Darshan Thummar
@MightyCompletionist
1 follower18 downloads694 copies5 likes8,750 views
2,107 detections
Filters
Last updated
All Time
Detection languages
1,335
772
Categories
696
574
337
315
284
Platforms
1,363
586
192
85
85
Products / Services
1,327
297
79
39
34
MITRE Techniques
525
343
321
228
207
CVEs
1
1
IDS Classtypes
592
177
160
120
93
IDS Protocols
747
411
58
44
30
Detects upload of executable files to file sharing services for staging
Detects use of external SOCKS proxy to relay C2 traffic
Detects cloud disk snapshot creation potentially for data exfiltration
Detects high-entropy algorithmically generated domain names used for C2
Detects sensitive data posted to text sharing services
Detects known vulnerability scanner user agents such as Nmap, Nikto, Nessus, Burp
Detects creation of scheduled tasks for execution or persistence
Detects injection of malicious DYLIB libraries via LC_LOAD_DYLIB mechanism
Detects deletion of VSS copies used by ransomware to prevent recovery
Detects Node.js being used to establish reverse shell connections
Page 2 of 211