |
test |
2024-03-08 |
| sigma |
OpenCanary - SMB File Open Request |
test |
2024-03-08 |
| sigma |
OpenCanary - TFTP Request |
test |
2024-03-08 |
| sigma |
OpenCanary - VNC Connection Attempt |
test |
2024-03-08 |
| sigma |
OpenCanary - Telnet Login Attempt |
test |
2024-03-08 |
| sigma |
OpenCanary - SSH Login Attempt |
test |
2024-03-08 |
| snort |
ET TROJAN DFKRAT CnC Checkin M2 |
rev 1 |
2024-03-07 |
| snort |
ET TROJAN DFKRAT CnC Checkin M1 |
rev 1 |
2024-03-07 |
| snort |
ET TROJAN Splinter Red Team Tool Activity |
rev 1 |
2024-03-07 |
| snort |
ET TROJAN DFKRAT CnC Checkin M3 |
rev 1 |
2024-03-07 |
| suricata |
ET ADWARE_PUP Zenotecnico Spyware Install Report |
rev 9 |
2024-03-07 |
| suricata |
ET ADWARE_PUP Loadmoney.A Checkin 3 |
rev 7 |
2024-03-07 |
| suricata |
ET EXPLOIT_KIT EITest SocEng Inject Jan 15 2017 EXE Download |
rev 5 |
2024-03-07 |
| suricata |
ET WEB_CLIENT Tech Support Phone Scam Landing Jun 29 M3 |
rev 5 |
2024-03-07 |
| suricata |
ET MALWARE Steganographic Encoded WAV File Inbound via HTTP M2 |
rev 3 |
2024-03-07 |
| suricata |
ET PHISHING Successful Webmail Account Upgrade Phish 2016-07-21 |
rev 6 |
2024-03-07 |
| suricata |
ET EXPLOIT Pwdump3e Password Hash Retrieval port 445 |
rev 12 |
2024-03-07 |
| suricata |
ET HUNTING Possibly Suspicious Request for Putty.exe from Non-Standard Download Location |
rev 4 |
2024-03-07 |
| suricata |
ET CURRENT_EVENTS [Fireeye] Backdoor.HTTP.BEACON.[CSBundle NYTIMES Server] |
rev 4 |
2024-03-07 |
| suricata |
ET ADWARE_PUP Outerinfo.com Spyware Activity |
rev 11 |
2024-03-07 |
| suricata |
ET PHISHING Successful Chase Phish M3 2016-08-26 |
rev 4 |
2024-03-07 |
| suricata |
ET P2P Morpheus Install ini Download |
rev 12 |
2024-03-07 |
| suricata |
ET INFO Inbound PowerShell Capable of Enumerating Internal Network via WMI |
rev 4 |
2024-03-07 |
| suricata |
ET PHISHING Possible Successful Google Drive Phishing Domain Feb 02 2017 |
rev 5 |
2024-03-07 |
| suricata |
ET PHISHING TeamIPwned/Hellion Phishing Landing 2016-08-30 |
rev 4 |
2024-03-07 |
| suricata |
ET WEB_CLIENT Tech Support Phone Scam Landing 2016-07-21 M1 |
rev 4 |
2024-03-07 |
| suricata |
ET WEB_CLIENT Tech Support Phone Scam Landing M1 2016-08-12 |
rev 4 |
2024-03-07 |
| suricata |
ET WEB_CLIENT Microsoft Tech Support Scam M2 2016-09-15 |
rev 4 |
2024-03-07 |