Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
3 detections
Filters
Last updated
All Time
Detection languages
1
1
1
Contributors
1
1
1
Categories
2
1
1
1
1
Platforms
2
1
Products / Services
1
1
MITRE Techniques
18,115
15,635
12,576
8,388
6,215
Detects DNS queries to landing pages associated with the PDF Editor.exe & OneStart.
This query will hunt for files matching the current abuse.ch recent threat feed based on Sha256. Currently the query is set up to analyze the last day worth of events, but this is configurable using the MaxAge variable.
Yara rule that detects Thanatos ransomware.
