TOR Traffic
Proxy, Multi-hop Proxy
Command And Control
TOR Traffic
Proxy, Multi-hop Proxy
Windows Abused Web Services
Web Service
WinRAR Spawning Shell Application
Ingress Tool Transfer
Juniper Networks Remote Code Execution Exploit Detection
Exploit Public-Facing Application, Ingress Tool Transfer, Command and Scripting Interpreter
Windows SQL Spawning CertUtil
Ingress Tool Transfer
Detect Certify Command Line Arguments
Steal or Forge Authentication Certificates, Ingress Tool Transfer
PowerShell Script Block With URL Chain
PowerShell, Ingress Tool Transfer
PowerShell WebRequest Using Memory Stream
PowerShell, Ingress Tool Transfer, Fileless Storage
Windows Proxy Via Netsh
Internal Proxy, Proxy
Windows Proxy Via Netsh
Internal Proxy, Proxy
Windows Ldifde Directory Object Behavior
Ingress Tool Transfer, Domain Groups
Windows Proxy Via Registry
Internal Proxy, Proxy
Windows Proxy Via Registry
Internal Proxy, Proxy
Any Powershell DownloadFile
Command and Scripting Interpreter, PowerShell, Ingress Tool Transfer
Any Powershell DownloadString
Command and Scripting Interpreter, PowerShell, Ingress Tool Transfer
Detect DGA domains using pretrained model in DSDL
Domain Generation Algorithms
Detect suspicious DNS TXT records using pretrained model in DSDL
Domain Generation Algorithms
Windows Ngrok Reverse Proxy Usage
Protocol Tunneling, Proxy, Web Service
Windows Ngrok Reverse Proxy Usage
Protocol Tunneling, Proxy, Web Service
Windows Ngrok Reverse Proxy Usage
Protocol Tunneling, Proxy, Web Service
Linux Ngrok Reverse Proxy Usage
Protocol Tunneling, Proxy, Web Service
Linux Ngrok Reverse Proxy Usage
Protocol Tunneling, Proxy, Web Service
Linux Ngrok Reverse Proxy Usage
Protocol Tunneling, Proxy, Web Service
Excessive DNS Failures
DNS, Application Layer Protocol
Excessive DNS Failures
DNS, Application Layer Protocol
BITSAdmin Download File
BITS Jobs, Ingress Tool Transfer
Ngrok Reverse Proxy on Network
Protocol Tunneling, Proxy, Web Service
Ngrok Reverse Proxy on Network
Protocol Tunneling, Proxy, Web Service
Ngrok Reverse Proxy on Network
Protocol Tunneling, Proxy, Web Service
Windows App Layer Protocol Qakbot NamedPipe
Application Layer Protocol
Zeek x509 Certificate with Punycode
Encrypted Channel
SSL Certificates with Punycode
Encrypted Channel
Windows App Layer Protocol Wermgr Connect To NamedPipe
Application Layer Protocol
Windows Mail Protocol In Non-Common Process Path
Mail Protocols, Application Layer Protocol
Windows Mail Protocol In Non-Common Process Path
Mail Protocols, Application Layer Protocol
Windows Multi hop Proxy TOR Website Query
Mail Protocols, Application Layer Protocol
Windows Multi hop Proxy TOR Website Query
Mail Protocols, Application Layer Protocol
Windows File Transfer Protocol In Non-Common Process Path
Mail Protocols, Application Layer Protocol
Windows File Transfer Protocol In Non-Common Process Path
Mail Protocols, Application Layer Protocol
Windows Protocol Tunneling with Plink
Protocol Tunneling, SSH
Windows Ingress Tool Transfer Using Explorer
Ingress Tool Transfer
Log4Shell CVE-2021-44228 Exploitation
Ingress Tool Transfer, Exploit Public-Facing Application, Command and Scripting Interpreter, External Remote Services
Living Off The Land
Ingress Tool Transfer, Exploit Public-Facing Application, Command and Scripting Interpreter, External Remote Services
Windows Ingress Tool Transfer Using Explorer
Ingress Tool Transfer
Windows Remote Access Software BRC4 Loaded Dll
Remote Access Software, OS Credential Dumping
Windows Remote Access Software Hunt
Remote Access Software
Linux Curl Upload File
Ingress Tool Transfer
Linux Proxy Socks Curl
Proxy, Non-Application Layer Protocol
Linux Proxy Socks Curl
Proxy, Non-Application Layer Protocol
Linux Ingress Tool Transfer with Curl
Ingress Tool Transfer
Linux Ingress Tool Transfer Hunting
Ingress Tool Transfer
Windows Application Layer Protocol RMS Radmin Tool Namedpipe
Application Layer Protocol
Windows Remote Access Software RMS Registry
Remote Access Software
Splunk Protocol Impersonation Weak Encryption Configuration
Protocol Impersonation
Windows Bitsadmin Download File
BITS Jobs, Ingress Tool Transfer
Windows CertUtil VerifyCtl Download
Ingress Tool Transfer
Windows CertUtil URLCache Download
Ingress Tool Transfer
Windows PowerShell Start-BitsTransfer
BITS Jobs, Ingress Tool Transfer
CertUtil Download With VerifyCtl and Split Arguments
Ingress Tool Transfer
CertUtil Download With URLCache and Split Arguments
Ingress Tool Transfer
Wget Download and Bash Execution
Ingress Tool Transfer
Curl Download and Bash Execution
Ingress Tool Transfer
LOLBAS With Network Traffic
Ingress Tool Transfer, Exfiltration Over Web Service, System Binary Proxy Execution
Windows Curl Upload to Remote Destination
Ingress Tool Transfer
Windows Curl Upload to Remote Destination
Ingress Tool Transfer
Windows Curl Download to Suspicious Path
Ingress Tool Transfer
Download Files Using Telegram
Ingress Tool Transfer
Suspicious Curl Network Connection
Ingress Tool Transfer
Detect Outbound SMB Traffic
File Transfer Protocols, Application Layer Protocol
Detect Outbound SMB Traffic
File Transfer Protocols, Application Layer Protocol
Detect web traffic to dynamic domain providers
Web Protocols
DNS Query Length Outliers - MLTK
DNS, Application Layer Protocol
DNS Query Length Outliers - MLTK
DNS, Application Layer Protocol
Detect Large Outbound ICMP Packets
Non-Application Layer Protocol