avatar

Darshan Thummar

@Mighty
Completionist
1 follower18 downloads694 copies5 likes8,751 views

2,107 detections

Detects newly issued self-signed certificates on suspicious domains used for C2
avatar
Darshan Thummar@Mighty
avatar
Detections.ai Community
5 months ago
001
Detects TFTP transfers used to deliver bootkit or firmware persistence payloads
avatar
Darshan Thummar@Mighty
avatar
Detections.ai Community
5 months ago
001
Detects DLL files dropped to network shares for search order hijacking
avatar
Darshan Thummar@Mighty
avatar
Detections.ai Community
5 months ago
001
Detects stripped executable payloads with debug information removed for evasion
avatar
Darshan Thummar@Mighty
avatar
Detections.ai Community
5 months ago
001
Detects IP geolocation lookups used to determine system geographic location
avatar
Darshan Thummar@Mighty
avatar
Detections.ai Community
5 months ago
001
Detects access to credential files through web shell commands
avatar
Darshan Thummar@Mighty
avatar
Detections.ai Community
5 months ago
001
Detects POST requests to pages matching credential harvesting patterns
avatar
Darshan Thummar@Mighty
avatar
Detections.ai Community
5 months ago
001
Detects compromised host participating in botnet C2 beaconing
avatar
Darshan Thummar@Mighty
avatar
Detections.ai Community
5 months ago
001
Detects credential stuffing attacks targeting account takeover for infrastructure abuse
avatar
Darshan Thummar@Mighty
avatar
Detections.ai Community
5 months ago
001
Detects AXFR DNS zone transfer requests for network reconnaissance
avatar
Darshan Thummar@Mighty
avatar
Detections.ai Community
5 months ago
001
Page 158 of 211