Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects the execution of the Deno runtime attempting to fetch and run a remote script using the '-A' (allow all permissions) flag combined with an HTTP/HTTPS URL, a known behavior of the DinDoor backdoor and other malicious Deno abuse.
avatar
Duo Tech@duotech
avatar
Detections.ai Community
5 months ago
509