Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

3 detections

Detects unusually large outbound data transfers (over 500MB) that may indicate data exfiltration preceding Chaos ransomware deployment, consistent with STAC4749 incidents where data was likely stolen before encryption.
avatar
Duo Tech@duotech
avatar
Detections.ai Community
3 months ago
8017
Detects unusually large outbound data transfers (over 500MB) that may indicate data exfiltration preceding Chaos ransomware deployment, consistent with STAC4749 incidents where data was likely stolen before encryption.
avatar
Duo Tech@duotech
avatar
Detections.ai Community
3 months ago
2010
Detects unusually large outbound data transfers (over 500MB) that may indicate data exfiltration preceding Chaos ransomware deployment, consistent with STAC4749 incidents where data was likely stolen before encryption.
avatar
Duo Tech@duotech
avatar
Detections.ai Community
3 months ago
308