admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Atomic GUIDs

Browse Source
This commit is contained in:
Michael Haag
2023-05-15 09:17:57 -06:00
parent 41df5fea27
commit 5eb042fb64
4 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
detections/endpoint/windows_snake_malware_file_modification_crmlog.yml
+1 -1
View File
@@ -21,7 +21,7 @@ tags:
- Snake Malware
asset_type: Endpoint
atomic_guid:
- UPDATE atomic_guid
- 7e47ee60-9dd1-4269-9c4f-97953b183268
confidence: 50
impact: 50
message: A file related to Snake Malware has been identified on $dest$.
detections/endpoint/windows_snake_malware_kernel_driver_comadmin.yml
+1 -1
View File
@@ -22,7 +22,7 @@ tags:
- Snake Malware
asset_type: Endpoint
atomic_guid:
- UPDATE atomic_guid
- e5cb5564-cc7b-4050-86e8-f2d9eec1941f
confidence: 80
impact: 70
message: A kernel driver comadmin.dat related to Snake Malware was written to disk on $dest$.
detections/endpoint/windows_snake_malware_registry_modification_wav_openwithprogids.yml
+1 -1
View File
@@ -23,7 +23,7 @@ tags:
- Snake Malware
asset_type: Endpoint
atomic_guid:
- UPDATE atomic_guid
- 8318ad20-0488-4a64-98f4-72525a012f6b
confidence: 50
impact: 50
message: A registry modification related to Snake Malware has been identified on $dest$.
detections/endpoint/windows_snake_malware_service_create.yml
+1 -1
View File
@@ -24,7 +24,7 @@ tags:
- Snake Malware
asset_type: Endpoint
atomic_guid:
- UPDATE atomic_guid
- b8db787e-dbea-493c-96cb-9272296ddc49
confidence: 90
impact: 80
message: A service, WerFaultSvc, was created on $dest$ and is related to Snake Malware.