Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

3 detections

STAC4749 Golang Implant TLS Certificate with Hardcoded CA Issuer (loop-CA/connectify-CA/james-bond-CA)
avatar
Duo Tech@duotech
avatar
Detections.ai Community
3 months ago
103
STAC4749 sc5.exe reverse SOCKS proxy C2 domain query (legio.name)
avatar
Duo Tech@duotech
avatar
Detections.ai Community
3 months ago
002
STAC4749 DNS Query to Known C2 Domain or Cloudflare Workers.dev C2 Subdomain
avatar
Duo Tech@duotech
avatar
Detections.ai Community
3 months ago
001