Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
22 detections
Filters
Last updated
All Time
Detection languages
12
10
Contributors
18
2
2
Categories
10
10
10
8
8
Platforms
12
10
Products / Services
12
12
9
2
MITRE Techniques
18,127
15,648
12,596
8,407
6,232
IDS Classtypes
8
4
IDS Protocols
8
4
This rule detects potential command and control (C2) beaconing activity associated with the Casbaneiro (Metamorfo) banking trojan. It looks for instances where a known suspicious process (RegSvcs.exe or mobsync.exe) performs network communication within 5 minutes of a web browser on the same device navigating to a targeted banking URL.
Page 2 of 2