| elastic |
Suspicious Windows Powershell Arguments |
production |
2026-10-19 |
| elastic |
Potential PowerShell Obfuscated Script via High Entropy |
production |
2026-10-19 |
| elastic |
Suspicious Content Extracted or Decompressed via Funzip |
production |
2026-10-09 |
| elastic |
Suspicious Windows Command Shell Arguments |
production |
2026-10-09 |
| splunk |
Malicious PowerShell Process - Encoded Command |
production |
2026-10-09 |
| elastic |
Potential Hex Payload Execution via Command-Line |
production |
2026-10-09 |
| elastic |
Base64 Decoded Payload Piped to Interpreter |
production |
2026-10-09 |
| elastic |
Long Base64 Encoded Command via Scripting Interpreter |
production |
2026-10-06 |
| sigma |
PowerShell Dynamic Module Invocation Via ExportedCommands Array Index - PS Script |
experimental |
2026-10-06 |
| elastic |
Potential Hex Payload Execution via Common Utility |
production |
2026-10-05 |
| elastic |
PowerShell Obfuscation via Negative Index String Reversal |
production |
2026-10-05 |
| splunk |
Linux Obfuscated Files or Information Base64 Decode |
production |
2026-10-02 |
| splunk |
Linux Decode Base64 to Shell |
production |
2026-10-02 |
| splunk |
Windows Snake Malware File Modification Crmlog |
production |
2026-10-02 |
| elastic |
ESXi Shell Command Obfuscation |
production |
2026-09-30 |
| elastic |
GenAI Process Performing Encoding/Chunking Prior to Network Activity |
production |
2026-09-25 |
| elastic |
GenAI Process Compiling or Generating Executables |
production |
2026-09-25 |
| elastic |
Suspicious PowerShell from npm Package Install |
production |
2026-09-22 |
| splunk |
Cisco Secure Firewall - Repeated Malware Downloads |
production |
2026-09-22 |
| elastic |
Potential PowerShell Obfuscation via Backtick-Escaped Variable Expansion |
production |
2026-09-18 |
| elastic |
Potential PowerShell Obfuscation via Character Array Reconstruction |
production |
2026-09-18 |
| elastic |
Potential PowerShell Obfuscation via Reverse Keywords |
production |
2026-09-18 |
| elastic |
Suspicious Execution with NodeJS |
production |
2026-09-18 |
| elastic |
Potential Antimalware Scan Interface Bypass via PowerShell |
production |
2026-09-18 |
| elastic |
Suspicious .NET Code Compilation |
production |
2026-09-18 |
| elastic |
Suspicious JavaScript Execution via Deno |
production |
2026-09-18 |
| elastic |
Potential PowerShell Obfuscation via Concatenated Dynamic Command Invocation |
production |
2026-09-18 |
| elastic |
Potential PowerShell Obfuscation via Invalid Escape Sequences |
production |
2026-09-18 |
| elastic |
Dynamic IEX Reconstruction via Method String Access |
production |
2026-09-18 |
| elastic |
Command Line Obfuscation via Whitespace Padding |
production |
2026-09-18 |
| elastic |
Decoded Payload Piped to Interpreter Detected via Defend for Containers |
production |
2026-09-18 |
| elastic |
Suspicious HTML File Creation |
production |
2026-09-18 |
| elastic |
Data Encrypted via OpenSSL Utility |
production |
2026-09-18 |
| elastic |
Encoded Payload Detected via Defend for Containers |
production |
2026-09-18 |
| elastic |
Microsoft Build Engine Started an Unusual Process |
production |
2026-09-18 |
| elastic |
Suspicious Portable Executable Encoded in Powershell Script |
production |
2026-09-18 |
| elastic |
Command Obfuscation via Unicode Modifier Letters |
production |
2026-09-18 |
| elastic |
Base16 or Base32 Encoding/Decoding Activity |
production |
2026-09-18 |
| elastic |
Potential PowerShell Obfuscation via String Concatenation |
production |
2026-09-18 |
| elastic |
Multi-Base64 Decoding Attempt from Suspicious Location |
production |
2026-09-18 |
| elastic |
ROT Encoded Python Script Execution |
production |
2026-09-18 |
| elastic |
Potential PowerShell Obfuscation via String Reordering |
production |
2026-09-18 |
| elastic |
Suspicious Powershell Script |
production |
2026-09-18 |
| elastic |
PowerShell Suspicious Payload Encoded and Compressed |
production |
2026-09-18 |
| elastic |
Potential PowerShell Obfuscation via High Numeric Character Proportion |
production |
2026-09-18 |
| elastic |
Unusual Base64 Encoding/Decoding Activity |
production |
2026-09-18 |
| elastic |
High Command Line Entropy Detected for Privileged Commands |
production |
2026-09-18 |
| elastic |
Potential Dynamic IEX Reconstruction via Environment Variables |
production |
2026-09-18 |
| elastic |
Potential PowerShell Obfuscation via Special Character Overuse |
production |
2026-09-18 |
| elastic |
PowerShell Script with Encryption/Decryption Capabilities |
production |
2026-09-18 |
| sigma |
Potential PowerShell Obfuscation Using Alias Cmdlets |
test |
2026-09-17 |
| splunk |
Windows TinyCC Shellcode Execution |
production |
2026-09-01 |
| elastic |
Deprecated - Potential PowerShell Obfuscated Script |
deprecated |
2026-08-19 |
| elastic |
Deprecated - Encoded Executable Stored in the Registry |
deprecated |
2026-08-19 |
| splunk |
Powershell Fileless Script Contains Base64 Encoded Content |
production |
2026-06-25 |
| splunk |
Wermgr Process Create Executable File |
production |
2026-05-13 |
| splunk |
Cisco Secure Firewall - Snort Rule Triggered Across Multiple Hosts |
production |
2026-05-13 |
| splunk |
Curl Execution with Percent Encoded URL |
production |
2026-05-13 |
| splunk |
Cisco Secure Firewall - Lumma Stealer Activity |
production |
2026-05-13 |
| sigma |
Suspicious File Downloaded From File-Sharing Website Via Certutil.EXE |
test |
2026-03-29 |
| sigma |
Invoke-Obfuscation Obfuscated IEX Invocation |
test |
2026-03-16 |
| sigma |
Invoke-Obfuscation Via Stdin |
test |
2026-03-16 |
| sigma |
Invoke-Obfuscation Via Use Clip |
test |
2026-03-16 |
| sigma |
Suspicious File Downloaded From Direct IP Via Certutil.EXE |
test |
2025-12-01 |
| sigma |
Suspicious Download Via Certutil.EXE |
test |
2025-12-01 |
| sigma |
Potentially Suspicious Long Filename Pattern - Linux |
experimental |
2025-11-22 |
| sigma |
Suspicious Filename with Embedded Base64 Commands |
experimental |
2025-11-22 |
| sigma |
Suspicious SYSTEM User Process Creation |
test |
2025-10-19 |
| sigma |
Turla Group Commands May 2020 |
test |
2025-10-19 |
| sigma |
Ping Hex IP |
test |
2025-10-17 |
| sigma |
File Decoded From Base64/Hex Via Certutil.EXE |
test |
2025-06-04 |
| sigma |
Potential CommandLine Obfuscation Using Unicode Characters From Suspicious Image |
test |
2025-05-30 |
| suricata |
ET INFO ObfusHTML Usage |
rev 1 |
2025-05-12 |
| snort |
ET INFO ObfusHTML Usage |
rev 1 |
2025-05-12 |
| sigma |
Potential PowerShell Obfuscation Via WCHAR/CHAR |
test |
2025-03-03 |
| suricata |
ET SHELLCODE Double BackSlash Hex Obfuscated JavaScript Heap Spray 0a0a0a0a |
rev 5 |
2025-02-04 |
| snort |
ET INFO Possible Hex Obfuscated JavaScript Heap Spray 0a0a0a0a |
rev 3 |
2025-02-04 |
| suricata |
ET HUNTING Possible Hex Obfuscated JavaScript Heap Spray 0a0a0a0a |
rev 8 |
2025-02-04 |
| snort |
ET SHELLCODE Double BackSlash Hex Obfuscated JavaScript Heap Spray 0a0a0a0a |
rev 2 |
2025-02-04 |
| snort |
ET TROJAN Obfuscated Clickfix Javascript Payload Inbound |
rev 1 |
2025-01-15 |
| suricata |
ET MALWARE Obfuscated Clickfix Javascript Payload Inbound |
rev 1 |
2025-01-15 |
| snort |
ET TROJAN Obfuscated Batch Script Inbound M2 |
rev 3 |
2024-12-24 |
| snort |
ET TROJAN Generic Powershell Loader Using Encryption Routine Inbound |
rev 1 |
2024-12-17 |
| suricata |
ET MALWARE Generic Powershell Loader Using Encryption Routine Inbound |
rev 1 |
2024-12-17 |
| suricata |
ET HUNTING Possible RTF File With Obfuscated Version Header |
rev 4 |
2024-11-29 |
| suricata |
ET HUNTING http string in hex Possible Obfuscated Exploit Redirect |
rev 4 |
2024-11-29 |
| sigma |
Renamed AutoIt Execution |
test |
2024-11-23 |
| sigma |
Potential CommandLine Obfuscation Using Unicode Characters |
test |
2024-09-05 |
| snort |
ET TROJAN ClickFix Obfuscated Payload Inbound |
rev 1 |
2024-06-20 |
| suricata |
ET MALWARE ClickFix Obfuscated Payload Inbound |
rev 1 |
2024-06-20 |
| snort |
ET CURRENT_EVENTS Possible Base64 Obfuscated Phishing Landing 2015-11-30 |
rev 4 |
2024-04-22 |
| suricata |
ET PHISHING Possible Base64 Obfuscated Phishing Landing 2015-11-30 |
rev 8 |
2024-04-20 |
| sigma |
Potential PowerShell Command Line Obfuscation |
test |
2024-04-15 |
| sigma |
Invoke-Obfuscation STDIN+ Launcher |
test |
2024-04-15 |
| sigma |
Invoke-Obfuscation Via Use Clip - Powershell |
test |
2024-04-15 |
| sigma |
Invoke-Obfuscation VAR+ Launcher |
test |
2024-04-15 |
| suricata |
ET PHISHING Obfuscated Phishing Landing 2015-11-05 |
rev 5 |
2024-04-14 |
| suricata |
ET SHELLCODE Double BackSlash Hex Obfuscated JavaScript NOP SLED |
rev 4 |
2024-04-09 |
| suricata |
ET SHELLCODE Double BackSlash Hex Obfuscated JavaScript Heap Spray 41414141 |
rev 4 |
2024-04-09 |
| suricata |
ET SHELLCODE Hex Obfuscated JavaScript NOP SLED |
rev 4 |
2024-04-09 |
| suricata |
ET SHELLCODE Double BackSlash Hex Obfuscated JavaScript Heap Spray 0d0d0d0d |
rev 4 |
2024-04-09 |
| suricata |
ET SHELLCODE Double BackSlash Hex Obfuscated JavaScript Heap Spray 0c0c0c0c |
rev 4 |
2024-04-09 |
| suricata |
ET SHELLCODE Double BackSlash Hex Obfuscated JavaScript Heap Spray 0b0b0b0b |
rev 4 |
2024-04-09 |
| suricata |
ET SHELLCODE Hex Obfuscated JavaScript Heap Spray 0c0c0c0c |
rev 4 |
2024-04-09 |
| suricata |
ET SHELLCODE Hex Obfuscated JavaScript Heap Spray 0d0d0d0d |
rev 4 |
2024-04-09 |
| suricata |
ET EXPLOIT_KIT Probable Sakura exploit kit landing page with obfuscated URLs |
rev 5 |
2024-04-08 |
| sigma |
Invoke-Obfuscation VAR+ Launcher - PowerShell Module |
test |
2024-04-05 |
| sigma |
Invoke-Obfuscation CLIP+ Launcher - PowerShell Module |
test |
2024-04-05 |
| sigma |
Invoke-Obfuscation STDIN+ Launcher - Powershell |
test |
2024-04-05 |
| sigma |
Invoke-Obfuscation VAR++ LAUNCHER OBFUSCATION - PowerShell |
test |
2024-04-05 |
| sigma |
Invoke-Obfuscation VAR++ LAUNCHER OBFUSCATION - PowerShell Module |
test |
2024-04-05 |
| sigma |
Invoke-Obfuscation VAR+ Launcher - PowerShell |
test |
2024-04-05 |
| sigma |
Invoke-Obfuscation Via Stdin - Powershell |
test |
2024-04-05 |
| sigma |
Invoke-Obfuscation STDIN+ Launcher - PowerShell Module |
test |
2024-04-05 |
| sigma |
Invoke-Obfuscation Via Use Clip - PowerShell Module |
test |
2024-04-05 |
| sigma |
