01
detectionlint / library / yara-l

recon_suspicious_commands_cisa_report

yara-lApache-2.0from chronicle/detection-rules

Detects suspicious commands as identified in CISA Living off the Land pdf. Alone they may be normal but in concert, they may be worth looking into

02
quality66
fp risk—
forks0
views0
rule sourcelocked

Sign in to view the rule source

Free accounts can view the source for the top-ranked rules. Create one in seconds — no credit card required.

Sign in