junk/spl
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Upload files to "yara"

Browse Source
This commit is contained in:
Matthew Iverson
2025-01-12 22:40:13 -05:00
parent bffa34b43f
commit 9a615e1afd
14 changed files with 641 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
yara/Bifrost-suricata-20250112.txt Normal file
View File

@ -0,0 +1,2 @@
alert ip 107.191.61.247 any -> any any (msg:"Suspicious Bifrost IP detected Entering Network: 107.191.61.247 (source) - APT Group: BlackTech"; sid:7744721591; rev:1;)
alert ip any any -> 107.191.61.247 any (msg:"Suspicious Bifrost IP detected Leaving Network: 107.191.61.247 (destination) - APT Group: BlackTech"; sid:7744721592; rev:1;)