Rajshekar Vijay
@WazuhWhiz0 followers205 downloads16 copies15 likes323 views
5 detections
Filters
Last updated
All Time
Detection languages
5
Categories
3
2
2
1
1
Platforms
3
1
1
Products / Services
3
1
1
1
1
MITRE Techniques
2
1
1
1
1
Detects network traffic to or from IP addresses known to be associated with the active exploitation of the SharePoint vulnerability CVE-2025-53770.
Detects suspicious use of mshta.exe to execute HTA files followed by certutil.exe for potential data decoding operations related to executable file downloads.
Detects the creation of the Tor process from a specific directory using command line arguments indicative of controlling and logging ports.
Detects macOS launchd entries that are not part of the standard Apple system, which could indicate persistence mechanisms used by malware; it is an invalid rule due to a future date.
Detection of potentially malicious activities on Windows systems related to Sysmon events, focusing on executable files, registry changes, and network connections.