Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
3 detections
Filters
Last updated
All Time
Detection languages
2
1
Contributors
3
Categories
2
1
1
Platforms
3
Products / Services
2
1
MITRE Techniques
2
2
1
1
1
CVEs
71
71
64
58
49
Flags macOS hosts below fixed builds (26.6.1/15.7.9/14.8.9) with an actively listening Screen Sharing process, distinguishing genuinely exposed unpatched hosts from mere version drift.
Detects repeated screensharingd crash/restart cycles tightly time-correlated with file-copy helper activity, indicating CVE-2026-43777 DoS exploitation alongside its secondary file-copy abuse potential.
Detects bursts (3+ within 10 minutes) of screensharingd crash/respawn or anomalous child-process events consistent with the CVE-2026-43777 denial-of-service condition, excluding OS update/boot windows.