Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects exploitation attempts targeting the TerraMaster TOS vulnerability CVE-2020-28188. This rule specifically looks for GET requests to '/include/makecvs.php' with a '?Event=' parameter, combined with common command injection payloads such as 'curl', 'wget', '.py', '.sh', 'chmod', or '_GET' in the URI query.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
2 years ago
0019