| snort |
ET POLICY [MS-PAR] Windows Printer Spooler Activity - RpcAsyncUploadPrinterDriverPackage |
rev 3 |
2021-07-20 |
| suricata |
ET INFO [MS-PAR] Windows Printer Spooler Activity - RpcAsyncUploadPrinterDriverPackage |
rev 3 |
2021-07-20 |
| suricata |
ET INFO [MS-PAR] Windows Printer Spooler Activity - RpcAsyncInstallPrinterDriverFromPackage |
rev 3 |
2021-07-20 |
| snort |
ET TROJAN Win32/NitroStealer CnC Exfil M2 |
rev 1 |
2021-07-19 |
| snort |
ET EXPLOIT CHIYU IoT Devices - Denial of Service |
rev 2 |
2021-07-19 |
| suricata |
ET EXPLOIT CHIYU IoT Devices - Denial of Service |
rev 2 |
2021-07-19 |
| snort |
ET EXPLOIT Stored XSS Vulnerability CVE-2021-31250 M4 |
rev 1 |
2021-07-16 |
| snort |
ET EXPLOIT Stored XSS Vulnerability CVE-2021-31250 M1 |
rev 2 |
2021-07-16 |
| snort |
ET EXPLOIT Stored XSS Vulnerability CVE-2021-31250 M3 |
rev 1 |
2021-07-16 |
| snort |
ET TROJAN DTLoader Binary Request M2 |
rev 2 |
2021-07-16 |
| snort |
ET EXPLOIT Stored XSS and Webpass IoT devices CVE-2021-31643 |
rev 1 |
2021-07-16 |
| snort |
ET EXPLOIT Stored XSS Vulnerability CVE-2021-31250 M2 |
rev 1 |
2021-07-16 |
| snort |
ET INFO Windows Powershell User-Agent Usage |
rev 2 |
2021-07-16 |
| snort |
ET POLICY External IP Address Request via wttr .in |
rev 1 |
2021-07-16 |
| suricata |
ET EXPLOIT Stored XSS Vulnerability CVE-2021-31250 M1 |
rev 2 |
2021-07-16 |
| suricata |
ET EXPLOIT Stored XSS Vulnerability CVE-2021-31250 M2 |
rev 1 |
2021-07-16 |
| suricata |
ET INFO Windows Powershell User-Agent Usage |
rev 1 |
2021-07-16 |
| suricata |
ET EXPLOIT Stored XSS Vulnerability CVE-2021-31250 M3 |
rev 2 |
2021-07-16 |
| suricata |
ET EXPLOIT Stored XSS and Webpass IoT devices CVE-2021-31643 |
rev 2 |
2021-07-16 |
| suricata |
ET MALWARE DTLoader Binary Request M2 |
rev 1 |
2021-07-16 |
| suricata |
ET EXPLOIT Stored XSS Vulnerability CVE-2021-31250 M4 |
rev 1 |
2021-07-16 |
| snort |
ET POLICY Chisel SOCKS Proxy Startup Observed |
rev 1 |
2021-07-15 |
| snort |
ET TROJAN MargulasRAT Keep-Alive Inbound M2 |
rev 2 |
2021-07-15 |
| snort |
ET TROJAN MargulasRAT Keep-Alive Outbound M1 |
rev 2 |
2021-07-15 |
| snort |
ET TROJAN MargulasRAT Keep-Alive Outbound M2 |
rev 2 |
2021-07-15 |
| snort |
ET TROJAN MargulasRAT Keep-Alive Inbound M1 |
rev 2 |
2021-07-15 |
| snort |
ET TROJAN Win32/Tofsee Connectivity Check M3 |
rev 1 |
2021-07-15 |
| snort |
ET TROJAN MargulasRAT Checkin M2 |
rev 2 |
2021-07-15 |
| snort |
ET TROJAN Win32/Tofsee Connectivity Check M2 |
rev 1 |
2021-07-15 |
| snort |
ET TROJAN MargulasRAT Checkin M1 |
rev 2 |
2021-07-15 |
| snort |
ET TROJAN Unk.DPRK MalDoc SysInfo CnC Exfil |
rev 1 |
2021-07-15 |
| suricata |
ET MALWARE MargulasRAT Keep-Alive Outbound M1 |
rev 1 |
2021-07-15 |
| suricata |
ET MALWARE MargulasRAT Keep-Alive Inbound M1 |
rev 1 |
2021-07-15 |
| suricata |
ET MALWARE MargulasRAT Checkin M2 |
rev 1 |
2021-07-15 |
| suricata |
ET MALWARE MargulasRAT Keep-Alive Outbound M2 |
rev 1 |
2021-07-15 |
| suricata |
ET MALWARE MargulasRAT Checkin M1 |
rev 1 |
2021-07-15 |
| suricata |
ET MALWARE MargulasRAT Keep-Alive Inbound M2 |
rev 1 |
2021-07-15 |
| snort |
ET POLICY [MS-PAR] Windows Printer Spooler Activity - RpcAsyncDeletePrinterDriver |
rev 3 |
2021-07-14 |
| snort |
ET POLICY [MS-PAR] Windows Printer Spooler Activity - RpcAsyncDeletePrinterDriverPackage |
rev 3 |
2021-07-14 |
| snort |
ET POLICY [MS-PAR] Windows Printer Spooler Activity - RpcAsyncCorePrinterDriverInstalled |
rev 3 |
2021-07-14 |