Darshan Thummar
@MightyCompletionist
1 follower12 downloads680 copies5 likes8,358 views
2,107 detections
Filters
Last updated
All Time
Detection languages
1,335
772
Categories
696
574
337
315
284
Platforms
1,363
586
192
85
85
Products / Services
1,327
297
79
39
34
MITRE Techniques
525
343
321
228
207
CVEs
1
1
IDS Classtypes
592
177
160
120
93
IDS Protocols
747
411
58
44
30
Detects creation of malicious container services via Docker API for persistence
Detects unauthorized domain controller replication that may indicate DCSync or rogue DC
Detects creation of macOS Launch Agent plist files for persistence
Detects disabling of AWS CloudTrail audit logging
Detects creation of inbox rules to hide attacker communications from victim
Detects probing of firewall and VPN management interfaces for security appliance discovery
Detects PowerShell running base64 encoded commands
Detects Linux ptrace system call abuse for process injection
Detects downloads of executable scripts directly from raw GitHub URLs
Detects modification of power settings to keep system awake for malware
Page 50 of 211