Darshan Thummar
@MightyCompletionist
1 follower12 downloads680 copies5 likes8,348 views
2,107 detections
Filters
Last updated
All Time
Detection languages
1,335
772
Categories
696
574
337
315
284
Platforms
1,363
586
192
85
85
Products / Services
1,327
297
79
39
34
MITRE Techniques
525
343
321
228
207
CVEs
1
1
IDS Classtypes
592
177
160
120
93
IDS Protocols
747
411
58
44
30
Detects data exfiltration using asymmetric encrypted non-C2 protocols
Detects TLS callback injection using IMAGE_TLS_DIRECTORY structures
Detects SNMP bulk walk used to collect network device configurations
Detects SMS pumping attacks via bulk SMS API requests
Detects RDP session hijacking using tscon command
Detects LogonUser API used with token impersonation for privilege escalation
Detects creation of new Azure AD accounts which may be used for persistence
Detects AT job creation via SMB for remote scheduled execution
Detects downgrade of network device firmware potentially to reintroduce vulnerabilities
Detects bulk AWS or Azure API command execution via CLI tools
Page 9 of 211