Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
22 detections
Filters
Last updated
All Time
Detection languages
7
7
5
3
Contributors
4
4
3
3
2
Categories
6
5
4
3
3
Platforms
11
7
1
1
1
Products / Services
7
5
5
2
1
MITRE Techniques
18,115
15,635
12,576
8,388
6,215
IDS Classtypes
6
1
IDS Protocols
5
1
1
Detects the usage of specific LDAP attributes ('primaryInternationalISDNNumber', 'otherFacsimileTelephoneNumber', 'primaryTelexNumber') that are known to be used by the LDAPFragger tool for data exchange via LDAP. These attributes are generally not commonly used in enterprise environments, making their appearance suspicious and indicative of potential Command and Control activity.
Page 2 of 2