Invoke-Obfuscation Via Stdin - PowerShell Module |
test |
2024-04-05 |
| sigma |
Invoke-Obfuscation CLIP+ Launcher - PowerShell |
test |
2024-04-05 |
| suricata |
ET ATTACK_RESPONSE Obfuscated Batch Script Inbound M2 |
rev 3 |
2024-04-04 |
| suricata |
ET WEB_CLIENT Possible Internet Explorer VBscript failure to handle error case information disclosure obfuscated CVE-2014-6332 |
rev 4 |
2024-03-14 |
| suricata |
ET EXPLOIT_KIT Sakura obfuscated javascript Jun 1 2013 |
rev 9 |
2024-03-14 |
| suricata |
ET EXPLOIT_KIT Probable Sakura Java applet with obfuscated URL Sep 21 2012 |
rev 5 |
2024-03-14 |
| suricata |
ET EXPLOIT_KIT Probable Sakura exploit kit landing page obfuscated applet tag Mar 1 2013 |
rev 5 |
2024-03-14 |
| suricata |
ET EXPLOIT_KIT RedKit applet + obfuscated URL Apr 7 2013 |
rev 4 |
2024-03-14 |
| suricata |
ET EXPLOIT_KIT Probable Sakura exploit kit landing page obfuscated applet tag Mar 28 2013 |
rev 5 |
2024-03-14 |
| suricata |
ET ATTACK_RESPONSE Obfuscated Eval String 5 |
rev 4 |
2024-03-13 |
| suricata |
ET ATTACK_RESPONSE Obfuscated Eval String 6 |
rev 4 |
2024-03-13 |
| suricata |
ET ATTACK_RESPONSE Obfuscated Eval String 1 |
rev 4 |
2024-03-13 |
| suricata |
ET ATTACK_RESPONSE Obfuscated JS - URL Encoded Unescape Function Call Inbound |
rev 5 |
2024-03-13 |
| suricata |
ET ATTACK_RESPONSE Obfuscated Eval String 4 |
rev 4 |
2024-03-13 |
| suricata |
ET ATTACK_RESPONSE Obfuscated Eval String 7 |
rev 4 |
2024-03-13 |
| suricata |
ET ATTACK_RESPONSE Obfuscated Eval String 2 |
rev 4 |
2024-03-13 |
| suricata |
ET SHELLCODE Hex Obfuscated JavaScript Heap Spray 0b0b0b0b |
rev 5 |
2024-03-13 |
| suricata |
ET ATTACK_RESPONSE Obfuscated Eval String 3 |
rev 4 |
2024-03-13 |
| suricata |
ET PHISHING Am3Refh Obfuscated Phishing Landing 2016-02-23 |
rev 5 |
2024-03-07 |
| suricata |
ET PHISHING Obfuscated Phishing Landing 2016-12-19 |
rev 5 |
2024-03-07 |
| suricata |
ET EXPLOIT_KIT Obfuscated LordEK Landing M2 |
rev 3 |
2024-03-07 |
| suricata |
ET WEB_CLIENT Obfuscated Javascript // ptth |
rev 7 |
2024-03-06 |
| sigma |
Certificate Exported Via Certutil.EXE |
test |
2024-03-05 |
| sigma |
File In Suspicious Location Encoded To Base64 Via Certutil.EXE |
test |
2024-03-05 |
| sigma |
File Encoded To Base64 Via Certutil.EXE |
test |
2024-03-05 |
| sigma |
Suspicious File Encoded To Base64 Via Certutil.EXE |
test |
2024-03-05 |
| suricata |
ET PHISHING Obfuscated MrxC0DER Credential Phish Landing Page |
rev 1 |
2023-06-22 |
| snort |
ET CURRENT_EVENTS Generic Obfuscated Sign In Landing Page 2023-06-22 |
rev 1 |
2023-06-22 |
| suricata |
ET PHISHING Generic Obfuscated Sign In Landing Page 2023-06-22 |
rev 1 |
2023-06-22 |
| snort |
ET CURRENT_EVENTS Obfuscated MrxC0DER Credential Phish Landing Page |
rev 1 |
2023-06-22 |
| sigma |
Potential PowerShell Obfuscation Via Reversed Commands |
test |
2023-05-31 |
| snort |
ET ATTACK_RESPONSE Obfuscated Eval String 7 |
rev 2 |
2023-04-19 |
| snort |
ET ATTACK_RESPONSE Obfuscated Eval String 3 |
rev 2 |
2023-04-19 |
| snort |
ET ATTACK_RESPONSE Obfuscated Eval String 6 |
rev 2 |
2023-04-19 |
| snort |
ET ATTACK_RESPONSE Obfuscated Eval String 1 |
rev 2 |
2023-04-19 |
| snort |
ET ATTACK_RESPONSE Obfuscated Eval String 2 |
rev 2 |
2023-04-19 |
| snort |
ET ATTACK_RESPONSE Obfuscated Eval String 5 |
rev 2 |
2023-04-19 |
| snort |
ET ATTACK_RESPONSE Obfuscated Eval String 4 |
rev 2 |
2023-04-19 |
| sigma |
Suspicious Encoded And Obfuscated Reflection Assembly Load Function Call |
test |
2023-04-06 |
| sigma |
PowerShell Base64 Encoded Invoke Keyword |
test |
2023-04-06 |
| sigma |
PUA - Potential PE Metadata Tamper Using Rcedit |
test |
2023-03-05 |
| sigma |
Potential Suspicious Execution From GUID Like Folder Names |
test |
2023-03-02 |
| snort |
ET INFO Likely Hex Encoded Executable as String - Tilde Separated |
rev 1 |
2023-02-28 |
| suricata |
ET HUNTING Likely Hex Encoded Executable as String - Backtick Separated |
rev 1 |
2023-02-28 |
| snort |
ET INFO Likely Hex Encoded Executable as String - Dash Separated |
rev 1 |
2023-02-28 |
| snort |
ET INFO Likely Hex Encoded Executable as String - Backtick Separated |
rev 1 |
2023-02-28 |
| snort |
ET INFO Likely Hex Encoded Executable as String - Pipe Separated |
rev 1 |
2023-02-28 |
| suricata |
ET HUNTING Likely Hex Encoded Executable as String - Tilde Separated |
rev 1 |
2023-02-28 |
| suricata |
ET HUNTING Likely Hex Encoded Executable as String - Comma Separated |
rev 1 |
2023-02-28 |
| suricata |
ET HUNTING Likely Hex Encoded Executable as String - Pipe Separated |
rev 1 |
2023-02-28 |
| snort |
ET INFO Likely Hex Encoded Executable as String - Octothorp Separated |
rev 1 |
2023-02-28 |
| suricata |
ET HUNTING Likely Hex Encoded Executable as String - Double Quote Separated |
rev 1 |
2023-02-28 |
| snort |
ET INFO Likely Hex Encoded Executable as String - Double Quote Separated |
rev 1 |
2023-02-28 |
| suricata |
ET HUNTING Likely Hex Encoded Executable as String - Octothorp Separated |
rev 1 |
2023-02-28 |
| snort |
ET INFO Likely Hex Encoded Executable as String - Comma Separated |
rev 1 |
2023-02-28 |
| suricata |
ET HUNTING Likely Hex Encoded Executable as String - Dash Separated |
rev 1 |
2023-02-28 |
| suricata |
ET HUNTING Likely Hex Encoded Executable as String - Percent Separated |
rev 1 |
2023-02-28 |
| snort |
ET INFO Likely Hex Encoded Executable as String - Single Quote Separated |
rev 1 |
2023-02-28 |
| suricata |
ET HUNTING Likely Hex Encoded Executable as String - Single Quote Separated |
rev 1 |
2023-02-28 |
| snort |
ET INFO Likely Hex Encoded Executable as String - Percent Separated |
rev 1 |
2023-02-28 |
| sigma |
Invoke-Obfuscation CLIP+ Launcher - System |
test |
2023-02-20 |
| sigma |
Potential Emotet Activity |
stable |
2023-02-04 |
| sigma |
ConvertTo-SecureString Cmdlet Usage Via CommandLine |
test |
2023-02-01 |
| sigma |
PowerShell Base64 Encoded WMI Classes |
test |
2023-01-30 |
| sigma |
Suspicious XOR Encoded PowerShell Command |
test |
2023-01-30 |
| sigma |
PowerShell Base64 Encoded Reflective Assembly Load |
test |
2023-01-30 |
| sigma |
Base64 Encoded PowerShell Command Detected |
test |
2023-01-26 |
| sigma |
Potential Encoded PowerShell Patterns In CommandLine |
test |
2023-01-26 |
| sigma |
Potential PowerShell Obfuscation Using Character Join |
test |
2023-01-09 |
| sigma |
Potential Winnti Dropper Activity |
test |
2023-01-05 |
| sigma |
Invoke-Obfuscation Via Use MSHTA - PowerShell Module |
test |
2023-01-04 |
| sigma |
Invoke-Obfuscation Obfuscated IEX Invocation - PowerShell Module |
test |
2022-12-31 |
| sigma |
Invoke-Obfuscation Obfuscated IEX Invocation - PowerShell |
test |
2022-12-31 |
| sigma |
Invoke-Obfuscation COMPRESS OBFUSCATION |
test |
2022-12-29 |
| sigma |
Invoke-Obfuscation VAR+ Launcher - Security |
test |
2022-11-29 |
| sigma |
Invoke-Obfuscation Via Use MSHTA - PowerShell |
test |
2022-11-29 |
| sigma |
Invoke-Obfuscation COMPRESS OBFUSCATION - Security |
test |
2022-11-29 |
| sigma |
Invoke-Obfuscation Via Use Rundll32 - System |
test |
2022-11-29 |
| sigma |
Invoke-Obfuscation VAR+ Launcher - System |
test |
2022-11-29 |
| sigma |
Invoke-Obfuscation RUNDLL LAUNCHER - System |
test |
2022-11-29 |
| sigma |
Invoke-Obfuscation Via Use Clip - Security |
test |
2022-11-29 |
| sigma |
Invoke-Obfuscation Via Use Clip - System |
test |
2022-11-29 |
| sigma |
Invoke-Obfuscation COMPRESS OBFUSCATION - PowerShell |
test |
2022-11-29 |
| sigma |
Invoke-Obfuscation Via Stdin - Security |
test |
2022-11-29 |
| sigma |
Invoke-Obfuscation Via Use Rundll32 - PowerShell |
test |
2022-11-29 |
| sigma |
Invoke-Obfuscation RUNDLL LAUNCHER - PowerShell |
test |
2022-11-29 |
| sigma |
Invoke-Obfuscation Via Use MSHTA - Security |
test |
2022-11-29 |
| sigma |
Invoke-Obfuscation COMPRESS OBFUSCATION - System |
test |
2022-11-29 |
| sigma |
Invoke-Obfuscation RUNDLL LAUNCHER - PowerShell Module |
test |
2022-11-29 |
| sigma |
Invoke-Obfuscation RUNDLL LAUNCHER - Security |
test |
2022-11-29 |
| sigma |
Invoke-Obfuscation VAR++ LAUNCHER OBFUSCATION - System |
test |
2022-11-29 |
| sigma |
Invoke-Obfuscation COMPRESS OBFUSCATION - PowerShell Module |
test |
2022-11-29 |
| sigma |
Invoke-Obfuscation STDIN+ Launcher - System |
test |
2022-11-29 |
| sigma |
Invoke-Obfuscation VAR++ LAUNCHER OBFUSCATION - Security |
test |
2022-11-29 |
| sigma |
Invoke-Obfuscation Via Stdin - System |
test |
2022-11-29 |
| sigma |
Invoke-Obfuscation Via Use Rundll32 - PowerShell Module |
test |
2022-11-29 |
| sigma |
Invoke-Obfuscation Via Use Rundll32 - Security |
test |
2022-11-29 |
| sigma |
Invoke-Obfuscation STDIN+ Launcher - Security |
test |
2022-11-29 |
| sigma |
Invoke-Obfuscation Via Use MSHTA - System |
test |
2022-11-29 |
| sigma |
Invoke-Obfuscation CLIP+ Launcher - Security |
test |
2022-11-27 |
| sigma |
Invoke-Obfuscation Obfuscated IEX Invocation - Security |
test |
2022-11-27 |
| sigma |
Operation Wocao Activity - Security |
test |
2022-11-27 |
| sigma |
Invoke-Obfuscation Obfuscated IEX Invocation - System |
test |
2022-11-27 |
| sigma |
Decode Base64 Encoded Text -MacOs |
test |
2022-11-26 |
| sigma |
Invoke-Obfuscation CLIP+ Launcher |
test |
2022-11-17 |
| sigma |
Invoke-Obfuscation VAR++ LAUNCHER OBFUSCATION |
test |
2022-11-16 |
| sigma |
Operation Wocao Activity |
test |
2022-10-09 |
| snort |
