| sigma |
Windows Spooler Service Suspicious Binary Load |
test |
2022-06-02 |
| sigma |
Use of Remote.exe |
test |
2022-06-02 |
| sigma |
Suspicious Desktopimgdownldr Target File |
test |
2022-06-02 |
| sigma |
Fax Service DLL Search Order Hijack |
test |
2022-06-02 |
| sigma |
Added Owner To Application |
test |
2022-06-02 |
| sigma |
Application AppID Uri Configuration Changes |
test |
2022-06-02 |
| snort |
ET INFO [TW] Uri Contains Likely Urlpages Web Hosting Technique |
rev 1 |
2022-06-01 |
| snort |
ET TROJAN Pandorahvnc/Pikolo RAT Checkin Activity |
rev 1 |
2022-06-01 |
| snort |
ET CURRENT_EVENTS Facebook Credential Phish Landing Page M2 2022-06-01 |
rev 1 |
2022-06-01 |
| snort |
ET CURRENT_EVENTS Successful Generic Credential Phish 2022-06-01 |
rev 1 |
2022-06-01 |
| snort |
ET CURRENT_EVENTS Facebook Credential Phish Landing Page M1 2022-06-01 |
rev 1 |
2022-06-01 |
| snort |
ET EXPLOIT Scriptcase 9.7 Arbitrary File Upload Attempt |
rev 1 |
2022-06-01 |
| suricata |
ET PHISHING Facebook Credential Phish Landing Page M2 2022-06-01 |
rev 1 |
2022-06-01 |
| suricata |
ET MALWARE Pandorahvnc/Pikolo RAT Checkin Activity |
rev 1 |
2022-06-01 |
| suricata |
ET HUNTING [TW] Uri Contains Likely Urlpages Web Hosting Technique |
rev 1 |
2022-06-01 |
| suricata |
ET EXPLOIT Scriptcase 9.7 Arbitrary File Upload Attempt |
rev 1 |
2022-06-01 |
| suricata |
ET PHISHING Facebook Credential Phish Landing Page M1 2022-06-01 |
rev 1 |
2022-06-01 |
| sigma |
Application Using Device Code Authentication Flow |
test |
2022-06-01 |
| sigma |
Use of Wfc.exe |
test |
2022-06-01 |
| sigma |
Use of VisualUiaVerifyNative.exe |
test |
2022-06-01 |
| sigma |
Applications That Are Using ROPC Authentication Flow |
test |
2022-06-01 |
| sigma |
UtilityFunctions.ps1 Proxy Dll |
test |
2022-05-28 |
| sigma |
Pubprn.vbs Proxy Execution |
test |
2022-05-28 |
| snort |
ET CURRENT_EVENTS Facebook Credential Phish Landing Page M2 2022-05-27 |
rev 1 |
2022-05-27 |
| snort |
ET CURRENT_EVENTS ING Credential Phish Landing Page 2022-05-27 |
rev 1 |
2022-05-27 |
| snort |
ET CURRENT_EVENTS Faebook Credential Phish Landing Page M1 2022-05-27 |
rev 1 |
2022-05-27 |
| snort |
ET CURRENT_EVENTS Successful Generic Credential Phish 2022-05-27 |
rev 1 |
2022-05-27 |
| snort |
ET CURRENT_EVENTS Generic Credential Phish Landing Page 2022-05-27 |
rev 1 |
2022-05-27 |
| suricata |
ET PHISHING Successful Generic Credential Phish 2022-05-27 |
rev 1 |
2022-05-27 |
| suricata |
ET PHISHING Generic Credential Phish Landing Page 2022-05-27 |
rev 1 |
2022-05-27 |
| suricata |
ET PHISHING ING Credential Phish Landing Page 2022-05-27 |
rev 1 |
2022-05-27 |
| suricata |
ET PHISHING Faebook Credential Phish Landing Page M1 2022-05-27 |
rev 1 |
2022-05-27 |
| sigma |
Suspicious TSCON Start as SYSTEM |
test |
2022-05-27 |
| sigma |
Taskmgr as LOCAL_SYSTEM |
test |
2022-05-27 |
| snort |
ET CURRENT_EVENTS Successful Microsoft Credential Phish 2022-05-26 |
rev 1 |
2022-05-26 |
| snort |
ET CURRENT_EVENTS Credito Emiliano Credential Phish Landing Page 2022-05-26 |
rev 1 |
2022-05-26 |
| snort |
ET TROJAN MSIL/Spy.Agent.CVT CnC Exfil |
rev 1 |
2022-05-26 |
| suricata |
ET MALWARE MSIL/Spy.Agent.CVT CnC Exfil |
rev 1 |
2022-05-26 |
| suricata |
ET PHISHING Successful Microsoft Credential Phish 2022-05-26 |
rev 1 |
2022-05-26 |
| suricata |
ET PHISHING Credito Emiliano Credential Phish Landing Page 2022-05-26 |
rev 1 |
2022-05-26 |