hightestEmerging Threat
Mustang Panda Dropper
Detects specific process parameters as used by Mustang Panda droppers
windowsprocess_creation
2021-11-27
Rule Library
Sigma Rules
Browse detections by severity and log source, with YAML and sample events one click away.
3,782Total
3,164Detection
474Emerging
141Hunting
hightestEmerging Threat
Potential APT Mustang Panda Activity Against Australian Gov
Detects specific command line execution used by Mustang Panda in a targeted attack against the Australian government as reported by Lab52
windowsprocess_creation
2023-05-15
hightestEmerging Threat
Potential Raspberry Robin Aclui Dll SideLoading
Detects potential sideloading of malicious "aclui.dll" by OleView.This behavior was observed in Raspberry-Robin variants reported by chekpoint research on Feburary 2024.
windowsimage_load
2024-07-31