ET INFO HTTP POST Request XOR Key 73 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 08 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key ff |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key fd |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key a9 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 7f |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 50 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 8b |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key d7 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key f7 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 04 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 4c |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key cf |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key a4 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 68 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key df |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key df |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key ad |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key a1 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 56 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 55 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key b4 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 57 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 02 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key d4 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 40 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 01 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 56 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key b9 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key fa |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 83 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 68 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key db |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 50 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 9c |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 21 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key c9 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 9a |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key fd |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key c7 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 01 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 41 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 19 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 6a |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 18 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 13 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 87 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 45 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key f4 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key d4 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 6b |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key a8 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 79 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 7a |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 9b |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 37 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 97 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 4b |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 76 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 23 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 58 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key ef |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key a9 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 6a |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key e5 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 75 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 54 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key e2 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 94 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 82 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 69 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key c1 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key c4 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key ff |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key d0 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 61 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key c4 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 56 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key f7 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key f3 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 27 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 42 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 52 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key c6 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 98 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key a5 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 47 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 8b |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 95 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 83 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 91 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key ba |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 98 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 58 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key b1 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key fe |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 51 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 4b |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key cb |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 15 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 22 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key e4 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key fb |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 1e |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 3b |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key ee |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 1d |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key da |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 9b |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key dc |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key e2 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key d6 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 5a |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 9f |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key c3 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 2d |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 63 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 49 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 75 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 3e |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 1a |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 76 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key d3 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key c1 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 8d |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key b6 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key f8 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 3a |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key f4 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 4e |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 40 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 9a |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key fa |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key c3 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 59 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 97 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key d1 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key ab |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key e6 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 07 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 39 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 73 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key c9 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 60 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 71 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 71 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key bc |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key eb |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key d8 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 17 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 7d |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key f1 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key c4 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key a0 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key f3 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key af |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 71 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key b8 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 9f |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 3e |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 03 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 4d |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 2a |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key a2 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key d0 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 80 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 7a |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 3c |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 87 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 36 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key f8 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 74 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 0b |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 12 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 65 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key ca |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 64 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 2a |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 08 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 09 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key ee |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 6f |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 44 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 63 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 4d |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key c7 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 9c |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 99 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 10 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 8a |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 26 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key cc |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key dd |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 88 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key b8 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 5b |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 9d |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key e1 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 2e |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 0d |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 5a |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 68 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 96 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 3f |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key ac |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key c5 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 57 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 8a |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key d1 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 05 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 8e |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 50 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 34 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key a2 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key f2 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 92 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 4c |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 44 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key ea |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 06 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key c0 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key fd |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 9f |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 35 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 62 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 60 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 1c |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 71 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 0f |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 8f |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 05 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 86 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 4a |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key c9 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 0b |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key ae |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 5d |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key bc |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 7b |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 89 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 81 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key d1 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 70 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 9a |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 05 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 1f |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 2a |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 95 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 29 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 28 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key e5 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 2b |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key de |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 1e |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 53 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key c6 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 5e |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key f5 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key f9 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key e3 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 53 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key ec |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 6f |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 33 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 05 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 33 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key e0 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 20 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key d3 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key f1 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key c9 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 74 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 64 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key cf |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 16 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 58 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key b5 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key e3 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key d9 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 85 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key b6 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 46 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 63 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key dd |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key ba |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 14 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 6c |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key a7 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key e9 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 04 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 4d |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key f6 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 21 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 25 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 75 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key bf |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key f3 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 67 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key fe |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 64 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key aa |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 8f |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 86 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key a3 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 5e |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 82 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 16 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key fa |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key fd |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 91 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 58 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key d3 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key c8 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 50 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key ec |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key d4 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key f8 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key d6 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 66 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key ee |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 1b |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 35 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 38 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key e3 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 47 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 20 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 99 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key b1 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 2f |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key a6 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key ec |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 7c |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 5b |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 7f |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key d1 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key b3 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key de |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 81 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key c3 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 78 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 82 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key ec |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 90 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 7a |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 6d |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 12 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key ab |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key e1 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key f7 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key d5 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 28 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 92 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key d6 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 13 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 39 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 9c |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key e8 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 41 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 03 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 29 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 9b |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 4c |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 34 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 49 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 6b |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key dc |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 65 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 1e |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 03 