
Darshan Thummar
@MightyCompletionist
1 follower12 downloads680 copies5 likes8,357 views
2,107 detections
Filters
Last updated
All Time
Detection languages
1,335
772
Categories
696
574
337
315
284
Platforms
1,363
586
192
85
85
Products / Services
1,327
297
79
39
34
MITRE Techniques
525
343
321
228
207
CVEs
1
1
IDS Classtypes
592
177
160
120
93
IDS Protocols
747
411
58
44
30
Detects local account RDP logins originating from external IP addresses
Detects repeated SSH authentication failures indicating brute force
Detects use of Forfiles for indirect command execution to evade detection
Detects malicious ClickOnce application manifests for proxy code execution
Detects disabling of PowerShell command history logging to impair forensics
Detects potential use of steganography to hide C2 commands in image files
Detects searching of bash history files for credentials
Detects Pass-the-Hash attacks using NTLM authentication over SMB
Detects ESXi hypervisor CLI access via direct SSH connection
Detects unauthorized access to macOS Keychain for credential extraction
Page 24 of 211
