Darshan Thummar
@MightyCompletionist
1 follower12 downloads680 copies5 likes8,360 views
2,107 detections
Filters
Last updated
All Time
Detection languages
1,335
772
Categories
696
574
337
315
284
Platforms
1,363
586
192
85
85
Products / Services
1,327
297
79
39
34
MITRE Techniques
525
343
321
228
207
CVEs
1
1
IDS Classtypes
592
177
160
120
93
IDS Protocols
747
411
58
44
30
Detects C2 infrastructure switching to second-stage servers after initial beacon
Detects DNS lookups to dynamic DNS providers used for attack infrastructure
Detects certutil abuse for payload download or base64 decode
Detects TCP SYN sweeping across multiple hosts for network topology mapping
Detects direct connections to cloud VMs via Azure Bastion or GCP IAP
Detects automated credential stuffing with high-volume login attempts
Detects download of malware source code from code repositories
Detects InstallUtil used for .NET assembly proxy execution
Detects modification of cloud instance attributes for evasion or persistence
Detects clearing of Linux system log files to remove forensic evidence
Page 65 of 211