Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
66 detections
Filters
Last updated
All Time
Detection languages
37
17
7
2
2
Contributors
16
14
10
7
3
Categories
19
15
14
13
10
Platforms
39,908
7,245
6,529
3,864
3,627
66
Products / Services
16
8
8
7
6
MITRE Techniques
17
14
9
9
7
IDS Classtypes
4
3
IDS Protocols
5
2
Software Inventory by OS
Detects potential command and control (C2) beaconing activity to domains identified as being used in the 'Operation Triangulation' campaign, which targeted iOS devices with 0-day exploits. This rule specifically looks for connections to a list of known malicious domains via proxy logs.
Detects potential command and control (C2) beaconing activity to domains identified as being used in the 'Operation Triangulation' attacks, which targeted iOS devices. These domains were revealed by Kaspersky and the FSB.
Page 4 of 4