Browse Rules

Pandemic Registry Key

Detects Pandemic Windows Implant

WannaCry Ransomware Activity

Detects WannaCry ransomware activity

Pandemic Registry Key

Detects Pandemic Windows Implant

WannaCry Ransomware Activity

Detects WannaCry ransomware activity

DarkSide Ransomware Pattern

Detects DarkSide Ransomware and helpers

Pandemic Registry Key

Detects Pandemic Windows Implant

Potential EmpireMonkey Activity

Detects potential EmpireMonkey APT activity

Potential Ryuk Ransomware Activity

Detects Ryuk ransomware activity

WannaCry Ransomware Activity

Detects WannaCry ransomware activity

ComRAT Network Communication

Detects Turla ComRAT network communication.

DarkSide Ransomware Pattern

Detects DarkSide Ransomware and helpers

Potential EmpireMonkey Activity

Detects potential EmpireMonkey APT activity

Potential Ryuk Ransomware Activity

Detects Ryuk ransomware activity

DarkSide Ransomware Pattern

Detects DarkSide Ransomware and helpers

Fireball Archer Install

Detects Archer malware invocation via rundll32

Potential EmpireMonkey Activity

Detects potential EmpireMonkey APT activity

Potential MuddyWater APT Activity

Detects potential Muddywater APT activity

Potential Ryuk Ransomware Activity

Detects Ryuk ransomware activity

Rorschach Ransomware Execution Activity

Detects Rorschach ransomware execution activity

Fireball Archer Install

Detects Archer malware invocation via rundll32

Potential MuddyWater APT Activity

Detects potential Muddywater APT activity

Rorschach Ransomware Execution Activity

Detects Rorschach ransomware execution activity

Ursnif Malware C2 URL Pattern

Detects Ursnif C2 traffic.

Elise Backdoor Activity

Detects Elise backdoor activity used by APT32

Fireball Archer Install

Detects Archer malware invocation via rundll32