| sigma |
Suspicious FromBase64String Usage On Gzip Archive - Process Creation |
test |
2022-12-23 |
| sigma |
Browser Started with Remote Debugging |
test |
2022-12-23 |
| sigma |
Suspicious X509Enrollment - Ps Script |
test |
2022-12-23 |
| sigma |
Suspicious X509Enrollment - Process Creation |
test |
2022-12-23 |
| sigma |
Suspicious FromBase64String Usage On Gzip Archive - Ps Script |
test |
2022-12-23 |
| snort |
ET CURRENT_EVENTS Socios Credential Phish Landing Page 2022-12-22 |
rev 1 |
2022-12-22 |
| suricata |
ET PHISHING Socios Credential Phish Landing Page 2022-12-22 |
rev 1 |
2022-12-22 |
| sigma |
RottenPotato Like Attack Pattern |
test |
2022-12-22 |
| sigma |
OWASSRF Exploitation Attempt Using Public POC - Proxy |
test |
2022-12-22 |
| sigma |
Potential OWASSRF Exploitation Attempt - Proxy |
test |
2022-12-22 |
| snort |
ET TROJAN Win32/Generik.BUTNSNA Checkin |
rev 1 |
2022-12-21 |
| sigma |
User Added To Root/Sudoers Group Using Usermod |
test |
2022-12-21 |
| snort |
ET TROJAN Charming Kitten APT Related DNS Activity |
rev 1 |
2022-12-20 |
| sigma |
ETW Logging Disabled In .NET Processes - Registry |
test |
2022-12-20 |
| sigma |
Potential Privilege Escalation Using Symlink Between Osk and Cmd |
test |
2022-12-20 |
| sigma |
Creation Of An User Account |
test |
2022-12-20 |
| snort |
ET CURRENT_EVENTS Suncoast Credit Union Credential Phish Landing Page 2022-12-19 |
rev 1 |
2022-12-19 |
| suricata |
ET PHISHING Suncoast Credit Union Credential Phish Landing Page 2022-12-19 |
rev 1 |
2022-12-19 |
| sigma |
Potential Credential Dumping Via LSASS SilentProcessExit Technique |
test |
2022-12-19 |
| sigma |
Potential DLL Sideloading Via comctl32.dll |
test |
2022-12-19 |
| sigma |
Potential Privilege Escalation Attempt Via .Exe.Local Technique |
test |
2022-12-19 |
| sigma |
Potential Persistence Attempt Via ErrorHandler.Cmd |
test |
2022-12-19 |
| sigma |
Potential DCOM InternetExplorer.Application DLL Hijack - Image Load |
test |
2022-12-18 |
| sigma |
Potential Credential Dumping Attempt Via PowerShell Remote Thread |
test |
2022-12-18 |
| sigma |
Potential DCOM InternetExplorer.Application DLL Hijack |
test |
2022-12-18 |
| sigma |
AWS Suspicious SAML Activity |
test |
2022-12-18 |
| sigma |
Google Cloud Kubernetes Admission Controller |
test |
2022-12-18 |
| sigma |
Screen Capture with Xwd |
test |
2022-12-18 |
| sigma |
Network Sniffing - Linux |
test |
2022-12-18 |
| sigma |
AWS Glue Development Endpoint Activity |
test |
2022-12-18 |
| sigma |
Serv-U Exploitation CVE-2021-35211 by DEV-0322 |
test |
2022-12-18 |
| sigma |
Azure Kubernetes Admission Controller |
test |
2022-12-18 |
| sigma |
Azure Unusual Authentication Interruption |
test |
2022-12-18 |
| sigma |
Multifactor Authentication Interrupted |
test |
2022-12-18 |
| sigma |
Linux Keylogging with Pam.d |
test |
2022-12-18 |
| sigma |
Azure Kubernetes CronJob |
test |
2022-12-18 |
| snort |
ET TROJAN Win32/PSW.LdPinch CnC Checkin |
rev 1 |
2022-12-16 |
| snort |
ET CURRENT_EVENTS Successful Made in China Credential Phish 2022-12-14 |
rev 1 |
2022-12-15 |
| suricata |
ET PHISHING Successful Made in China Credential Phish 2022-12-14 |
rev 1 |
2022-12-15 |
| sigma |
NotPetya Ransomware Activity |
test |
2022-12-15 |