Joe Security
@joesecurity1 follower4,321 downloads3 copies0 likes832 views
112 detections
Filters
Last updated
All Time
Detection languages
112
Categories
89
3
Platforms
112
Products / Services
20
MITRE Techniques
10
6
3
3
2
powershell decrypts and execute hardcoded base64 blob
Hide copy via attrib.exe and delete itself
Delete Shadow Copy Via Powershell
Detect bitsadmin download and execute activity
Winword.exe drops script file in startup location
Set Custom UserAgent and download file via Powershell
Schedule REGSVR windows binary
Ryuk
Sigma
Ryuk sending magic Wake-On-Lan packet on port 7
Page 6 of 12