Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
324 detections
Filters
Last updated
All Time
Detection languages
323
1
Contributors
86
53
49
47
46
Categories
283
117
117
70
64
Platforms
300
16
8
6
3
Products / Services
301
209
30
18
10
MITRE Techniques
113
100
86
64
33
CVEs
1
1
IDS Classtypes
171
51
43
18
14
IDS Protocols
2,431
868
408
324
97
ET MOBILE_MALWARE Klopatra CnC Domain in DNS Lookup (adsservice2 .org)
ET MOBILE_MALWARE Klopatra CnC Domain in DNS Lookup (adsservices .uk)
ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sanguen .courses)
ET INFO Remote Monitoring and Management (RMM) Tool in DNS Lookup (gorelo-rmm .azurewebsites .net)
ET MALWARE TA569 Gholoader CnC Domain in DNS Lookup (secure .kasindramaharaj .com)
ET INFO Observed RMM Domain in DNS Lookup (meshcentral .com)
ET INFO Remote Monitoring and Management (RMM) Tool in DNS Lookup (gorelo .tech)
ET EXPLOIT_KIT LandUpdate808 Domain in DNS Lookup (virtvan .com)
ET ATTACK_RESPONSE PowerShell String Base64 Encoded Text.Encoding (V4dC5FbmNvZ) in DNS TXT Reponse
ET MALWARE TA569 Middleware Server Domain in DNS Lookup (sessionstorexint .com)
ET MALWARE TA569 Middleware Server Domain in DNS Lookup (taskrunnersrvmod .com)
ET INFO Blockchain RPC Domain in DNS Lookup (api .avax .network)
ET ATTACK_RESPONSE PowerShell String Base64 Encoded Invoke-RestMethod (dm9rZS1SZXN0TWV0) in DNS TXT Reponse
ET INFO Observed DNS Query to Actor Abused Online Service Domain (getenjoyment .net)
ET EXPLOIT_KIT LandUpdate808 Domain in DNS Lookup (saeam .com)
ET EXPLOIT_KIT LandUpdate808 Domain in DNS Lookup (edentista .com)
ET EXPLOIT_KIT LandUpdate808 Domain in DNS Lookup (dolmain .com)
ET EXPLOIT_KIT LandUpdate808 Domain in DNS Lookup (imf1 .com)
ET ATTACK_RESPONSE PowerShell String Base64 Encoded Invoke-RestMethod (Zva2UtUmVzdE1ld) in DNS TXT Reponse
ET MALWARE TA569 Middleware Server Domain in DNS Lookup (parserapiprocess .com)
ET MALWARE TA569 Middleware Server Domain in DNS Lookup (buildtoolsrvcore .com)
Page 14 of 16