hightestEmerging Threat
Equation Group C2 Communication
Detects communication to C2 servers mentioned in the operational notes of the ShadowBroker leak of EquationGroup C2 tools
Generalfirewall
2021-11-27
Rule Library
Sigma Rules
Browse detections by severity and log source, with YAML and sample events one click away.
3,782Total
3,164Detection
474Emerging
141Hunting
criticalstableEmerging Threat
Equation Group DLL_U Export Function Load
Detects a specific export function name used by one of EquationGroup tools
windowsprocess_creation
2023-03-09
hightestEmerging Threat
Potential Operation Triangulation C2 Beaconing Activity - DNS
Detects potential beaconing activity to domains used in 0day attacks on iOS devices and revealed by Kaspersky and the FSB
Generaldns
2023-06-01
hightestEmerging Threat
Potential Operation Triangulation C2 Beaconing Activity - Proxy
Detects potential beaconing activity to domains used in 0day attacks on iOS devices and revealed by Kaspersky and the FSB
Generalproxy
2023-06-01