Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

This rule detects the Linux_Backdoor_PondRAT malware by identifying specific byte patterns associated with its 'connect_proxy', 'send_payload', and 'execute_shell_command' functions. The rule targets ELF executables.
ReversingLabs Yara@ReversingLabsYara
avatar
ReversingLabs Yara
1 year ago
0027