Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

2 detections

Detects C2Looper injecting shellcode into the legitimate winspool.drv module via a remote thread, excluding legitimate print subsystem processes.
avatar
Duo Tech@duotech
avatar
Detections.ai Community
2 months ago
204
Detects C2Looper injecting shellcode into the legitimate winspool.drv module via a remote thread, excluding legitimate print subsystem processes.
avatar
Duo Tech@duotech
avatar
Detections.ai Community
2 months ago
103