Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1 detection
Filters
Last updated
All Time
Detection languages
1
Contributors
1
Categories
1
1
1
1
1
Platforms
1
MITRE Techniques
18,176
15,735
12,661
8,477
6,293
Detects behavior associated with the Bitter APT group where system reconnaissance commands are executed via command shells (powershell, cmd), staged into a local file named 'abc.pdf' using output redirection, and subsequently uploaded/exfiltrated using curl within a 30-minute window.
