security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Rule update: Proxy UA > Loki Bot

Browse Source
This commit is contained in:
Florian Roth
2018-02-12 10:08:32 +01:00
parent fa4dbc0f2e
commit 058d719e2b
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/proxy/proxy_ua_malware.yml
+1
View File
@@ -46,6 +46,7 @@ detection:
- 'Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)' # Fareit
- 'Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)' # Webshell's back connect
- 'MSIE' # Toby web shell
- '*(Charon; Inferno)' # Loki Bot
# Others
- '* pxyscand*'