YARA rules tagged CVE_2024_3400
3 rules carry the tag “CVE_2024_3400”.
Detects suspicious base64 encoded shell commands (as seen in Palo Alto CVE-2024-3400 exploitation)
Suspicious / huntingSignature Base (Florian Roth / Nextron)· Christian Burkard· 2024-04-18Detects forensic artefacts of APT UTA028 as found in a campaign exploiting the Palo Alto CVE-2024-3400 vulnerability
APT / threat actorSignature Base (Florian Roth / Nextron)· Florian Roth· 2024-04-15Detects characteristics of the exploit code used in attacks against Palo Alto GlobalProtect CVE-2024-3400
ExploitSignature Base (Florian Roth / Nextron)· Florian Roth· 2024-04-15