Browse Rules

Search and filter across all detection sources

238 rules

sagan informational other

[DIGITALPERSONA] Fingerprint reader disconnected

[DIGITALPERSONA] Fingerprint reader disconnected

sagan high other

[Barracuda] WAF Fingerprint Challenges Exceeded

[Barracuda] WAF Fingerprint Challenges Exceeded

sagan medium other

[WEB-ATTACKS] Hmap Webserver Fingerprint Scan

[WEB-ATTACKS] Hmap Webserver Fingerprint Scan

bertjanp unknown kql

JA3 Fingerprint Blacklist

sagan low other

mattermost

mattermost

sagan low other

procmail

procmail

sagan high other

[Barracuda] WAF Fingerprint Risk Level Bad Client

[Barracuda] WAF Fingerprint Risk Level Bad Client

sagan high other

[Barracuda] WAF Fingerprint Risk Level Suspected Client

[Barracuda] WAF Fingerprint Risk Level Suspected Client

sekoia unknown yara

loader_fakebat_powershell_fingerprint_may24 [yara_rules]

Finds FakeBat PowerShell script fingerprinting the infected host.

sagan low other

Applocker detected

Applocker detected

sagan low other

Bit9 detected

Bit9 detected

sagan low other

Centrify detected

Centrify detected

sagan low other

DigitalPersona detected

DigitalPersona detected

sagan low other

Dovecot detected

Dovecot detected

sagan low other

FIPAYPIN detected

FIPAYPIN detected

sagan low other

Grsec detected

Grsec detected

sagan low other

Honeyd detected

Honeyd detected

sagan low other

Hostapd detected

Hostapd detected

sagan low other

IMAPD detected

IMAPD detected

sagan low other

IPOP3D detected

IPOP3D detected

sagan low other

Juniper detected

Juniper detected

sagan low other

NeXpose detected

NeXpose detected

sagan low other

Nfcapd detected

Nfcapd detected

sagan low other

NXLog detected

NXLog detected

sagan low other

Office365 detect

Office365 detect