Darshan Thummar
@MightyCompletionist
1 follower12 downloads680 copies5 likes8,357 views
2,107 detections
Filters
Last updated
All Time
Detection languages
1,335
772
Categories
696
574
337
315
284
Platforms
1,363
586
192
85
85
Products / Services
1,327
297
79
39
34
MITRE Techniques
525
343
321
228
207
CVEs
1
1
IDS Classtypes
592
177
160
120
93
IDS Protocols
747
411
58
44
30
Detects shell execution inside Docker containers
Detects download of attacker tools via C2 ingress transfer channels
Detects enumeration of AV and security products via WMI
Detects creation of additional IAM access keys for cloud account persistence
Detects use of forged web cookies for bypassing authentication
Detects modification of network device AAA authentication to allow bypass
Detects transfer of offensive tools to lateral movement targets via SMB
Detects use of trap command to handle system signals for Linux persistence
Detects unexpected system shutdown or reboot commands
Detects C2 traffic using raw TCP/UDP without application layer protocols
Page 32 of 211