Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects HTTP requests using JWR's e-commerce integration masquerade, where a base64-encoded 's' parameter carries harvested card data or a 'cart_data' parameter resolves to a non-Shopify checkout domain used to spoof the WebSocket C2 origin.
avatar
Duo Tech@duotech
avatar
Detections.ai Community
3 months ago
005