Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects the navi_the_clown macOS Screen Sharing pre-auth RCE PoC binary via hash/filename/command-line flag or, as a lower-confidence secondary indicator, codesign+xattr Gatekeeper-bypass staging correlated with the PoC filename or flags
avatar
Duo Tech@duotech
avatar
Detections.ai Community
3 months ago
4015