Search
Keyword: bec_suspicious.ers
Description Name: File renamed - CRYSIS - Ransomware - SMB (Request) . This is the Trend Micro detection for malicious SMB2,SMB network packet that manifest any of the following actions:MalwareThis attack is used for Lateral Movement
Description Name: Executable file name with multiple consecutive spaces . This is Trend Micro detection for packets passing through various network protocols that manifests unusual behavior which can be a potential intrusion. Below are some indicator...
Description Name: File renamed - WCRY - Ransomware - SMB (Request) .
Description Name: Remote Delete Registry through SMB protocol detected .
Description Name: Unauthorized STARTDT IEC-104 Request .
Description Name: IEC104 STARTDT CON - SCADA (Response) .
Description Name: SAGECRYPT - HTTP (Request) . Related Malware: Mal_SageCrypt
Description Name: Unauthorized Broadcast Request - DNP3 (Request) .
Description Name: VIRTUMONDE - HTTP (Request) . This is Trend Micro detection for packets passing through HTTP network protocols that manifests Login Attempt actions which can be a potential intrusion. Below are some indicators of unusual behavior:Su...
Description Name: Script file name with multiple consecutive spaces . This is Trend Micro detection for packets passing through various network protocols that manifests unusual behavior which can be a potential intrusion. Below are some indicators of...
Apply associated Trend Micro DPI Rules. 1007969|
Microsoft enables scripts that are embedded in an HTML document or in a Windows Scripting Host file to access COM+ objects. An attacker can create COM+ objects in script code stored in an Extensible
Description Name: CVE-2020-0601 Spoofed Certificate Attempt - TLS (Response) . This is Trend Micro detection for HTTP network protocol that manifests exploit activities and can be used for Point of Entry or Lateral Movement.The host exhibiting this t...
Description Name: ICMP SWEEP - ICMP (Request) .
Description Name: File with multiple extensions ending with executable extension . This is Trend Micro detection for packets passing through various network protocols that manifests unusual behavior which can be a potential intrusion. Below are some ...
Description Name: SPYEYE - HTTP (Request) - Variant 3 . This is Trend Micro detection for packets passing through HTTP network protocols that manifests Callback activities which can be a potential intrusion. Below are some indicators of unusual behav...
Description Name: File name with multiple consecutive spaces and executable extension . This is Trend Micro detection for packets passing through various network protocols that manifests unusual behavior which can be a potential intrusion. Below are ...
Description Name: DNS response resolves to dead IP address . This is the Trend Micro detection for malicious N/A network packet
Description Name: DEMO RULE - HTTP (Request) . This is Trend Micro detection for packets passing through HTTP network protocols that manifests Callback activities which can be a potential intrusion. Below are some indicators of unusual behavior:Suspi...
Description Name: CreateService BADRABBIT - Ransomware - SMB .