Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects network connections to known XWorm Command and Control (C2) infrastructure (IPs and domains) and the creation of processes with filenames associated with XWorm malware. This rule combines network and process-based indicators to identify potential XWorm infections.
avatar
Kaung Khant Ko@kaungkhantko
avatar
Detections.ai Community
1 year ago
8089