Darshan Thummar
@MightyCompletionist
1 follower12 downloads680 copies5 likes8,360 views
2,107 detections
Filters
Last updated
All Time
Detection languages
1,335
772
Categories
696
574
337
315
284
Platforms
1,363
586
192
85
85
Products / Services
1,327
297
79
39
34
MITRE Techniques
525
343
321
228
207
CVEs
1
1
IDS Classtypes
592
177
160
120
93
IDS Protocols
747
411
58
44
30
Detects DLL files dropped to network shares for search order hijacking
Detects stripped executable payloads with debug information removed for evasion
Detects IP geolocation lookups used to determine system geographic location
Detects access to credential files through web shell commands
Detects POST requests to pages matching credential harvesting patterns
Detects compromised host participating in botnet C2 beaconing
Detects credential stuffing attacks targeting account takeover for infrastructure abuse
Detects AXFR DNS zone transfer requests for network reconnaissance
Detects automated social media account registration used for fake identity infrastructure
This rule detects large HTTP PUT requests (over 50KB) directed towards common cloud storage services (Amazon S3, Azure Blob Storage, Google Cloud Storage). This activity could indicate data exfiltration to an external cloud account.
Page 155 of 211