| sigma |
Suspicious Encoded PowerShell Command Line |
test |
2023-04-06 |
| sigma |
Arbitrary MSI Download Via Devinit.EXE |
test |
2023-04-06 |
| sigma |
PowerShell Base64 Encoded Invoke Keyword |
test |
2023-04-06 |
| sigma |
PowerShell Base64 Encoded IEX Cmdlet |
test |
2023-04-06 |
| sigma |
PowerShell Base64 Encoded FromBase64String Cmdlet |
test |
2023-04-06 |
| sigma |
Suspicious Encoded And Obfuscated Reflection Assembly Load Function Call |
test |
2023-04-06 |
| snort |
ET CURRENT_EVENTS Successful Office365 Credential Phish 2023-03-31 |
rev 2 |
2023-04-05 |
| snort |
ET CURRENT_EVENTS Successful Alibaba Credential Phish 2022-11-30 |
rev 2 |
2023-04-05 |
| snort |
ET TROJAN Magecart/Skimmer - AngryBeaver Exfil Attempt |
rev 3 |
2023-04-05 |
| snort |
ET CURRENT_EVENTS Generic Credential Phish Landing Page 2023-04-05 |
rev 1 |
2023-04-05 |
| snort |
ET CURRENT_EVENTS Successful Coinbase Credential Phish 2023-01-09 |
rev 2 |
2023-04-05 |
| snort |
ET CURRENT_EVENTS Successful o365 Credential Phish 2022-12-19 |
rev 2 |
2023-04-05 |
| snort |
ET CURRENT_EVENTS Generic Antibot Phish Landing Page 2023-04-05 |
rev 1 |
2023-04-05 |
| snort |
ET TROJAN Observed Karen Ransomware CnC Checkin |
rev 2 |
2023-04-05 |
| snort |
ET TROJAN APT28/SkinnyBoy Payload Request |
rev 2 |
2023-04-05 |
| suricata |
ET PHISHING Generic Credential Phish Landing Page 2023-04-05 |
rev 1 |
2023-04-05 |
| suricata |
ET PHISHING Generic Antibot Phish Landing Page 2023-04-05 |
rev 1 |
2023-04-05 |
| suricata |
ET PHISHING Successful Alibaba Credential Phish 2022-11-30 |
rev 1 |
2023-04-05 |
| suricata |
ET PHISHING Successful o365 Credential Phish 2022-12-19 |
rev 1 |
2023-04-05 |
| suricata |
ET PHISHING Successful Office365 Credential Phish 2023-03-31 |
rev 1 |
2023-04-05 |
| suricata |
ET PHISHING Successful Coinbase Credential Phish 2023-01-09 |
rev 1 |
2023-04-05 |
| sigma |
Suspicious Browser Child Process - MacOS |
test |
2023-04-05 |
| sigma |
Potential Powershell ReverseShell Connection |
stable |
2023-04-05 |
| snort |
ET CURRENT_EVENTS Successful Facebook Credential Phish 2021-11-16 |
rev 3 |
2023-04-04 |
| snort |
ET TROJAN Aurora Stealer Admin Console In HTTP Response |
rev 2 |
2023-04-04 |
| snort |
ET CURRENT_EVENTS Successful Navy Federal Phish 2022-10-11 |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN CopperStealer - Remote Desktop - Initial Checkin |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN SoulSearcher Checkin M2 |
rev 4 |
2023-04-04 |
| snort |
ET TROJAN Hyperion Obfuscator Payload Inbound |
rev 2 |
2023-04-04 |
| snort |
ET CURRENT_EVENTS [TW] EvilProxy AiTM Microsoft HTTP HOST M6 |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN Manjusaka C2 Client Heartbeat |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN Fake Browser Update via Error Page Web Inject |
rev 1 |
2023-04-04 |
| snort |
ET TROJAN MSIL/Agent.CTK Checkin |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN Linux DarkRadiation Ransomware Telegram Activity M1 |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN Win32/RisePro CnC Server Response M3 |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN JS.ElectronBot Payload Inbound |
rev 2 |
2023-04-04 |
| snort |
ET CURRENT_EVENTS Successful Trust Wallet Phish 2022-10-11 |
rev 2 |
2023-04-04 |
| snort |
ET TROJAN Fake Browser Update via Error Page Loader |
rev 1 |
2023-04-04 |
| snort |
ET TROJAN Konni RAT Exfiltrating Data |
rev 2 |
2023-04-04 |
| snort |
ET CURRENT_EVENTS Successful Generic Credential Phish 2022-10-26 |
rev 2 |
2023-04-04 |