Samir Bousseaden (YaraHunts)
- Repository
- https://github.com/sbousseaden/YaraHunts
- Commit
- 71b27a2a7c57c2aa1877a11d8933167794e2b4fb
- Abgerufen
- 2026-09-27
- Lizenz
- No licence (all rights reserved)
- Veröffentlicht
- Metadaten
- Begründung
- No LICENSE file in the repository and no licence statement in its README (checked 2026-09-29). Without a grant, the rules are all rights reserved: metadata and an upstream link only.
Regeln von Samir Bousseaden (YaraHunts)
- SBOUSSEADEN_Mimikatz_KiwikeyNur Metadaten
hunt for default mimikatz kiwikey
HacktoolSamir Bousseaden (YaraHunts)· SBousseaden· 2020-08-08 - SBOUSSEADEN_Adsync_Creddump_V64Nur Metadaten
Azure AdSync Service Account Password Dumping
GenerischSamir Bousseaden (YaraHunts)· SBousseaden· 2020-03-08 - SBOUSSEADEN_Adsync_Creddump_XorNur Metadaten
Azure AdSync Service Account Password Dumping
GenerischSamir Bousseaden (YaraHunts)· SBousseaden· 2020-03-08 - SBOUSSEADEN_Adsync_Creddump_XwideNur Metadaten
Azure AdSync Service Account Password Dumping
GenerischSamir Bousseaden (YaraHunts)· SBousseaden· 2020-03-08 - SBOUSSEADEN_APT_Solarwind_Backdoor_Encoded_StringsNur Metadaten
This rule is looking for some key encoded strings of the SUNBURST backdoor
APT / AkteurSamir Bousseaden (YaraHunts)· SBousseaden· 2020-12-14 - SBOUSSEADEN_APT_Xdsspy_XduploadNur Metadaten
No description has been set in the source file - SBousseaden
APT / AkteurSamir Bousseaden (YaraHunts)· SBousseaden· 2020-05-10 - SBOUSSEADEN_Cve_2019_1458Nur Metadaten
No description has been set in the source file - SBousseaden
ExploitSamir Bousseaden (YaraHunts)· SBousseaden· 2020-10-22 - SBOUSSEADEN_GosliverNur Metadaten
No description has been set in the source file - SBousseaden
GenerischSamir Bousseaden (YaraHunts)· SBousseaden· 2020-10-11 - SBOUSSEADEN_MaliciousdllgeneratorNur Metadaten
MaliciousDLLGenerator default decoder and export name
GenerischSamir Bousseaden (YaraHunts)· SBousseaden· 2020-06-07 - SBOUSSEADEN_Shad0W_Beacon_16JuneNur Metadaten
Shad0w beacon compressed
GenerischSamir Bousseaden (YaraHunts)· SBousseaden· 2020-06-16 - SBOUSSEADEN_Shad0W_Ldrloaddll_HookNur Metadaten
Shad0w beacon LdrLoadDll hook
GenerischSamir Bousseaden (YaraHunts)· SBousseaden· 2020-06-06 - SBOUSSEADEN_TDL_Loader_Bootstrap_ShellcodeNur Metadaten
No description has been set in the source file - SBousseaden
MalwareSamir Bousseaden (YaraHunts)· SBousseaden· 2020-10-10 - SBOUSSEADEN_Webcreds_Regexp_B64Nur Metadaten
No description has been set in the source file - SBousseaden
GenerischSamir Bousseaden (YaraHunts)· SBousseaden· 2020-03-08 - SBOUSSEADEN_Susp_Msoffice_Addins_WxllNur Metadaten
hunt for suspicious MS Office Addins with code injection capabilities
Verdächtig / HuntingSamir Bousseaden (YaraHunts)· SBousseaden· 2020-11-10 - SBOUSSEADEN_Mimikatz_Memssp_HookfnNur Metadaten
hunt for default mimikatz memssp module both ondisk and in memory artifacts
HacktoolSamir Bousseaden (YaraHunts)· SBousseaden· 2020-08-26 - SBOUSSEADEN_InfinityhookNur Metadaten
Infinityhook is a legit research PoC to hook NT Syscalls bypassing PatchGuard
GenerischSamir Bousseaden (YaraHunts)· SBousseaden· 2020-09-07 - SBOUSSEADEN_Shad0W_BeaconNur Metadaten
Shad0w beacon default suspicous strings
GenerischSamir Bousseaden (YaraHunts)· SBousseaden· 2020-06-04 - SBOUSSEADEN_Hunt_Susp_VhdNur Metadaten
Virtual hard disk file with embedded PE
Verdächtig / HuntingSamir Bousseaden (YaraHunts)· SBousseaden· 2020-07-13