valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-08 02:08:54 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update silenttrinity_stager_msbuild_activity.yml

Browse Source
This commit is contained in:
S.kiran kumar 2020-10-15 19:22:41 +05:30 committed by GitHub
parent 0cb340a718
commit 61ded7e0d7
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
rules/windows/sysmon/silenttrinity_stager_msbuild_activity.yml
View File

@ -1,5 +1,5 @@
title: Silenttrinity Stager Msbuild Activity
id: 50e54b8d-ad73-43f8-96a1-5191685b17a4
id: c4f2d4b1-ca0f-42e4-9b7b-a69790524fab
description: Detects a possible remote connections to Silenttrinity c2
references:
- https://www.blackhillsinfosec.com/my-first-joyride-with-silenttrinity/