Search and filter across all detection sources
377 rules
ldpreload [capabilities]
dyndns [capabilities]
Dynamic DNS
lookupgeo [capabilities]
Lookup Geolocation
screenshot [capabilities]
Take screenshot
cred_local [capabilities]
Steal credential
escalate_priv [capabilities]
Escalade priviledges
keylogger [capabilities]
Run a keylogger
lookupip [capabilities]
Lookup external IP
sniff_audio [capabilities]
Record Audio
bitcoin [capabilities]
Perform crypto currency mining
certificate [capabilities]
Inject certificate in store
cred_ff [capabilities]
Steal Firefox credential
cred_vnc [capabilities]
Steal VNC credential
hijack_network [capabilities]
Hijack network configuration
network_dga [capabilities]
Communication using dga
network_dns [capabilities]
Communications use DNS
network_dropper [capabilities]
File downloader/dropper
network_dyndns [capabilities]
Communications dyndns network
network_ftp [capabilities]
Communications over FTP
network_http [capabilities]
Communications over HTTP
network_smtp_dotNet [capabilities]
Communications smtp
network_smtp_raw [capabilities]
network_smtp_vb [capabilities]
network_ssl [capabilities]
Communications over SSL
win_registry [capabilities]
Affect system registries