Mikio Nakamaru
@mikionakamaru0 followers0 downloads15 copies0 likes42 views
3 detections
Filters
Last updated
All Time
Detection languages
3
Categories
2
1
1
1
Platforms
3
1
1
Products / Services
3
MITRE Techniques
1
1
1
1
1
CVEs
1
1
This rule identifies devices within the environment that are susceptible to CVE-2026-81963. It correlates vulnerability data with knowledge base information to flag the software, vendor, version, severity level, and the availability of public exploits for this specific vulnerability.
This rule identifies devices in the environment that are running software identified as vulnerable to CVE-2026-62890. It aggregates the affected device names along with the associated software names, versions, and vulnerability severity levels.
This rule detects outbound connections from internal devices to domains and IP addresses linked to the “SysScan” fake Microsoft security scanner campaign. These connections may indicate exposure to malicious infrastructure used for tricking victims into disabling legitimate antivirus solutions, as reported in recent threat intelligence.