Daniel Jeremiah
@daniyyellUnited KingdomTrusted contributorCompletionist
8 followers4,598 downloads2,329 copies65 likes127,934 views
978 detections
Filters
Last updated
All Time
Detection languages
303
179
131
120
97
Categories
317
280
168
139
136
Platforms
669
130
98
61
39
Products / Services
112
54
50
48
38
MITRE Techniques
370
280
196
192
187
CVEs
35
7
4
4
4
IDS Classtypes
11
3
2
1
IDS Protocols
11
2
2
1
1
This detection identifies potential usage of the Naabu port scanner by searching for its process execution or its specific network user-agent string. Naabu is a fast port scanner that can be used for network reconnaissance.
Detects files based on common ransomware file extensions or ransom note filenames. This rule is based on a community-sourced list and is intended for broad detection.
Detects malicious VBScript patterns, including Base64 decoding, file operations, and PowerShell.
detect tiny vbs
YARA
Detects indicators found in the files that used the GrimResource infection technique (based on commands that indicate script/process execution)
Detects APT29's WINELOADER backdoor variant used in phishing campaigns, this rule also detect bad pdf,shtml,htm and vbs or maybe more depends
Detects Kimsuky APT malware delivery technique using a malicious MMC console file
Detects obfuscated JavaScript code indicative of STRRAT malware.
Detects DC-RAT by matching complete static API/function and string fingerprint.
Page 98 of 98