Règles YARA avec le tag CVE_2024_3400
3 règles portent le tag « CVE_2024_3400 ».
Detects suspicious base64 encoded shell commands (as seen in Palo Alto CVE-2024-3400 exploitation)
Suspect / chasseSignature Base (Florian Roth / Nextron)· Christian Burkard· 2024-04-18Detects forensic artefacts of APT UTA028 as found in a campaign exploiting the Palo Alto CVE-2024-3400 vulnerability
APT / acteurSignature Base (Florian Roth / Nextron)· Florian Roth· 2024-04-15Detects characteristics of the exploit code used in attacks against Palo Alto GlobalProtect CVE-2024-3400
ExploitSignature Base (Florian Roth / Nextron)· Florian Roth· 2024-04-15