Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

Silence.EDA Detection

Yamato Security Hayabusa@YamatoSecurityHayabusa

•updated Jun 24, 2025•1•0•10

Detects Silence EmpireDNSAgent as described in the Group-IP report

Sigma

Tags

TA0002 - Execution T1059.001 - PowerShell TA0011 - Command and Control T1071.004 - DNS T1572 - Protocol Tunneling TA0040 - Impact T1529 - System Shutdown/Reboot G0091 - Silence S0363 - Empire Powershell Script Execution Windowsattack.executionattack.t1059.001attack.command-and-controlattack.t1071.004attack.t1572attack.impactattack.t1529attack.g0091attack.s0363

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?