admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

more_3cx

Browse Source
This commit is contained in:
tccontre
2023-03-31 13:12:23 +02:00
parent af46c0b73a
commit 0ebe65532d
2 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
detections/endpoint/non_chrome_process_accessing_chrome_default_dir.yml
+1
View File
@@ -30,6 +30,7 @@ tags:
- FIN7
- Remcos
- AgentTesla
- 3CX Supply Chain Attack
confidence: 70
context:
- Source:Endpoint
detections/endpoint/non_firefox_process_access_firefox_profile_dir.yml
+1
View File
@@ -31,6 +31,7 @@ tags:
- Remcos
- Azorult
- AgentTesla
- 3CX Supply Chain Attack
confidence: 70
context:
- Source:Endpoint