Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
22 detections
Filters
Last updated
All Time
Detection languages
16
2
2
2
Contributors
8
3
2
1
1
Categories
12
7
5
3
3
Platforms
13
7
4
Products / Services
12
4
3
3
2
MITRE Techniques
18,115
15,635
12,576
8,388
6,215
IDS Classtypes
1
1
IDS Protocols
2
The following analytic identifies web requests to domains that closely resemble your monitored brand's domain, indicating potential brand abuse. It leverages data from web traffic sources, such as web proxies or network traffic analysis tools, and cross-references these with known domain permutations generated by the "ESCU - DNSTwist Domain Names" search. This activity is significant as it can indicate phishing attempts or other malicious activities targeting your brand. If confirmed malicious, attackers could deceive users, steal credentials, or distribute malware, leading to significant reputational and financial damage.
Page 2 of 2