Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects the botking RAT's C2 beacon: HTTPS POST with the 'i am botking' registration marker and form-urlencoded action=check polling, plus associated TLS/DNS indicators.
avatar
Duo Tech@duotech
avatar
Detections.ai Community
2 months ago
003