YARA rules tagged LOG
6 rules carry the tag “LOG”.
Detects forensic artefacts indicating successful exploitation of F5 BIG IP appliances as reported by NCCGroup
ExploitSignature Base (Florian Roth / Nextron)· Florian Roth (Nextron Systems)· 2021-03-20Detects forensic artefacts found in HAFNIUM intrusions exploiting CVE-2021-27065
ExploitSignature Base (Florian Roth / Nextron)· Florian Roth (Nextron Systems)· 2021-03-02Detects forensic artefacts showing cleanup activity found in HAFNIUM intrusions exploiting
ExploitSignature Base (Florian Roth / Nextron)· Florian Roth (Nextron Systems)· 2021-03-08Detects suspicious log lines produeced during the exploitation of ADSelfService vulnerability CVE-2021-40539
ExploitSignature Base (Florian Roth / Nextron)· Florian Roth (Nextron Systems)· 2021-09-20Detects forensic artefacts found in HAFNIUM intrusions exploiting CVE-2021-26858
ExploitSignature Base (Florian Roth / Nextron)· Florian Roth (Nextron Systems)· 2021-03-02Detects suspicious log entries that indicate requests as described in reports on HAFNIUM activity
ExploitSignature Base (Florian Roth / Nextron)· Florian Roth (Nextron Systems)· 2021-03-10