Shivam Malaviya
@Shviam0 followers69 downloads31 copies18 likes904 views
17 detections
Filters
Last updated
All Time
Detection languages
17
This detection identifies network connections to specific malicious IP addresses known as indicators of compromise, related to malicious activities.
This detection identifies suspicious executable and DLL files with the specific name "wjoiyyxzllm" in the WindowsApps directory, indicating possible malware masquerading as legitimate software.
This detection identifies file events related to a specific set of malware files that appear to be part of a malicious toolkit, indicating a compromise.
This detection identifies potential exploitation of the Microsoft Support Diagnostic Tool (MSDT) vulnerability, also known as "Follina" (CVE-2022-30190), which allows remote code execution through specially crafted Microsoft Office documents.
This detection identifies the registration of a suspicious OCX file named "sun.ocx" using rundll32.exe with DllRegisterServer, a pattern often associated with malware installation and persistence. The rule is valid.
This detection rule identifies cyber threats linked to the Russia-Ukraine conflict by utilizing a curated list of IoCs from Orange Cyberdefense, scanning for matches across multiple event types (network, process, file, image load).
This rule detects instances of PowerShell using heavy obfuscation and attempting to download a file named "install.mp3", indicative of malware activity.
Page 2 of 2