Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

2 detections

Detects XCSSET's Telegram data-theft module staging AES-encrypted configuration and chat data in ~/.tr and ~/.tr_map, correlated with the /w?tr exfiltration upload to C2.
avatar
Duo Tech@duotech
avatar
Detections.ai Community
3 months ago
204
Detects XCSSET's Telegram data-theft module staging AES-encrypted configuration and chat data in ~/.tr and ~/.tr_map, correlated with the /w?tr exfiltration upload to C2.
avatar
Duo Tech@duotech
avatar
Detections.ai Community
3 months ago
001