Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
4 detections
Filters
Last updated
All Time
Detection languages
3
1
Contributors
2
1
1
Categories
3
1
1
Platforms
3
1
1
Products / Services
1
1
1
1
MITRE Techniques
18,115
15,635
12,576
8,388
6,215
This rule detects network connections to Azure infrastructure (azurewebsites.net) that utilize specific API paths associated with the MiniJunk C2 framework. The paths include '/api/app/check', '/api/app/update', and '/api/app/comment', which are indicative of command and control beaconing activity.
Detects the creation of a schtask via PowerSploit or Empire Default Configuration.
Detects the creation of a schtask via PowerSploit or Empire Default Configuration.
Detects the creation of a schtask via PowerSploit or Empire Default Configuration.
