Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects a specific user agent string and host ('api.dropbox.com') associated with an APT40 Dropbox tool, indicating potential data exfiltration or command and control activity via Dropbox.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
1 year ago
0054