Samir Bousseaden (YaraHunts)
- Repositorio
- https://github.com/sbousseaden/YaraHunts
- Commit
- 71b27a2a7c57c2aa1877a11d8933167794e2b4fb
- Obtenido
- 2026-09-27
- Licencia
- No licence (all rights reserved)
- Publicación
- Metadatos
- Motivo
- No LICENSE file in the repository and no licence statement in its README (checked 2026-09-29). Without a grant, the rules are all rights reserved: metadata and an upstream link only.
Reglas de Samir Bousseaden (YaraHunts)
- SBOUSSEADEN_Mimikatz_KiwikeySolo metadatos
hunt for default mimikatz kiwikey
Herramienta ofensivaSamir Bousseaden (YaraHunts)· SBousseaden· 2020-08-08 - SBOUSSEADEN_Adsync_Creddump_V64Solo metadatos
Azure AdSync Service Account Password Dumping
GenéricaSamir Bousseaden (YaraHunts)· SBousseaden· 2020-03-08 - SBOUSSEADEN_Adsync_Creddump_XorSolo metadatos
Azure AdSync Service Account Password Dumping
GenéricaSamir Bousseaden (YaraHunts)· SBousseaden· 2020-03-08 - SBOUSSEADEN_Adsync_Creddump_XwideSolo metadatos
Azure AdSync Service Account Password Dumping
GenéricaSamir Bousseaden (YaraHunts)· SBousseaden· 2020-03-08 - SBOUSSEADEN_APT_Solarwind_Backdoor_Encoded_StringsSolo metadatos
This rule is looking for some key encoded strings of the SUNBURST backdoor
APT / actorSamir Bousseaden (YaraHunts)· SBousseaden· 2020-12-14 - SBOUSSEADEN_APT_Xdsspy_XduploadSolo metadatos
No description has been set in the source file - SBousseaden
APT / actorSamir Bousseaden (YaraHunts)· SBousseaden· 2020-05-10 - SBOUSSEADEN_Cve_2019_1458Solo metadatos
No description has been set in the source file - SBousseaden
ExploitSamir Bousseaden (YaraHunts)· SBousseaden· 2020-10-22 - SBOUSSEADEN_GosliverSolo metadatos
No description has been set in the source file - SBousseaden
GenéricaSamir Bousseaden (YaraHunts)· SBousseaden· 2020-10-11 - SBOUSSEADEN_MaliciousdllgeneratorSolo metadatos
MaliciousDLLGenerator default decoder and export name
GenéricaSamir Bousseaden (YaraHunts)· SBousseaden· 2020-06-07 - SBOUSSEADEN_Shad0W_Beacon_16JuneSolo metadatos
Shad0w beacon compressed
GenéricaSamir Bousseaden (YaraHunts)· SBousseaden· 2020-06-16 - SBOUSSEADEN_Shad0W_Ldrloaddll_HookSolo metadatos
Shad0w beacon LdrLoadDll hook
GenéricaSamir Bousseaden (YaraHunts)· SBousseaden· 2020-06-06 - SBOUSSEADEN_TDL_Loader_Bootstrap_ShellcodeSolo metadatos
No description has been set in the source file - SBousseaden
MalwareSamir Bousseaden (YaraHunts)· SBousseaden· 2020-10-10 - SBOUSSEADEN_Webcreds_Regexp_B64Solo metadatos
No description has been set in the source file - SBousseaden
GenéricaSamir Bousseaden (YaraHunts)· SBousseaden· 2020-03-08 - SBOUSSEADEN_Susp_Msoffice_Addins_WxllSolo metadatos
hunt for suspicious MS Office Addins with code injection capabilities
Sospechoso / huntingSamir Bousseaden (YaraHunts)· SBousseaden· 2020-11-10 - SBOUSSEADEN_Mimikatz_Memssp_HookfnSolo metadatos
hunt for default mimikatz memssp module both ondisk and in memory artifacts
Herramienta ofensivaSamir Bousseaden (YaraHunts)· SBousseaden· 2020-08-26 - SBOUSSEADEN_InfinityhookSolo metadatos
Infinityhook is a legit research PoC to hook NT Syscalls bypassing PatchGuard
GenéricaSamir Bousseaden (YaraHunts)· SBousseaden· 2020-09-07 - SBOUSSEADEN_Shad0W_BeaconSolo metadatos
Shad0w beacon default suspicous strings
GenéricaSamir Bousseaden (YaraHunts)· SBousseaden· 2020-06-04 - SBOUSSEADEN_Hunt_Susp_VhdSolo metadatos
Virtual hard disk file with embedded PE
Sospechoso / huntingSamir Bousseaden (YaraHunts)· SBousseaden· 2020-07-13