Florian Roth
|
b3b0de3ff7
|
fix: typo in CVE number
|
2021-03-18 08:30:12 +01:00 |
|
Florian Roth
|
cbdad99ef9
|
MSF update HAFNIUM rule
|
2021-03-15 16:20:06 +01:00 |
|
Florian Roth
|
24486c6499
|
Update apt_hafnium_log_sigs.yar
|
2021-03-10 11:18:54 +01:00 |
|
Florian Roth
|
87bbd063f1
|
Update apt_hafnium_log_sigs.yar
|
2021-03-10 11:09:15 +01:00 |
|
Florian Roth
|
cf4fb5366b
|
refactor: refactored hafnium log rule
|
2021-03-10 10:50:18 +01:00 |
|
Florian Roth
|
ba3cf1a5c7
|
Merge branch 'master' of https://github.com/Neo23x0/signature-base
|
2021-03-10 08:19:05 +01:00 |
|
Florian Roth
|
3b94ca4b7f
|
extended HAFNIUM log sig
|
2021-03-10 08:19:03 +01:00 |
|
Florian Roth
|
b060a45e48
|
One more slash to tighten rule
|
2021-03-10 08:16:36 +01:00 |
|
Florian Roth
|
0cd3e7a820
|
Removed unnecessary Regex, added other known URIs
|
2021-03-10 08:15:38 +01:00 |
|
svch0stz
|
1b9ce79259
|
Detection for CVE_2021_27055 activity
Found in HTTP Proxy logs for \Microsoft\Exchange Server\V15\Logging\HttpProxy\
|
2021-03-10 12:44:48 +11:00 |
|
Florian Roth
|
0b88517938
|
more Exchange
|
2021-03-08 10:09:04 +01:00 |
|
Florian Roth
|
2ca3cc0bce
|
fix: adjusted range of occurence
|
2021-03-07 09:45:41 +01:00 |
|
Florian Roth
|
dc15cc1006
|
fix: missing LOG tag, no compilation as log signature
|
2021-03-06 09:59:25 +01:00 |
|
Florian Roth
|
a2002533b7
|
more HAFNIUM sigs
|
2021-03-06 09:30:13 +01:00 |
|