|
IDS and IPS rules on LAN
|
|
1
|
724
|
January 22, 2024
|
|
ZharkBOT
|
|
2
|
380
|
January 22, 2024
|
|
ET Malware - Socks5Systemz
|
|
15
|
1752
|
January 17, 2024
|
|
RisePro TCP v.0.1
|
|
12
|
1625
|
January 10, 2024
|
|
Meta vs Redline Stealer
|
|
4
|
674
|
January 9, 2024
|
|
Further verification and vallidation
|
|
2
|
212
|
January 8, 2024
|
|
DarkCrystal RAT
|
|
13
|
1159
|
January 2, 2024
|
|
Independant System Verification and Validation of Malware
|
|
2
|
259
|
December 28, 2023
|
|
Lumma Stealer Configuration
|
|
11
|
1090
|
December 28, 2023
|
|
PureLogs Stealer
|
|
12
|
1291
|
December 28, 2023
|
|
StealC Stealer
|
|
11
|
1014
|
December 28, 2023
|
|
DarkGate
|
|
4
|
584
|
December 28, 2023
|
|
Gh0stRat
|
|
3
|
920
|
December 28, 2023
|
|
LgoogLoader, PikaBot, RedLine rules
|
|
7
|
803
|
December 28, 2023
|
|
Inconsistency between the rules 2049660 & 2049661 and the family
|
|
1
|
259
|
December 19, 2023
|
|
SID 2012870 - Outbound Request contains pw
|
|
2
|
439
|
December 19, 2023
|
|
Question on 2028867
|
|
5
|
343
|
December 13, 2023
|
|
FP: ETPRO TROJAN Possible Panda Banker DGA Lets Encrypt SSL Cert [2825567]
|
|
2
|
305
|
November 29, 2023
|
|
MALWARE - classtype:misc-activity
|
|
1
|
272
|
November 27, 2023
|
|
Is bloodhound signature included in the latest weekly update
|
|
3
|
266
|
November 23, 2023
|
|
SIG: W32/LitterDrifter.Loader Gamaredon USB Worm
|
|
2
|
266
|
November 21, 2023
|
|
New Sig: ET TROJAN W32/Kazuar.Backdoor Turla APT Hardcoded Cookie
|
|
1
|
406
|
November 20, 2023
|
|
False positive on Android Trojan
|
|
1
|
398
|
October 19, 2023
|
|
2048118 is a little loose
|
|
3
|
294
|
October 12, 2023
|
|
Addressing an FP: 2016950 - ET MALWARE Possible Win32/Hupigon ip.txt with a Non-Mozilla UA
|
|
0
|
271
|
October 2, 2023
|
|
Eternity Clipper
|
|
4
|
513
|
September 27, 2023
|
|
NStealer v2
|
|
3
|
597
|
September 25, 2023
|
|
Lumma Stealer Updates
|
|
2
|
642
|
September 15, 2023
|
|
Echida Botnet
|
|
3
|
435
|
September 11, 2023
|
|
JSCAPE MFT Binary Management Java Deserialization - CVE-2023-4528
|
|
0
|
383
|
September 8, 2023
|