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 6e |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key cf |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key a3 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key b6 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 88 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 6a |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key be |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 12 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key a7 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 23 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 1b |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 89 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 59 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 95 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 38 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key a3 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 8a |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key a6 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key c2 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 26 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 09 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 4f |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key b7 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 32 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 99 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key c2 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key c5 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 6e |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 9e |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key aa |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 0a |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 19 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 5f |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 8d |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 2c |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key e0 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 9a |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 84 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key da |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 8e |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 42 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key c1 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key e7 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 53 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 21 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 4a |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key c7 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 45 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key c5 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 8f |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 7e |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 08 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 3c |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 54 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key ab |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key b4 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 7c |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 59 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 7c |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key d0 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key e8 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key f0 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 17 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key b0 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 22 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 7b |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key d5 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 18 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key ce |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key f6 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key cb |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key cd |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 93 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key f1 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 0f |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key cc |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 0d |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 6e |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 2a |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key cd |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 5a |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key ad |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 0f |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key ca |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 2e |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key ed |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 54 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 19 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 28 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 21 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key e8 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 74 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 80 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 1c |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 4e |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 1c |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 7d |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 02 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 06 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 39 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key a5 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 8f |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 13 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 55 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 5d |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key c1 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 85 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 7e |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key be |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key af |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 3b |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key d2 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key ce |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key c3 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 0d |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 51 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 0c |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 97 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key b7 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 84 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 20 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 56 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key c0 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key cc |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 77 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 6f |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 55 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 93 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key ac |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 44 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 49 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 34 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key ff |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 1d |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 0d |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 07 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key d5 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key b5 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key f5 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key db |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 53 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 5c |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 79 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 30 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key eb |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key ed |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 3a |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 51 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key f6 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 0e |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 36 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key fe |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key c6 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 57 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key e1 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 80 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 93 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 5b |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key db |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 98 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 78 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 1f |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key b3 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 4b |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key ee |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 69 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 72 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 8c |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 1e |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 10 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 24 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key ae |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 90 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key d6 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 11 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key bf |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key bb |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 1f |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 41 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key a0 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key b1 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 27 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 6d |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 83 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 9e |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 63 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key ab |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 14 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key fb |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 0b |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 24 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 87 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 93 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 15 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key ad |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key bb |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 55 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key e6 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key e7 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 31 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key e6 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key f5 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 0b |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 43 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 5e |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key b7 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key de |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 36 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 17 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key d0 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key dc |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key b5 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 30 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 37 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 31 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key c0 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 5d |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key ea |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key f3 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 25 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 02 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key d3 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 03 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 57 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key f4 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 5c |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key a1 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key fe |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 79 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 48 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 86 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 1a |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 01 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 91 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 91 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 7a |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key a6 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 64 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 46 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key f8 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key aa |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 5c |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 9c |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 61 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 14 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 4d |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 22 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 4f |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 33 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 96 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key ea |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key ca |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 48 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 39 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key bd |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key f9 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 7c |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key bb |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 4f |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key de |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 44 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key a4 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 7e |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 9f |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key ad |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 04 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 90 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 0c |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 08 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key d2 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 94 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 23 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 0e |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key b9 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key bb |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 0a |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 69 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key e5 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 2c |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 6c |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key b2 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key d8 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 10 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 89 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 77 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key f1 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 84 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 3d |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key a8 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 52 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 5f |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key b0 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 60 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 1f |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 13 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key b8 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key c8 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 2b |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key d4 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key d9 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key d2 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 0c |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 46 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 16 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 20 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key b3 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key c2 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key d9 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 2c |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 76 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 7b |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key d8 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key f2 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 4a |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 18 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 48 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 3b |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 1d |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key d8 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 2c |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 3f |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 1a |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 7b |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key bd |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key ce |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 46 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 48 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key a5 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key f6 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 6d |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key ea |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 43 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 66 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 6b |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 76 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 33 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 0a |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key eb |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key b4 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key bd |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 87 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key f0 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 65 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 16 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key fc |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key fb |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 09 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 11 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 94 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key c8 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 11 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 9b |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 66 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 30 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 52 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 1b |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key b2 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key d7 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 2e |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 7f |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 5d |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 34 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 3d |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 37 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key f0 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key b0 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key b8 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 29 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 72 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 9e |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key bf |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 8c |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 6e |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 81 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 6f |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 35 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key a8 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 79 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key a7 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 59 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 73 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key a1 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key dd |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 77 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key ef |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key cc |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 90 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 8c |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key c4 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key a1 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 4e |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 6a |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key b9 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 26 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 07 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 96 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 97 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key a3 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key e7 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 61 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 43 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 43 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 4b |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key c0 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key ff |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key fb |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key d2 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key da |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key ca |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 62 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 45 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 5f |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 5c |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key ef |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key af |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key a7 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key fc |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key a8 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 70 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 47 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 41 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 4f |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 09 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 6c |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 2b |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 85 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 8e |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 6c |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 36 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 62 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 30 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key f7 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 25 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 92 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 15 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 7d |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 42 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 12 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key fc |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 2f |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 06 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 54 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key e5 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key aa |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key cf |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 8b |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 07 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 78 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 89 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 85 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key eb |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 9d |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key a5 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 38 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 02 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 67 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 32 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key f0 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 88 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 3e |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key f4 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 62 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 94 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key d5 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 3a |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 3f |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key ae |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 32 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 80 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 7f |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 40 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 6b |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key b2 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 51 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key c2 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 5e |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 25 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 75 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 78 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key bd |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key f2 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 2d |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key e4 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key e9 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 1b |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key f2 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 95 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 69 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 72 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key ed |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key cd |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 4a |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 3a |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 68 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 2d |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key a6 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key e8 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 6d |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key c5 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key e6 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key a9 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 99 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key ce |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 23 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 9d |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key f9 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 3d |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 29 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key bc |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 0e |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 3f |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 19 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 31 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 2b |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key be |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key b2 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 32 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key dd |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 7e |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 01 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 18 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 84 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key c6 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 8e |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 28 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 47 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 0e |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 42 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 