Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

This query was originally published in the threat analytics report, Sysrv botnet evolution.
Sysrv is a Go-based botnet that targets both Windows and Linux servers, and steals resources to mine cryptocurrency.
The following query finds instances of remote code execution on a vulnerable Linux server.
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
0043