Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

4 detections

Detects an Xcode project or Git repository build-phase/pre-commit hook triggering an initial C2 beacon via curl GET /a?p=xcode_phase to retrieve the next infection stage.
avatar
Duo Tech@duotech
avatar
Detections.ai Community
3 months ago
006
Detects the XCSSET zip_infect_finder worming module recursively traversing directories to infect Xcode projects packaged inside .zip archives.
avatar
Duo Tech@duotech
avatar
Detections.ai Community
3 months ago
004
Detects the XCSSET zip_infect_finder worming module recursively traversing directories to infect Xcode projects packaged inside .zip archives.
avatar
Duo Tech@duotech
avatar
Detections.ai Community
3 months ago
002
Detects an Xcode project or Git repository build-phase/pre-commit hook triggering an initial C2 beacon via curl GET /a?p=xcode_phase to retrieve the next infection stage.
avatar
Duo Tech@duotech
avatar
Detections.ai Community
3 months ago
002