| sigma |
Tamper Windows Defender Remove-MpPreference |
test |
2022-08-05 |
| sigma |
Tamper Windows Defender Remove-MpPreference - ScriptBlockLogging |
test |
2022-08-05 |
| snort |
ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup |
rev 1 |
2022-08-04 |
| snort |
ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup |
rev 1 |
2022-08-04 |
| snort |
ET TROJAN Win64/Spy.Agent.EU CnC Checkin |
rev 1 |
2022-08-04 |
| snort |
ET MALWARE Win32/ReImageRepair.T CnC Checkin |
rev 1 |
2022-08-04 |
| snort |
ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup |
rev 1 |
2022-08-04 |
| snort |
ET TROJAN Win32/Agent.UOI CnC Checkin |
rev 1 |
2022-08-04 |
| snort |
ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup |
rev 1 |
2022-08-04 |
| snort |
ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup |
rev 1 |
2022-08-04 |
| snort |
ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup |
rev 1 |
2022-08-04 |
| snort |
ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup |
rev 1 |
2022-08-04 |
| snort |
ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup |
rev 1 |
2022-08-04 |
| snort |
ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup |
rev 1 |
2022-08-04 |
| snort |
ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup |
rev 1 |
2022-08-04 |
| snort |
ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup |
rev 1 |
2022-08-04 |
| snort |
ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup |
rev 1 |
2022-08-04 |
| snort |
ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup |
rev 1 |
2022-08-04 |
| snort |
ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup |
rev 1 |
2022-08-04 |
| snort |
ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup |
rev 1 |
2022-08-04 |
| snort |
ET MOBILE_MALWARE Android Banker Octo CnC Domain in DNS Lookup |
rev 1 |
2022-08-04 |
| snort |
ET TROJAN Win32.ClipBanker.uhn Exfil |
rev 1 |
2022-08-04 |
| suricata |
ET ADWARE_PUP Win32/ReImageRepair.T CnC Checkin |
rev 1 |
2022-08-04 |
| suricata |
ET MALWARE Win64/Spy.Agent.EU CnC Checkin |
rev 1 |
2022-08-04 |
| sigma |
User Removed From Group With CA Policy Modification Access |
test |
2022-08-04 |
| sigma |
User Added To Group With CA Policy Modification Access |
test |
2022-08-04 |
| snort |
ET TROJAN Observed DNS Query to Known Knotweed/SubZero Domain |
rev 1 |
2022-08-03 |
| snort |
ET GAMES Solaris2 Checkin |
rev 1 |
2022-08-03 |
| snort |
ET TROJAN Observed DNS Query to Known Knotweed/SubZero Domain |
rev 1 |
2022-08-03 |
| snort |
ET TROJAN Ave Maria/Warzone RAT Credential Exfil |
rev 1 |
2022-08-03 |
| snort |
ET TROJAN Observed DNS Query to Known Knotweed/SubZero Domain |
rev 1 |
2022-08-03 |
| suricata |
ET MALWARE Observed DNS Query to Known Knotweed/SubZero Domain |
rev 1 |
2022-08-03 |
| suricata |
ET MALWARE Ave Maria/Warzone RAT Credential Exfil |
rev 1 |
2022-08-03 |
| suricata |
ET MALWARE Observed DNS Query to Known Knotweed/SubZero Domain |
rev 1 |
2022-08-03 |
| suricata |
ET MALWARE Observed DNS Query to Known Knotweed/SubZero Domain |
rev 1 |
2022-08-03 |
| elastic |
Suspicious Process from Conhost |
deprecated |
2022-08-03 |
| sigma |
Suspicious Remote Logon with Explicit Credentials |
test |
2022-08-03 |
| sigma |
DiagTrackEoP Default Login Username |
test |
2022-08-03 |
| sigma |
Password Reset By User Account |
test |
2022-08-03 |
| snort |
ET CURRENT_EVENTS Successful Generic Phish 2022-08-01 |
rev 1 |
2022-08-02 |