Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

2 detections

StrRAT is a Java-based remote access tool which steals browser credentials, logs keystrokes and take remote control of infected systems. It also has a module to download additional payload onto to the infected machine based on C2 server command. Additionally, this threat also has a ransomware encryption/decryption module which appends .crimson extension.
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
0028
ZLoader was delivered in a campaign in late summer 2021. This campaign was tweeted by @MsftSecIntel on twitter.
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
0013