Règles YARA avec le tag LOG

Detects forensic artefacts indicating successful exploitation of F5 BIG IP appliances as reported by NCCGroup

Detects forensic artefacts found in HAFNIUM intrusions exploiting CVE-2021-27065

Detects forensic artefacts showing cleanup activity found in HAFNIUM intrusions exploiting

Detects suspicious log lines produeced during the exploitation of ADSelfService vulnerability CVE-2021-40539

Detects forensic artefacts found in HAFNIUM intrusions exploiting CVE-2021-26858

Detects suspicious log entries that indicate requests as described in reports on HAFNIUM activity