Tran Trung Hieu 5f74a58081 Detect HAFNIUM operations

2021-03-04 00:01:54 +07:00

..

web_apache_segfault.yml

Second round

2020-09-15 07:02:30 -06:00

web_apache_threading_error.yml

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

web_citrix_cve_2019_19781_exploit.yml

Second round

2020-09-15 07:02:30 -06:00

web_citrix_cve_2020_8193_8195_exploit.yml

Second round

2020-09-15 07:02:30 -06:00

web_cve_2018_2894_weblogic_exploit.yml

Second round

2020-09-15 07:02:30 -06:00

web_cve_2019_3398_confluence.yml

Second round

2020-09-15 07:02:30 -06:00

web_cve_2020_0688_msexchange.yml

Second round

2020-09-15 07:02:30 -06:00

web_cve_2020_3452_cisco_asa_ftd.yml

Cisco ASA FTD Exploit CVE-2020-3452

2021-01-07 13:17:58 +01:00

web_cve_2020_5902_f5_bigip.yml

rule: extended F5 BIG-IP exploitation detection rule

2020-07-07 21:45:08 +02:00

web_cve_2020_14882_weblogic_exploit.yml

rule: added second expression

2020-11-04 16:43:35 +01:00

web_cve_2021_2109_weblogic_rce_exploit.yml

Added rule for Oracle WebLogic Exploit CVE-2021-2109

2021-01-20 14:28:18 +05:45

web_exchange_cve_2020_0688_exploit.yml

Second round

2020-09-15 07:02:30 -06:00

web_exchange_exploitation_hafnium.yml

refactor: changed symbols after feedback from Volexity

2021-03-03 10:15:45 +01:00

web_fortinet_cve_2018_13379_preauth_read_exploit.yml

Removed a value

2020-12-08 10:38:32 +01:00

web_multiple_suspicious_resp_codes_single_source.yml

Second round

2020-09-15 07:02:30 -06:00

web_pulsesecure_cve-2019-11510.yml

Second round

2020-09-15 07:02:30 -06:00

web_solarwinds_cve_2020_10148.yml

Fixed typo in file format

2020-12-28 11:46:02 +05:45

web_solarwinds_supernova_webshell.yml

rule: improved solarwinds webshell rule

2020-12-22 10:36:34 +01:00

web_sonicwall_jarrewrite_exploit.yml

rule: SonicWall exploitation

2021-01-25 11:54:23 +01:00

web_source_code_enumeration.yml

Second round

2020-09-15 07:02:30 -06:00

web_terramaster_cve_2020_28188_rce_exploit.yml

Fixed c-uri

2021-02-02 10:23:47 +05:45

web_unc2546_dewmode_php_webshell.yml

rule: simplified rule

2021-02-22 17:19:14 +01:00

web_vsphere_cve_2021_21972_unauth_rce_exploit.yml

Update web_vsphere_cve_2021_21972_unauth_rce_exploit.yml

2021-03-03 09:08:24 +01:00

web_webshell_keyword.yml

Second round

2020-09-15 07:02:30 -06:00

win_powershell_snapins_hafnium.yml

Detect HAFNIUM operations

2021-03-04 00:01:54 +07:00

win_webshell_regeorg.yml

fix reference field + add test for references in plural form

2020-11-27 10:17:45 +01:00