Any Powershell DownloadString
Command and Scripting Interpreter , PowerShell , Ingress Tool Transfer
Command And Control
Any Powershell DownloadFile
Command and Scripting Interpreter , PowerShell , Ingress Tool Transfer
CertUtil Download With VerifyCtl and Split Arguments
Ingress Tool Transfer
CertUtil Download With URLCache and Split Arguments
Ingress Tool Transfer
Log4Shell CVE-2021-44228 Exploitation
Ingress Tool Transfer , Exploit Public-Facing Application , Command and Scripting Interpreter
Wget Download and Bash Execution
Ingress Tool Transfer
Curl Download and Bash Execution
Ingress Tool Transfer
Windows Curl Upload to Remote Destination
Ingress Tool Transfer
Windows Curl Download to Suspicious Path
Ingress Tool Transfer
BITSAdmin Download File
BITS Jobs , Ingress Tool Transfer
Download Files Using Telegram
Ingress Tool Transfer
Suspicious Curl Network Connection
Ingress Tool Transfer
TOR Traffic
Application Layer Protocol , Web Protocols
TOR Traffic
Application Layer Protocol , Web Protocols
Excessive DNS Failures
DNS , Application Layer Protocol
Excessive DNS Failures
DNS , Application Layer Protocol
Detect web traffic to dynamic domain providers
Web Protocols
Detect Outbound SMB Traffic
File Transfer Protocols , Application Layer Protocol
Detect Outbound SMB Traffic
File Transfer Protocols , Application Layer Protocol
DNS Query Length Outliers - MLTK
DNS , Application Layer Protocol
DNS Query Length Outliers - MLTK
DNS , Application Layer Protocol
Detect Large Outbound ICMP Packets
Non-Application Layer Protocol