YARA · Samir Bousseaden (YaraHunts)
SBOUSSEADEN_Adsync_Creddump_Xwide
Azure AdSync Service Account Password Dumping
- Author
- SBousseaden
- Date
- 2020-03-08
- Modified
- 2020-12-28
- Score / Quality
- 75 / 75
What this rule detects
Azure AdSync Service Account Password Dumping
It defines 12 patterns (12 text, 0 hex, 0 regex).
Summary generated from the rule's metadata and condition.
Rule source
Rule text not reproduced
This rule comes from Samir Bousseaden (YaraHunts), which does not grant a licence to redistribute its rules (No licence (all rights reserved)). We show its metadata only. Read the original rule upstream:
Licence & attribution
Author: SBousseaden
Source repository: Samir Bousseaden (YaraHunts) @ 71b27a2a7c
Licence: No licence (all rights reserved) (repository licence)
Mirrored via YARA Forge 20260927, which prefixes rule names with the source and adds normalised meta fields.
Rule id: a8c3e60a-99b8-50c8-992c-fbe18499a615
Related rules
- SBOUSSEADEN_Mimikatz_KiwikeyMetadata onlyHack toolSamir Bousseaden (YaraHunts)· SBousseaden· 2020-08-08
- SBOUSSEADEN_Adsync_Creddump_V64Metadata onlyGenericSamir Bousseaden (YaraHunts)· SBousseaden· 2020-03-08
- SBOUSSEADEN_Adsync_Creddump_XorMetadata onlyGenericSamir Bousseaden (YaraHunts)· SBousseaden· 2020-03-08
- SBOUSSEADEN_APT_Solarwind_Backdoor_Encoded_StringsMetadata onlyAPT / threat actorSamir Bousseaden (YaraHunts)· SBousseaden· 2020-12-14
- SBOUSSEADEN_APT_Xdsspy_XduploadMetadata onlyAPT / threat actorSamir Bousseaden (YaraHunts)· SBousseaden· 2020-05-10
- SBOUSSEADEN_Cve_2019_1458Metadata onlyExploitSamir Bousseaden (YaraHunts)· SBousseaden· 2020-10-22
- SBOUSSEADEN_GosliverMetadata onlyGenericSamir Bousseaden (YaraHunts)· SBousseaden· 2020-10-11
- SBOUSSEADEN_MaliciousdllgeneratorMetadata onlyGenericSamir Bousseaden (YaraHunts)· SBousseaden· 2020-06-07