Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
2 detections
Filters
Last updated
All Time
Detection languages
1
1
Contributors
1
1
Categories
1
1
1
1
Platforms
2
1
1
Products / Services
1
MITRE Techniques
18,115
15,635
12,576
8,388
6,215
Privnote DNS Resolution
Cortex XDR
Identifies endpoints resolving privnote.com, a self-destructing message service abused by UNC3753 to transmit malicious installation links while bypassing chat and email filtering.
This package searches endpoint processes for cscript executing a wsf file which has been attributed to the Serpentine#Cloud campaign.
This is a brittle detection narrowly defined to this particular campaign but is nonetheless useful.
This is a brittle detection narrowly defined to this particular campaign but is nonetheless useful.
