Browse Rules

Search and filter across all detection sources

12 rules

panther medium python

OSQuery Detected Unwanted Chrome Extensions

Monitor for chrome extensions that could lead to a credential compromise.

wazuh low xml

osquery: $(osquery.pack) $(osquery.subquery): BetternetVPN Chrome extension malware detected

osquery: $(osquery.pack) $(osquery.subquery): BetternetVPN Chrome extension malware detected

wazuh low xml

osquery: $(osquery.pack) $(osquery.subquery): Chrometana Chrome extension malware detected

osquery: $(osquery.pack) $(osquery.subquery): Chrometana Chrome extension malware detected

wazuh low xml

osquery: $(osquery.pack) $(osquery.subquery): CopyFish Chrome extension malware detected

osquery: $(osquery.pack) $(osquery.subquery): CopyFish Chrome extension malware detected

wazuh low xml

osquery: $(osquery.pack) $(osquery.subquery): Giphy Chrome extension malware detected

osquery: $(osquery.pack) $(osquery.subquery): Giphy Chrome extension malware detected

wazuh low xml

osquery: $(osquery.pack) $(osquery.subquery): HolaVPN Chrome extension malware detected

osquery: $(osquery.pack) $(osquery.subquery): HolaVPN Chrome extension malware detected

wazuh low xml

osquery: $(osquery.pack) $(osquery.subquery): InfinityNewTab Chrome extension malware detected

osquery: $(osquery.pack) $(osquery.subquery): InfinityNewTab Chrome extension malware detected

wazuh low xml

osquery: $(osquery.pack) $(osquery.subquery): SocialFixer Chrome extension malware detected

osquery: $(osquery.pack) $(osquery.subquery): SocialFixer Chrome extension malware detected

wazuh low xml

osquery: $(osquery.pack) $(osquery.subquery): TouchVPN Chrome extension malware detected

osquery: $(osquery.pack) $(osquery.subquery): TouchVPN Chrome extension malware detected

wazuh low xml

osquery: $(osquery.pack) $(osquery.subquery): WebDeveloper Chrome extension malware detected

osquery: $(osquery.pack) $(osquery.subquery): WebDeveloper Chrome extension malware detected

wazuh low xml

osquery: $(osquery.pack) $(osquery.subquery): WebPaint Chrome extension malware detected

osquery: $(osquery.pack) $(osquery.subquery): WebPaint Chrome extension malware detected

wazuh low xml

osquery: $(osquery.pack) $(osquery.subquery): MacOSInstallCore Chrome extension malware detected

osquery: $(osquery.pack) $(osquery.subquery): MacOSInstallCore Chrome extension malware detected