Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects HTTP requests to the OnyxC2 backend API sync endpoint (akmuniverstall.top) carrying the characteristic hwid, ownertoken, and botversion=3.0 parameters used for device-fingerprint C2 check-ins.
avatar
Duo Tech@duotech
avatar
Detections.ai Community
2 months ago
004