Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

4 detections

Detects the creation of web shells (.aspx, .ashx) in the SmarterMail web root directory by the mail service process. This is a common persistence mechanism used by attackers after exploiting vulnerabilities like CVE-2026-24423 to maintain remote access.
avatar
Danny Y@zendannyy
CrowdStrike Logscale
4 months ago
105
Detects the creation of web shells (.aspx, .ashx) in the SmarterMail web root directory by the mail service process. This is a common persistence mechanism used by attackers after exploiting vulnerabilities like CVE-2026-24423 to maintain remote access.
avatar
Ibrahim Saud@tektrix
avatar
Detections.ai Community
4 months ago
405
Detects the creation of web shells (.aspx, .ashx) in the SmarterMail web root directory by the mail service process. This is a common persistence mechanism used by attackers after exploiting vulnerabilities like CVE-2026-24423 to maintain remote access.
avatar
Danny Y@zendannyy
avatar
Detections.ai Community
5 months ago
2018
Detects the creation of web shells (.aspx, .ashx) in the SmarterMail web root directory by the mail service process. This is a common persistence mechanism used by attackers after exploiting vulnerabilities like CVE-2026-24423 to maintain remote access.
avatar
Ethan Andrews@eandrews
avatar
Federal Signal Detections
8 months ago
10099