Browse Rules

Search and filter across all detection sources

908 rules

sagan critical other

[ZSCALER] Fake Opera 8.11 UA related to Trojan Activity

[ZSCALER] Fake Opera 8.11 UA related to Trojan Activity
sagan critical other

[ZEEK] TeamCymruMalwareHashRegistry Match

[ZEEK] TeamCymruMalwareHashRegistry Match
sagan critical other

[CISCO-SCA] Abnormal User

[CISCO-SCA] Abnormal User
sagan critical other

[CISCO-SCA] Amplification Attack

[CISCO-SCA] Amplification Attack
sagan critical other

[CISCO-SCA] Attendance Drop

[CISCO-SCA] Attendance Drop
sagan critical other

[CISCO-SCA] DNS Abuse

[CISCO-SCA] DNS Abuse
sagan critical other

[CISCO-SCA] Emergent Profile

[CISCO-SCA] Emergent Profile
sagan critical other

[CISCO-SCA] ICMP Abuse

[CISCO-SCA] ICMP Abuse
sagan critical other

[CISCO-SCA] Malware Spike

[CISCO-SCA] Malware Spike
sagan critical other

[CISCO-SCA] Protocol Forgery

[CISCO-SCA] Protocol Forgery
sagan critical other

[CISCO-SCA] Role Violation

[CISCO-SCA] Role Violation
sagan critical other

[CISCO-SCA] Watchlist Hit

[CISCO-SCA] Watchlist Hit
sagan critical other

[CISCO-SCA] Worm Propagation

[CISCO-SCA] Worm Propagation
sagan critical other

[CROWDSTRIKE] Collection Tactic Catchall

[CROWDSTRIKE] Collection Tactic Catchall
sagan critical other

[CROWDSTRIKE] Execution Tactic Catchall

[CROWDSTRIKE] Execution Tactic Catchall
sagan critical other

[CROWDSTRIKE] Exfiltration Tactic Catchall

[CROWDSTRIKE] Exfiltration Tactic Catchall
sagan critical other

[CROWDSTRIKE] Impact Tactic Catchall

[CROWDSTRIKE] Impact Tactic Catchall
sagan critical other

[CROWDSTRIKE] Malware Tactic Catchall

[CROWDSTRIKE] Malware Tactic Catchall
sagan critical other

[CROWDSTRIKE] Persistence Tactic Catchall

[CROWDSTRIKE] Persistence Tactic Catchall
sagan critical other

[FORTINET] Botnet Communication Detected

[FORTINET] Botnet Communication Detected
sagan critical other

[FORTINET] Botnet Communication Detected

[FORTINET] Botnet Communication Detected
sagan critical other

[FORTINET] Botnet traffic detected

[FORTINET] Botnet traffic detected
sagan critical other

[FORTINET] Botnet traffic detected

[FORTINET] Botnet traffic detected
sagan critical other

[FORTINET] Botnet traffic detected

[FORTINET] Botnet traffic detected
sagan critical other

[FORTINET] Compromised Host Detected

[FORTINET] Compromised Host Detected