| sigma |
Cisco Collect Data |
test |
2023-01-04 |
| sigma |
Cisco Crypto Commands |
test |
2023-01-04 |
| snort |
ET TROJAN linux.backdoor.wordpressexploit file upload test |
rev 1 |
2023-01-03 |
| snort |
ET TROJAN linux.backdoor.wordpressexploit.1 JS backdoor retrieval |
rev 1 |
2023-01-03 |
| snort |
ET TROJAN linux.backdoor.wordpressexploit.2 CnC Checkin |
rev 1 |
2023-01-03 |
| snort |
ET TROJAN linux.backdoor.wordpressexploit.2 JS backdoor retrieval |
rev 1 |
2023-01-03 |
| snort |
ET TROJAN ViperSoftX HTTP CnC Activity |
rev 1 |
2023-01-03 |
| snort |
ET CURRENT_EVENTS Successful American First CU Credential Phish 2023-01-03 |
rev 1 |
2023-01-03 |
| suricata |
ET MALWARE linux.backdoor.wordpressexploit.1 JS backdoor retrieval |
rev 1 |
2023-01-03 |
| suricata |
ET MALWARE linux.backdoor.wordpressexploit.2 JS backdoor retrieval |
rev 1 |
2023-01-03 |
| suricata |
ET MALWARE linux.backdoor.wordpressexploit.2 CnC Checkin |
rev 1 |
2023-01-03 |
| suricata |
ET PHISHING Successful American First CU Credential Phish 2023-01-03 |
rev 1 |
2023-01-03 |
| suricata |
ET MALWARE linux.backdoor.wordpressexploit file upload test |
rev 1 |
2023-01-03 |
| sigma |
Suspicious PowerShell WindowStyle Option |
test |
2023-01-03 |
| sigma |
Suspicious PowerShell Invocations - Generic - PowerShell Module |
test |
2023-01-03 |
| sigma |
Suspicious PowerShell Invocations - Generic |
test |
2023-01-03 |
| sigma |
Pulse Secure Attack CVE-2019-11510 |
test |
2023-01-02 |
| sigma |
Ruby Inline Command Execution |
test |
2023-01-02 |
| sigma |
Malicious ShellIntel PowerShell Commandlets |
test |
2023-01-02 |
| sigma |
Log4j RCE CVE-2021-44228 in Fields |
test |
2023-01-02 |
| sigma |
Fortinet CVE-2018-13379 Exploitation |
test |
2023-01-02 |
| sigma |
Oracle WebLogic Exploit |
test |
2023-01-02 |
| sigma |
Citrix Netscaler Attack CVE-2019-19781 |
test |
2023-01-02 |
| sigma |
Confluence Exploitation CVE-2019-3398 |
test |
2023-01-02 |
| sigma |
Suspicious Rejected SMB Guest Logon From IP |
test |
2023-01-02 |
| sigma |
CVE-2020-10148 SolarWinds Orion API Auth Bypass |
test |
2023-01-02 |
| sigma |
Cisco ASA FTD Exploit CVE-2020-3452 |
test |
2023-01-02 |
| sigma |
CVE-2020-5902 F5 BIG-IP Exploitation Attempt |
test |
2023-01-02 |
| sigma |
Citrix ADS Exploitation CVE-2020-8193 CVE-2020-8195 |
test |
2023-01-02 |
| sigma |
Fortinet CVE-2021-22123 Exploitation |
test |
2023-01-02 |
| sigma |
Pulse Connect Secure RCE Attack CVE-2021-22893 |
stable |
2023-01-02 |
| sigma |
Exploitation of CVE-2021-26814 in Wazuh |
test |
2023-01-02 |
| sigma |
ADSelfService Exploitation |
test |
2023-01-02 |
| sigma |
CVE-2021-40539 Zoho ManageEngine ADSelfService Plus Exploit |
test |
2023-01-02 |
| sigma |
Grafana Path Traversal Exploitation CVE-2021-43798 |
test |
2023-01-02 |
| sigma |
DEWMODE Webshell Access |
test |
2023-01-02 |
| sigma |
Zimbra Collaboration Suite Email Server Unauthenticated RCE |
test |
2023-01-02 |
| sigma |
CVE-2022-31656 VMware Workspace ONE Access Auth Bypass |
test |
2023-01-02 |
| sigma |
Potential OWASSRF Exploitation Attempt - Webserver |
test |
2023-01-02 |
| sigma |
OWASSRF Exploitation Attempt Using Public POC - Webserver |
test |
2023-01-02 |