| snort |
ET INFO Possible JARM Fingerprinting Client Hello via tls1_2_middle_out |
rev 1 |
2022-05-25 |
| snort |
ET INFO Possible JARM Fingerprinting Client Hello via tls1_3_forward |
rev 1 |
2022-05-25 |
| snort |
ET INFO Possible JARM Fingerprinting Client Hello via tls1_3_middle_out |
rev 1 |
2022-05-25 |
| snort |
ET INFO Possible JARM Fingerprinting Client Hello via tls1_1_middle_out |
rev 1 |
2022-05-25 |
| snort |
ET INFO Possible JARM Fingerprinting Client Hello via tls1_2_reverse |
rev 1 |
2022-05-25 |
| snort |
ET INFO Possible JARM Fingerprinting Client Hello via tls1_3_reverse |
rev 1 |
2022-05-25 |
| snort |
ET INFO Possible JARM Fingerprinting Client Hello via tls1_2_bottom_half |
rev 1 |
2022-05-25 |
| snort |
ET INFO Possible JARM Fingerprinting Client Hello via tls1_2_forward |
rev 1 |
2022-05-25 |
| snort |
ET INFO Possible JARM Fingerprinting Client Hello via tls1_3_invalid |
rev 1 |
2022-05-25 |
| snort |
ET INFO Possible JARM Fingerprinting Client Hello via tls1_2_top_half |
rev 1 |
2022-05-25 |
| suricata |
ET INFO Possible JARM Fingerprinting Client Hello via tls1_2_reverse |
rev 1 |
2022-05-25 |
| suricata |
ET INFO Possible JARM Fingerprinting Client Hello via tls1_3_invalid |
rev 1 |
2022-05-25 |
| suricata |
ET INFO Possible JARM Fingerprinting Client Hello via tls1_2_middle_out |
rev 1 |
2022-05-25 |
| suricata |
ET INFO Possible JARM Fingerprinting Client Hello via tls1_2_top_half |
rev 1 |
2022-05-25 |
| suricata |
ET INFO Possible JARM Fingerprinting Client Hello via tls1_1_middle_out |
rev 1 |
2022-05-25 |
| suricata |
ET INFO Possible JARM Fingerprinting Client Hello via tls1_2_bottom_half |
rev 1 |
2022-05-25 |
| suricata |
ET INFO Possible JARM Fingerprinting Client Hello via tls1_3_middle_out |
rev 1 |
2022-05-25 |
| suricata |
ET INFO Possible JARM Fingerprinting Client Hello via tls1_3_forward |
rev 1 |
2022-05-25 |
| suricata |
ET INFO Possible JARM Fingerprinting Client Hello via tls1_3_reverse |
rev 1 |
2022-05-25 |
| suricata |
ET INFO Possible JARM Fingerprinting Client Hello via tls1_2_forward |
rev 1 |
2022-05-25 |
| sigma |
RunDLL32 Spawning Explorer |
test |
2022-05-25 |
| snort |
ET CURRENT_EVENTS Generic Credential Phish Landing Page 2022-05-24 |
rev 1 |
2022-05-24 |
| snort |
ET CURRENT_EVENTS Successful Generic Credential Phish 2022-05-24 |
rev 1 |
2022-05-24 |
| suricata |
ET PHISHING Generic Credential Phish Landing Page 2022-05-24 |
rev 1 |
2022-05-24 |
| snort |
ET TROJAN Sidewinder APT Related Domain in DNS Lookup |
rev 1 |
2022-05-23 |
| snort |
ET INFO PNG image exfiltration over raw TCP |
rev 3 |
2022-05-23 |
| snort |
ET INFO External Host Querying Erlang Port Mapper Daemon |
rev 1 |
2022-05-23 |
| suricata |
ET INFO External Host Querying Erlang Port Mapper Daemon |
rev 1 |
2022-05-23 |
| snort |
ET TROJAN DCRat Related CnC Domain in DNS Lookup |
rev 1 |
2022-05-20 |
| snort |
ET TROJAN J-Spy JSP webshell response |
rev 1 |
2022-05-20 |
| snort |
ET TROJAN DCRat Related CnC Domain in DNS Lookup |
rev 1 |
2022-05-20 |
| snort |
ET TROJAN oRAT Related CnC Domain in DNS Lookup |
rev 1 |
2022-05-20 |
| suricata |
ET MALWARE J-Spy JSP webshell response |
rev 1 |
2022-05-20 |
| sigma |
REvil Kaseya Incident Malware Patterns |
test |
2022-05-20 |
| snort |
ET CURRENT_EVENTS Spox Phishkit Landing Page Inbound |
rev 1 |
2022-05-19 |
| snort |
ET CURRENT_EVENTS Spox Phishkit HTTP POST Observed |
rev 1 |
2022-05-19 |
| snort |
ET TROJAN Transparent Tribe APT Related Domain in DNS Lookup |
rev 1 |
2022-05-19 |
| snort |
ET CURRENT_EVENTS Successful Generic Phish Observed |
rev 1 |
2022-05-19 |
| snort |
ET TROJAN ReVBShell Command Response |
rev 1 |
2022-05-19 |
| suricata |
ET PHISHING Spox Phishkit HTTP POST Observed |
rev 1 |
2022-05-19 |