Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
66 detections
Filters
Last updated
All Time
Detection languages
28
17
11
3
3
Contributors
29
17
8
3
3
Categories
47
23
20
18
12
Platforms
64
2
1
1
1
Products / Services
25
16
15
11
2
MITRE Techniques
18,127
15,648
12,596
8,407
6,231
CVEs
8
Detects suspicious UltraVNC command line flag combination that indicate a auto reconnect upon execution, e.g. startup (as seen being used by Gamaredon threat group)
Detects suspicious UltraVNC command line flag combinations that indicate an auto-reconnect upon execution, often used for persistence or remote access. This behavior has been observed in campaigns by the Gamaredon threat group.
Detects suspicious UltraVNC command line flag combination that indicate a auto reconnect upon execution, e.g. startup (as seen being used by Gamaredon threat group)
Page 4 of 4