Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects UAT-11587 diplomatic-lure LNK file exploiting ZDI-CAN-25373 whitespace padding to conceal a PowerShell command that extracts CanonStager (cnmpaui.exe/dll) from TAR archives into %TEMP%
avatar
Ankit Mehta@Secvyn
avatar
Detections.ai Community
6 days ago
000