Florian Roth 416030a85f rule: cobaltstrike malformed UAs

2021-05-10 12:43:14 +02:00

..

proxy_apt40.yml

Second round

2020-09-15 07:02:30 -06:00

proxy_apt_domestic_kitten.yml

Domestic Kitten Furball malware pattern

2021-02-08 17:52:55 +01:00

proxy_chafer_malware.yml

Update proxy_chafer_malware.yml

2020-10-15 23:16:17 -03:00

proxy_cobalt_amazon.yml

Update proxy_cobalt_amazon.yml

2020-10-15 23:19:39 -03:00

proxy_cobalt_malformed_uas.yml

rule: cobaltstrike malformed UAs

2021-05-10 12:43:14 +02:00

proxy_cobalt_ocsp.yml

Update proxy_cobalt_ocsp.yml

2020-10-15 23:19:56 -03:00

proxy_cobalt_onedrive.yml

Update proxy_cobalt_onedrive.yml

2020-11-28 19:07:07 +01:00

proxy_download_susp_dyndns.yml

Update proxy_download_susp_dyndns.yml

2020-10-15 23:21:25 -03:00

proxy_download_susp_tlds_blacklist.yml

Update proxy_download_susp_tlds_blacklist.yml

2020-10-15 23:22:17 -03:00

proxy_download_susp_tlds_whitelist.yml

Update proxy_download_susp_tlds_whitelist.yml

2020-10-15 23:22:57 -03:00

proxy_downloadcradle_webdav.yml

Update proxy_downloadcradle_webdav.yml

2020-10-15 23:23:17 -03:00

proxy_empire_ua_uri_combos.yml

Second round

2020-09-15 07:02:30 -06:00

proxy_empty_ua.yml

Second round

2020-09-15 07:02:30 -06:00

proxy_ios_implant.yml

Update proxy_ios_implant.yml

2020-10-15 23:23:52 -03:00

proxy_powershell_ua.yml

Update proxy_powershell_ua.yml

2020-10-15 23:24:06 -03:00

proxy_pwndrop.yml

Second round

2020-09-15 07:02:30 -06:00

proxy_raw_paste_service_access.yml

Second round

2020-09-15 07:02:30 -06:00

proxy_susp_flash_download_loc.yml

Update proxy_susp_flash_download_loc.yml

2020-11-28 18:59:00 +01:00

proxy_telegram_api.yml

Update proxy_telegram_api.yml

2020-10-15 23:25:19 -03:00

proxy_turla_comrat.yml

Second round

2020-09-15 07:02:30 -06:00

proxy_ua_apt.yml

fixed various spelling errors all over rules and source code

2021-02-24 14:43:13 +00:00

proxy_ua_bitsadmin_susp_tld.yml

Update proxy_ua_bitsadmin_susp_tld.yml

2020-10-15 23:26:08 -03:00

proxy_ua_cryptominer.yml

Update proxy_ua_cryptominer.yml

2020-10-15 23:26:31 -03:00

proxy_ua_frameworks.yml

fixed various spelling errors all over rules and source code

2021-02-24 14:43:13 +00:00

proxy_ua_hacktool.yml

Merge branch 'oscd'

2021-03-02 22:58:41 +03:00

proxy_ua_malware.yml

Second round

2020-09-15 07:02:30 -06:00

proxy_ua_suspicious.yml

Merge branch 'master' into rule-devel

2020-10-12 09:13:24 +02:00

proxy_ursnif_malware.yml

Update proxy_ursnif_malware.yml

2020-11-28 19:09:07 +01:00