Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects DNS, TLS SNI, and HTTP Host traffic to the known ClickFix delivery domain karburatorotzhigi[.]com or the exact Cloudflare R2 hosting bucket subdomain pub-b7e3d7ad9f6e4b08a24cde45feeb417e.r2[.]dev used in UNC5142 campaign infrastructure.
avatar
Duo Tech@duotech
avatar
Detections.ai Community
3 months ago
105