Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects creation of an abstract Unix domain socket matching the Kimwolf v7 single-instance mutex naming convention (@*boxv7/@*boxv4/@*boxv5) by a process running from a non-system, application-data path.
avatar
Duo Tech@duotech
avatar
Detections.ai Community
2 months ago
002