8 matches found
CVE-2024-4577
CVE-2024-4577 FOFA搜索： header="Xamppsinfo" || body="/xampps.jpg" || header="location http" && header="xampp" || body="content="Kai Oswald Seidler" || title="XAMPP for" || title="XAMPP Version" || body="font-size: 1.2em; color: red;"New XAMPP" Censys搜索：...
Threat-Hunting
威胁狩猎 | 检测工程 威胁狩猎 与检测查询 合集，适用于： CrowdStrike Falcon （使用 CQL – CrowdStrike 查询语言） Microsoft Defender XDR （使用 KQL – Kusto 查询语言） 旨在发现可疑进程、异常网络行为、离地生存二进制文件（LOLBins）、持久化机制、凭据访问、横向移动、C2 活动以及潜在的 APT 行为。所有查询尽可能映射到 MITRE ATT &CK 技术。 查询内容基于最新的威胁情报报告、新兴攻击活动及真实观察持续更新。 内容结构 /CrowdStrike/ → 用于 Falcon Insight /...
KQL-Hunting_and_Detection-Queries
此存储库没有 README。...
crowdstrike-falcon-queries
crowdstrike-falcon-queries Una raccolta di Search Processing Language SPL di Splunk per la Threat Hunting con CrowdStrike Falcon Sviluppato e mantenuto dal team Intelligent Response di i-secure co., Ltd. crowdstrike-falcon-queries Esecuzione di eseguibili rinominati Elenco dei binari Living Off T...
osquery-defense-kit
osquery-defense-kit Query osquery per rilevamento e risposta agli incidenti, contenenti oltre 250 query pronte per la produzione. ODK osquery-defense-kit è unico in quanto le query sono progettate per essere utilizzate come parte di una pipeline di rilevamento e risposta in produzione. Le query d...
SynRAG: A Large Language Model Framework for Executable Query Generation in Heterogeneous SIEM System
Security Information and Event Management SIEM systems are essential for large enterprises to monitor their IT infrastructure by ingesting and analyzing millions of logs and events daily. Security Operations Center SOC analysts are tasked with monitoring and analyzing this vast data to identify...
SQLInjectionWiki
This is a SQL injection wiki repository. It is a collection of resources and information on SQL injection techniques, including detection, exploitation, and mitigation. The repository is maintained by NetSPI and is available in both English and Chinese versions. The wiki covers various topics...
