Gopi Krishna
@Gopikrishna120 followers100 downloads13 copies1 like325 views
3 detections
Filters
Last updated
All Time
Detection languages
2
1
Categories
2
1
1
Platforms
3
Products / Services
1
MITRE Techniques
2
1
1
1
1
CVEs
1
This rule detects potential exploitation attempts targeting the Windows Server Update Services (WSUS) Remote Code Execution vulnerability, identified as CVE-2025-59287. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected WSUS server.
Detects command-line patterns associated with the execution of the BiBi Wiper, used by the threat actor Void Manticore. This includes deleting shadow copies and disabling system recovery features.
Detects the creation of a scheduled task with specific names and comments used by the BugSleep backdoor for persistence, as seen in recent MuddyWater campaigns.