signalblur a61484efb6 Merge PR #5214 from @signalblur - Add HTTP Request to Low Reputation TLD or Suspicious File Extension ...

new: HTTP Request to Low Reputation TLD or Suspicious File Extension
---------

Co-authored-by: frack113 <62423083+frack113@users.noreply.github.com>
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>

2025-03-05 00:13:45 +01:00

..

zeek_dce_rpc_mitre_bzar_execution.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

zeek_dce_rpc_mitre_bzar_persistence.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

zeek_dce_rpc_potential_petit_potam_efs_rpc_call.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

zeek_dce_rpc_printnightmare_print_driver_install.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

zeek_dce_rpc_smb_spoolss_named_pipe.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

zeek_default_cobalt_strike_certificate.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

zeek_dns_mining_pools.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

zeek_dns_nkn.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

zeek_dns_susp_zbit_flag.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

zeek_dns_torproxy.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

zeek_http_executable_download_from_webdav.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

zeek_http_omigod_no_auth_rce.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

zeek_http_susp_file_ext_from_susp_tld.yml

Merge PR #5214 from @signalblur - Add HTTP Request to Low Reputation TLD or Suspicious File Extension

2025-03-05 00:13:45 +01:00

zeek_http_webdav_put_request.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

zeek_rdp_public_listener.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

zeek_smb_converted_win_atsvc_task.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

zeek_smb_converted_win_impacket_secretdump.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

zeek_smb_converted_win_lm_namedpipe.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

zeek_smb_converted_win_susp_psexec.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

zeek_smb_converted_win_susp_raccess_sensitive_fext.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

zeek_smb_converted_win_transferring_files_with_credential_data.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

zeek_susp_kerberos_rc4.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00