Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects presence of pritunl-client or wireguard-go binary/name strings, tunnel/VPN-class tooling observed landing on host prior to agent-parented tunnel activity
avatar
Duo Tech@duotech
avatar
Detections.ai Community
2 months ago
101