avatar

Jonathan Paykoc

@cybershenanigans
Completionist
0 followers6 downloads4 copies2 likes328 views

2 detections

Detects the execution of a Python stager associated with OmniStealer. The stager uses an inline command to decompress and execute the final payload, a common technique for this malware family.
avatar
Jonathan Paykoc@cybershenanigans
avatar
DetectCON Securonix Workshop Ninjas
8 months ago
30116
Detects a series of Salesforce Object Query Language (SOQL) queries indicative of data reconnaissance and exfiltration, similar to techniques used by UNC6395.
avatar
Jonathan Paykoc@cybershenanigans
avatar
Detections.ai Community
1 year ago
12212