Search

This is Trend Micro detection for HTTP network protocol that manifests exploit activities and can be used for Point of Entry. The host exhibiting this type of network behavior is likely compromised by malware, or being used by a malicious insider to ...

This is Trend Micro detection for HTTP network protocol that manifests exploit activities and can be used for Point of Entry or Lateral Movement. The host exhibiting this type of network behavior is likely compromised by malware, or being used by a m...

This is Trend Micro detection for HTTP network protocol that manifests exploit activities and can be used for Point of Entry or Lateral Movement. The host exhibiting this type of network behavior is likely compromised by malware, or being used by a m...

* indicates a new version of an existing rule Deep Packet Inspection Rules: DNS Client 1010740* - DNSmasq DNSSEC Heap Based Buffer Overflow Vulnerability (CVE-2020-25681) Intel Data Center Manager 1011672* - Intel Data Center ...

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

This is Trend Micro detection for DCERPC network protocol that manifests exploit activities and can be used for Point of Entry or Lateral Movement. The host exhibiting this type of network behavior is likely compromised by malware, or being used by a...

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

This is Trend Micro detection for packets passing through MYSQL network protocols that manifests Database Access activities which can be a potential intrusion. Below are some indicators of unusual behavior: Suspicious activity in administrator or pri...

This is Trend Micro detection for HTTP network protocol that manifests exploit activities and can be used for Point of Entry or Lateral Movement. The host exhibiting this type of network behavior is likely compromised by malware, or being used by a m...

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

* indicates a new version of an existing rule Deep Packet Inspection Rules: Advanced Message Queuing Protocol (AMQP) 1011585* - SolarWinds Network Performance Monitor Insecure Deserialization Vulnerabilities (CVE-2022-36957 and...

* indicates a new version of an existing rule Deep Packet Inspection Rules: Advanced Message Queuing Protocol (AMQP) 1011834 - SolarWinds Network Performance Monitor Insecure Deserialization Vulnerability (CVE-2022-38111) Apac...

This is Trend Micro detection for packets passing through TCP network protocols that can be used as Command and Control Communication. This also indicates a malware infection. Below are some indicators of an infected host: Excessive spamming, exploit...

This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It connects to Internet Relay Chat (IRC) servers. It joins an Internet Relay Chat (IRC) channel. It exec...

This is Trend Micro detection for packets passing through SMB2 network protocols that manifests unusual behavior which can be a potential intrusion. Below are some indicators of unusual behavior: Suspicious activity in administrator or privileged acc...

This is Trend Micro detection for packets passing through VNC network protocols that manifests Remote Access Tool activities which can be a potential intrusion. Below are some indicators of unusual behavior: Suspicious activity in administrator or pr...

This is Trend Micro detection for packets passing through VNC network protocols that manifests Remote Access Tool activities which can be a potential intrusion. Below are some indicators of unusual behavior: Suspicious activity in administrator or pr...

This is Trend Micro detection for packets passing through VNC network protocols that manifests Remote Access Tool activities which can be a potential intrusion. Below are some indicators of unusual behavior: Suspicious activity in administrator or pr...

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It does not have any propagation routine. It does not have any backdoor routine. It does not have any info...

This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It executes commands from a remote malicious user, effectively compromising the affected system.