| sigma |
Exploited CVE-2020-10189 Zoho ManageEngine |
test |
2023-01-21 |
| sigma |
Suspicious Shells Spawn by Java Utility Keytool |
test |
2023-01-21 |
| snort |
ET MOBILE_MALWARE Android/Spy.Vultur.A CnC Domain in DNS Lookup |
rev 1 |
2023-01-20 |
| snort |
ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Rewardsteal.e CnC Domain in DNS Lookup |
rev 1 |
2023-01-20 |
| snort |
ET MOBILE_MALWARE Trojan-Spy.AndroidOS.SmsThief.ta CnC Domain in DNS Lookup |
rev 1 |
2023-01-20 |
| snort |
ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Rewardsteal.e CnC Domain in DNS Lookup |
rev 1 |
2023-01-20 |
| snort |
ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Banbra.aa CnC Domain in DNS Lookup |
rev 1 |
2023-01-20 |
| snort |
ET MOBILE_MALWARE Backdoor.AndroidOS.Xhunter.a CnC Domain in DNS Lookup |
rev 1 |
2023-01-20 |
| snort |
ET MOBILE_MALWARE Android.Backdoor.866.origin CnC Domain in DNS Lookup |
rev 1 |
2023-01-20 |
| snort |
ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Agent.ld CnC Domain in DNS Lookup |
rev 1 |
2023-01-20 |
| snort |
ET MOBILE_MALWARE Android/Spy.SmsSpy.XC CnC Domain in DNS Lookup |
rev 1 |
2023-01-20 |
| snort |
ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Agent.ld CnC Domain in DNS Lookup |
rev 1 |
2023-01-20 |
| snort |
ET MOBILE_MALWARE Android/Spy.Agent.AKS CnC Domain in DNS Lookup |
rev 1 |
2023-01-20 |
| snort |
ET MOBILE_MALWARE Android/Spy.Banker.BOF CnC Domain in DNS Lookup |
rev 1 |
2023-01-20 |
| sigma |
Scheduled Task Deletion |
test |
2023-01-20 |
| sigma |
Potential Centos Web Panel Exploitation Attempt - CVE-2022-44877 |
test |
2023-01-20 |
| sigma |
Suspicious PowerShell Download - PoshModule |
test |
2023-01-20 |
| sigma |
Github New Secret Created |
test |
2023-01-20 |
| sigma |
Remote PowerShell Session (PS Module) |
test |
2023-01-20 |
| sigma |
AD Groups Or Users Enumeration Using PowerShell - PoshModule |
test |
2023-01-20 |
| sigma |
Github Outside Collaborator Detected |
test |
2023-01-20 |
| snort |
ET INFO RustDesk Domain in DNS Lookup |
rev 1 |
2023-01-19 |
| suricata |
ET INFO RustDesk Domain in DNS Lookup |
rev 1 |
2023-01-19 |
| sigma |
Query Usage To Exfil Data |
test |
2023-01-19 |
| sigma |
Atbroker Registry Change |
test |
2023-01-19 |
| sigma |
Java Payload Strings |
test |
2023-01-19 |
| sigma |
SQLite Firefox Profile Data DB Access |
test |
2023-01-19 |
| sigma |
Powershell XML Execute Command |
test |
2023-01-19 |
| sigma |
SQLite Chromium Profile Data DB Access |
test |
2023-01-19 |
| sigma |
Raw Paste Service Access |
test |
2023-01-19 |
| snort |
ET TROJAN Magecart Skimmer CSS |
rev 2 |
2023-01-18 |
| snort |
ET INFO Observed Nighthawk 404 Server Response |
rev 1 |
2023-01-18 |
| suricata |
ET MALWARE Magecart Skimmer CSS |
rev 2 |
2023-01-18 |
| sigma |
Flush Iptables Ufw Chain |
test |
2023-01-18 |
| snort |
ET TROJAN Magecart Loader Javascript |
rev 1 |
2023-01-17 |
| snort |
ET INFO DDoS-Guard Hosted Content |
rev 1 |
2023-01-17 |
| snort |
ET TROJAN Andariel Elf Backdoor Activity |
rev 1 |
2023-01-17 |
| suricata |
ET MALWARE Andariel Elf Backdoor Activity |
rev 1 |
2023-01-17 |
| sigma |
The Windows Defender Firewall Service Failed To Load Group Policy |
test |
2023-01-17 |
| snort |
ET INFO OneNote Notebook Downloaded via Powershell |
rev 2 |
2023-01-16 |