Florian Roth 72dbfffc0f rule: myjino github repo compromise

2022-08-03 08:34:28 +02:00

..

net_dns_c2_detection.yml

refactor: network "other" to "dns" and "firewall"

2022-06-07 10:30:21 +02:00

net_dns_external_service_interaction_domains.yml

docs: reworked id, author, links

2022-06-07 17:09:06 +02:00

net_dns_github_myjino_ru.yml

rule: myjino github repo compromise

2022-08-03 08:34:28 +02:00

net_dns_high_bytes_out.yml

refactor: network "other" to "dns" and "firewall"

2022-06-07 10:30:21 +02:00

net_dns_high_null_records_requests_rate.yml

refactor: network "other" to "dns" and "firewall"

2022-06-07 10:30:21 +02:00

net_dns_high_requests_rate.yml

refactor: network "other" to "dns" and "firewall"

2022-06-07 10:30:21 +02:00

net_dns_high_txt_records_requests_rate.yml

refactor: network "other" to "dns" and "firewall"

2022-06-07 10:30:21 +02:00

net_dns_mal_cobaltstrike.yml

refactor: network "other" to "dns" and "firewall"

2022-06-07 10:30:21 +02:00

net_dns_pua_cryptocoin_mining_xmr.yml

refactor: network "other" to "dns" and "firewall"

2022-06-07 10:30:21 +02:00

net_dns_susp_b64_queries.yml

refactor: network "other" to "dns" and "firewall"

2022-06-07 10:30:21 +02:00

net_dns_susp_telegram_api.yml

refactor: network "other" to "dns" and "firewall"

2022-06-07 10:30:21 +02:00

net_dns_susp_txt_exec_strings.yml

Reference Update [Batch 1]

2022-07-07 15:24:15 +01:00

net_dns_wannacry_killswitch_domain.yml

refactor: network "other" to "dns" and "firewall"

2022-06-07 10:30:21 +02:00