| snort |
ET TROJAN Win32/RM3Loader Server Response |
rev 1 |
2022-10-07 |
| snort |
ET CURRENT_EVENTS DHL Credential Phish Landing Page 2022-10-07 |
rev 1 |
2022-10-07 |
| suricata |
ET MALWARE TrueBot/Silence.Downlaoder Screenshot Post M1 |
rev 1 |
2022-10-07 |
| suricata |
ET PHISHING Binance Credential Phish Landing Page 2022-10-07 |
rev 1 |
2022-10-07 |
| suricata |
ET ADWARE_PUP Win32/Adware.WDJiange.A CnC Checkin M1 |
rev 1 |
2022-10-07 |
| suricata |
ET ADWARE_PUP Win32/Adware.Agent.NSF CnC Checkin M1 |
rev 1 |
2022-10-07 |
| suricata |
ET PHISHING Successful Outlook Phish 2022-10-06 |
rev 1 |
2022-10-07 |
| sigma |
Formbook Process Creation |
test |
2022-10-06 |
| snort |
ET TROJAN AllcomeClipper CnC Checkin |
rev 1 |
2022-10-05 |
| suricata |
ET MALWARE AllcomeClipper CnC Checkin |
rev 1 |
2022-10-05 |
| sigma |
Suspicious Commands Linux |
test |
2022-10-05 |
| sigma |
AWS EC2 VM Export Failure |
test |
2022-10-05 |
| sigma |
Suspicious Named Error |
test |
2022-10-05 |
| sigma |
Sign-ins by Unknown Devices |
test |
2022-10-05 |
| sigma |
OMIGOD SCX RunAsProvider ExecuteShellCommand |
test |
2022-10-05 |
| sigma |
Setuid and Setgid |
test |
2022-10-05 |
| sigma |
Pass the Hash Activity 2 |
stable |
2022-10-05 |
| sigma |
Source Code Enumeration Detection by Keyword |
test |
2022-10-05 |
| sigma |
Suspicious LDAP-Attributes Used |
test |
2022-10-05 |
| sigma |
Metasploit Or Impacket Service Installation Via SMB PsExec |
test |
2022-10-05 |
| sigma |
Connection Proxy |
test |
2022-10-05 |
| sigma |
PetitPotam Suspicious Kerberos TGT Request |
test |
2022-10-05 |
| sigma |
Silenttrinity Stager Msbuild Activity |
test |
2022-10-05 |
| sigma |
KrbRelayUp Service Installation |
test |
2022-10-05 |
| sigma |
OMIGOD SCX RunAsProvider ExecuteScript |
test |
2022-10-05 |
| sigma |
AWS RDS Master Password Change |
test |
2022-10-05 |
| sigma |
CVE-2021-1675 Print Spooler Exploitation IPC Access |
test |
2022-10-05 |
| sigma |
Sudo Privilege Escalation CVE-2019-14287 |
test |
2022-10-05 |
| sigma |
HH.EXE Initiated HTTP Network Connection |
test |
2022-10-05 |
| elastic |
GCP Kubernetes Rolebindings Created or Patched |
deprecated |
2022-10-04 |
| sigma |
SyncAppvPublishingServer Execute Arbitrary PowerShell Code |
test |
2022-10-04 |
| sigma |
PSAsyncShell - Asynchronous TCP Reverse Shell |
test |
2022-10-04 |
| sigma |
Suspicious File Drop by Exchange |
test |
2022-10-04 |
| snort |
ET CURRENT_EVENTS Facebook Credential Phish Landing Page 2022-08-22 |
rev 1 |
2022-10-03 |
| snort |
ET CURRENT_EVENTS Generic Credential Phish Landing Page 2022-08-23 |
rev 1 |
2022-10-03 |
| snort |
ET CURRENT_EVENTS Union Bank Credential Phish Landing Page 2022-08-29 |
rev 1 |
2022-10-03 |
| snort |
ET CURRENT_EVENTS Generic Credential Phish Landing Page 2022-10-03 |
rev 1 |
2022-10-03 |
| snort |
ET CURRENT_EVENTS Generic Credential Phish Landing Page M2 2022-09-28 |
rev 2 |
2022-10-03 |
| snort |
ET CURRENT_EVENTS Successful Generic Credential Phish Landing Page 2022-07-26 |
rev 1 |
2022-10-03 |
| snort |
ET CURRENT_EVENTS Microsoft Excel Credential Phish Landing Page 2022-10-03 |
rev 1 |
2022-10-03 |