8d |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key c7 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 61 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key e3 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key bc |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key a0 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key b0 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key e7 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 35 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key cb |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key cb |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 26 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key f9 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 8b |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key a4 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key ae |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key df |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 17 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 27 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key b3 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 38 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 4e |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key d7 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 52 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key ba |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key ef |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 2d |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 1d |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 10 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key a2 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key da |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key b7 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key b5 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key b6 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key df |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key af |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 81 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 83 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 24 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key b4 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key a2 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 0a |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key b1 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key e9 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 24 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 04 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key ac |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 8a |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 0c |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 14 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 4c |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key e9 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 06 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 2f |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 31 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key c8 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 27 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 96 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key e2 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key fa |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 9e |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key ed |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key b9 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 3c |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 82 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 3d |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 1c |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 2e |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 1a |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 65 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 9d |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key be |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 70 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 0f |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key e0 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key d7 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key e2 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key db |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 3e |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 73 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 70 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 2f |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 86 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key e1 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key a0 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 66 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 49 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 3c |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key cd |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 22 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 67 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key d9 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 74 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key dc |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key ac |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 8c |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 40 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 98 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 88 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key fc |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key f5 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 3b |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 5f |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 11 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key a9 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 37 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 5b |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key 60 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 5a |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 8d |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 77 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key 45 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 7d |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 67 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP POST Request XOR Key a4 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP POST Request XOR Key e0 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 92 |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key ba |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key 72 |
rev 2 |
2022-08-10 |
| snort |
ET INFO HTTP GET Request XOR Key bf |
rev 2 |
2022-08-10 |
| suricata |
ET HUNTING HTTP GET Request XOR Key 15 |
rev 2 |
2022-08-10 |
| snort |
ET ATTACK_RESPONSE Obfuscated JS - URL Encoded Unescape Function Call Inbound |
rev 3 |
2022-06-10 |
| sigma |
Password Protected ZIP File Opened (Suspicious Filenames) |
test |
2022-05-09 |
| sigma |
Password Protected ZIP File Opened |
test |
2022-05-09 |
| sigma |
Password Protected ZIP File Opened (Email Attachment) |
test |
2022-05-09 |
| sigma |
Suspicious Get-Variable.exe Creation |
test |
2022-04-23 |
| sigma |
Invoke-Obfuscation Via Use MSHTA |
test |
2022-03-08 |
| sigma |
Decode Base64 Encoded Text |
test |
2021-11-27 |
| elastic |
Hex Encoding/Decoding Activity |
deprecated |
2021-04-15 |
| elastic |
Base64 Encoding/Decoding Activity |
deprecated |
2021-04-15 |
| snort |
ET CURRENT_EVENTS Obfuscated LordEK Landing M2 |
rev 2 |
2019-08-02 |
| snort |
ET INFO Possible RTF File With Obfuscated Version Header |
rev 1 |
2019-01-30 |
| snort |
ET CURRENT_EVENTS Obfuscated Phishing Landing 2016-12-19 |
rev 2 |
2017-12-29 |
| snort |
ET CURRENT_EVENTS Am3Refh Obfuscated Phishing Landing 2016-02-23 |
rev 2 |
2017-10-12 |
| snort |
ET INFO http string in hex Possible Obfuscated Exploit Redirect |
rev 3 |
2017-04-14 |
| snort |
ET CURRENT_EVENTS Obfuscated Phishing Landing 2015-11-05 |
rev 1 |
2015-11-05 |
| snort |
ET WEB_CLIENT Possible Internet Explorer VBscript failure to handle error case information disclosure obfuscated CVE-2014-6332 |
rev 1 |
2014-11-15 |
| snort |
ET CURRENT_EVENTS Probable Sakura exploit kit landing page obfuscated applet tag Mar 1 2013 |
rev 4 |
2013-12-09 |
| snort |
ET CURRENT_EVENTS Sakura obfuscated javascript Jun 1 2013 |
rev 7 |
2013-06-04 |
| snort |
ET CURRENT_EVENTS RedKit applet + obfuscated URL Apr 7 2013 |
rev 1 |
2013-04-09 |
| snort |
ET CURRENT_EVENTS Probable Sakura exploit kit landing page obfuscated applet tag Mar 28 2013 |
rev 2 |
2013-04-02 |
| snort |
ET CURRENT_EVENTS Probable Sakura Java applet with obfuscated URL Sep 21 2012 |
rev 2 |
2012-11-07 |
| snort |
ET WEB_CLIENT Obfuscated Javascript // ptth |
rev 3 |
2012-09-26 |
| snort |
ET CURRENT_EVENTS Probable Sakura exploit kit landing page with obfuscated URLs |
rev 1 |
2012-09-06 |
| snort |
ET SHELLCODE Double BackSlash Hex Obfuscated JavaScript Heap Spray 0b0b0b0b |
rev 1 |
2011-07-14 |
| snort |
ET SHELLCODE Double BackSlash Hex Obfuscated JavaScript NOP SLED |
rev 1 |
2011-07-14 |
| snort |
ET SHELLCODE Hex Obfuscated JavaScript NOP SLED |
rev 1 |
2011-07-14 |
| snort |
ET SHELLCODE Hex Obfuscated JavaScript Heap Spray 0c0c0c0c |
rev 1 |
2011-07-14 |
| snort |
ET SHELLCODE Double BackSlash Hex Obfuscated JavaScript Heap Spray 0c0c0c0c |
rev 1 |
2011-07-14 |
| snort |
ET SHELLCODE Hex Obfuscated JavaScript Heap Spray 0d0d0d0d |
rev 1 |
2011-07-14 |
| snort |
ET SHELLCODE Double BackSlash Hex Obfuscated JavaScript Heap Spray 41414141 |
rev 2 |
2011-07-14 |
| snort |
ET SHELLCODE Double BackSlash Hex Obfuscated JavaScript Heap Spray 0d0d0d0d |
rev 1 |
2011-07-14 |
| snort |
ET SHELLCODE Hex Obfuscated JavaScript Heap Spray 0b0b0b0b |
rev 1 |
2011-07-14 |
| sentinel |
Base64 encoded Windows process command-lines (Normalized Process Events) |
Scheduled |
— |