Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
3 detections
Filters
Last updated
All Time
Detection languages
2
1
Contributors
2
1
Categories
2
2
1
1
1
Platforms
2
1
1
Products / Services
3
MITRE Techniques
18,123
15,639
12,581
8,394
6,215
Detects Shellshock bash CGI exploitation attempts
Detects Shellshock bash CGI exploitation attempts
Detects network traffic to an ERMAC banking trojan exfiltration server by identifying a unique 'WWW-Authenticate' header in the HTTP response. This indicates a client device is communicating with a known ERMAC command and control server for data exfiltration.
