Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1,605 detections
Filters
Last updated
All Time
Detection languages
495
433
214
119
105
Contributors
403
350
248
92
65
Categories
20,443
11,831
5,875
5,151
4,864
1,605
Platforms
860
775
236
213
66
Products / Services
469
348
348
319
208
MITRE Techniques
726
541
453
167
163
CVEs
6
5
2
2
2
IDS Classtypes
235
83
34
19
18
IDS Protocols
283
56
51
16
12
ET MOBILE_MALWARE Klopatra CnC Domain in DNS Lookup (adsservice2 .org)
ET MOBILE_MALWARE Klopatra CnC Domain in DNS Lookup (adsservices .uk)
ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sanguen .courses)
ET INFO Remote Monitoring and Management (RMM) Tool in DNS Lookup (gorelo-rmm .azurewebsites .net)
ET MALWARE TA569 Gholoader CnC Domain in DNS Lookup (secure .kasindramaharaj .com)
ET INFO Observed RMM Domain in DNS Lookup (meshcentral .com)
ET INFO Remote Monitoring and Management (RMM) Tool in DNS Lookup (gorelo .tech)
ET EXPLOIT_KIT LandUpdate808 Domain in DNS Lookup (virtvan .com)
ET MALWARE TA569 Middleware Server Domain in DNS Lookup (sessionstorexint .com)
ET MALWARE TA569 Middleware Server Domain in DNS Lookup (taskrunnersrvmod .com)
ET INFO Blockchain RPC Domain in DNS Lookup (api .avax .network)
ET INFO Observed DNS Query to Actor Abused Online Service Domain (getenjoyment .net)
ET EXPLOIT_KIT LandUpdate808 Domain in DNS Lookup (saeam .com)
ET EXPLOIT_KIT LandUpdate808 Domain in DNS Lookup (edentista .com)
ET EXPLOIT_KIT LandUpdate808 Domain in DNS Lookup (dolmain .com)
ET EXPLOIT_KIT LandUpdate808 Domain in DNS Lookup (imf1 .com)
ET MALWARE TA569 Middleware Server Domain in DNS Lookup (parserapiprocess .com)
ET MALWARE TA569 Middleware Server Domain in DNS Lookup (buildtoolsrvcore .com)
ET INFO DYNAMIC_DNS Query to a *.3trust .com domain
ET INFO Blockchain RPC Domain in DNS Lookup (mainnet .infura .io)
ET INFO DYNAMIC_DNS Query to a *.freeddns .me domain
Page 64 of 77