Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

FlexibleFerret C2 Infrastructure Detection

Effy Elden@ineffyble

•updated Nov 26, 2025•0•25

Detects network communication to known FlexibleFerret C2 infrastructure. The rule is valid.

Sigma

Tags

T1071.001 - Web Protocols T1095 - Non-Application Layer Protocol TA0011 - Command and Control Firewall Eventattack.command_and_controlattack.t1071.001attack.t1095

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?