| snort |
ET TROJAN Win32/Injector.BBYK Checkin |
rev 1 |
2022-10-26 |
| suricata |
ET MALWARE Win32/Injector.BBYK Checkin |
rev 1 |
2022-10-26 |
| suricata |
ET PHISHING Generic Credential Phish Landing Page 2022-10-26 |
rev 1 |
2022-10-26 |
| sigma |
PUA - PAExec Default Named Pipe |
test |
2022-10-26 |
| sigma |
PAExec Service Installation |
test |
2022-10-26 |
| sigma |
Suspicious PowerShell Mailbox Export to Share - PS |
test |
2022-10-26 |
| sigma |
Suspicious PowerShell Mailbox Export to Share |
test |
2022-10-26 |
| sigma |
PsExec Service File Creation |
test |
2022-10-26 |
| snort |
ET INFO WeDNS DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-25 |
| snort |
ET INFO WeDNS DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-25 |
| snort |
ET TROJAN Cobalt Strike Related Domain in DNS Lookup |
rev 1 |
2022-10-25 |
| snort |
ET INFO MyDNS .network DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-25 |
| snort |
ET INFO Public Array DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-25 |
| snort |
ET INFO Safe Surfer DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-25 |
| snort |
ET INFO Switch DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-25 |
| snort |
ET INFO Ryan Palmer DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-25 |
| snort |
ET INFO Qihoo 360 DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-25 |
| snort |
ET TROJAN Cobalt Strike Related Domain in DNS Lookup |
rev 1 |
2022-10-25 |
| snort |
ET INFO Null31 DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-25 |
| snort |
ET INFO Restena DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-25 |
| snort |
ET INFO Rezhajul DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-25 |
| snort |
ET INFO Usable Privacy DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-25 |
| snort |
ET INFO Public Array DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-25 |
| snort |
ET INFO TheRifleMan DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-25 |
| suricata |
ET MALWARE Cobalt Strike Related Domain in DNS Lookup |
rev 1 |
2022-10-25 |
| suricata |
ET MALWARE Cobalt Strike Related Domain in DNS Lookup |
rev 1 |
2022-10-25 |
| sigma |
OpenSSH Server Listening On Socket |
test |
2022-10-25 |
| snort |
ET CURRENT_EVENTS Successful BoA Credential Phish 2022-10-24 |
rev 1 |
2022-10-24 |
| snort |
ET CURRENT_EVENTS Successful Citizens Bank Credential Phish 2022-10-24 |
rev 1 |
2022-10-24 |
| suricata |
ET PHISHING Successful Citizens Bank Credential Phish 2022-10-24 |
rev 1 |
2022-10-24 |
| suricata |
ET PHISHING Successful BoA Credential Phish 2022-10-24 |
rev 1 |
2022-10-24 |
| sigma |
Suspicious Service DACL Modification Via Set-Service Cmdlet - PS |
test |
2022-10-24 |
| sigma |
MSI Installation From Web |
test |
2022-10-23 |
| sigma |
Audit CVE Event |
test |
2022-10-22 |
| sigma |
Potential Initial Access via DLL Search Order Hijacking |
test |
2022-10-21 |
| snort |
ET INFO Plan9-dns DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-20 |
| snort |
ET INFO Open Internet DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-20 |
| snort |
ET INFO Mullvad DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-20 |
| snort |
ET TROJAN W32/Nymaim Checkin M2 |
rev 8 |
2022-10-20 |
| snort |
ET INFO PureDNS DNS Over HTTPS Certificate Inbound |
rev 1 |
2022-10-20 |