Reglas YARA con la etiqueta CVE_2024_3400
3 reglas llevan la etiqueta «CVE_2024_3400».
Detects suspicious base64 encoded shell commands (as seen in Palo Alto CVE-2024-3400 exploitation)
Sospechoso / huntingSignature Base (Florian Roth / Nextron)· Christian Burkard· 2024-04-18Detects forensic artefacts of APT UTA028 as found in a campaign exploiting the Palo Alto CVE-2024-3400 vulnerability
APT / actorSignature Base (Florian Roth / Nextron)· Florian Roth· 2024-04-15Detects characteristics of the exploit code used in attacks against Palo Alto GlobalProtect CVE-2024-3400
ExploitSignature Base (Florian Roth / Nextron)· Florian Roth· 2024-04-15