Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Identifies devices with Signal software flagged by Defender Vulnerability Management for CVE-2026-113380 (RingRTC before 2.72.0, hangup commands dropped when call state machine queue is flooded). Exposure rule, not an exploit detection; results are deduplicated per device and sorted by recent Signal activity.
avatar
ills3c Intel&Coffee@Ills3C
avatar
Detections.ai Community
5 days ago
004