Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects the execution of known VerdantBamboo payload names (luserput, ovs-dbctl, egnyte_host_monitor_client) or specific malicious deployment paths, indicating potential PLENET, BRICKSTORM, or AGENTPSD malware activity on compromised Linux and edge devices.
avatar
Ethan Andrews@eandrews
avatar
Federal Signal Detections
5 months ago
207