Search
Keyword: bec_suspicious.ers
Description Name: LETSENCRYPT SSL CERTIFICATE - HTTP (Response) .
Description Name: DEMO RULE - DNS (Request) . This is Trend Micro detection for packets passing through DNS network protocols that manifests Callback activities which can be a potential intrusion. Below are some indicators of unusual behavior:Suspici...
Description Name: Remote Delete Registry through SMB protocol detected .
Description Name: Unauthorized TESTFR IEC-104 Request .
Description Name: IEC104 STOPDT CON - SCADA (Response) .
Description Name: CreateService BADRABBIT - Ransomware - SMB .
Description Name: ANTAK Webshell - HTTP (Request) .
Description Name: Possible Scan of Points List - DNP3 (Response) Beta .
Description Name: Possible Bruteforce - HTTP (Request) .
Description Name: NETBOT - TCP . This is Trend Micro detection for packets passing through TCP network protocols that manifests Callback activities which can be a potential intrusion. Below are some indicators of unusual behavior:Suspicious activity ...
Description Name: AUTORUN - HTTP (Request) - Variant 16 . This is Trend Micro detection for packets passing through HTTP network protocols that manifests Callback activities which can be a potential intrusion. Below are some indicators of unusual beh...
Micro Deep Security), Suspicious Behavior (Trend Micro OfficeScan), Suspicious Software Blocked (Trend Micro Titanium)
Description Name: Public C&C IP address - IRC (Request) . This is Trend Micro detection for packets passing through IRC network protocols that manifests Callback activities which can be a potential intrusion. Below are some indicators of unusual beha...
Description Name: AGENT - HTTP (Request) - Variant 21 . This is Trend Micro detection for packets passing through HTTP network protocols that manifests Callback activities which can be a potential intrusion. Below are some indicators of unusual behav...
Description Name: Archive file containing file with double extension . This is Trend Micro detection for packets passing through any network protocols that manifests unusual behavior which can be a potential intrusion. Below are some indicators of un...
Description Name: AGENT - HTTP (Request) - Variant 17 . This is Trend Micro detection for packets passing through HTTP network protocols that manifests Callback activities which can be a potential intrusion. Below are some indicators of unusual behav...
Description Name: Possible PLUGX UDP Request . This is Trend Micro detection for packets passing through UDP network protocols that manifests Callback activities which can be a potential intrusion. Below are some indicators of unusual behavior:Suspic...
Description Name: ActiveX codebase pushing executable - HTTP (Response) . This is Trend Micro detection for packets passing through HTTP network protocols that manifests unusual behavior which can be a potential intrusion. Below are some indicators o...
Description Name: PHP WebShell - HTTP (Request) - Variant 2 .
Description Name: ELF File requested from root directory - HTTP (Response) .