YARA-Regeln mit dem Tag HUNTING
3 Regeln tragen den Tag „HUNTING“.
Detects Microsoft OOXML files with prepended data/manipulated header
Verdächtig / HuntingSignature Base (Florian Roth / Nextron)· Proofpoint· 2024-11-27Detects RAR archive with NTFS alternate data stream
Verdächtig / HuntingSignature Base (Florian Roth / Nextron)· Proofpoint· 2024-12-17track wmRAT based on socket usage, odd error handling, and reused strings
APT / AkteurSignature Base (Florian Roth / Nextron)· Proofpoint· 2024-11-20