issues
search
ditekshen
/
detection
Detection in the form of Yara, Snort and ClamAV signatures.
Other
200
stars
38
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
False detections
#30
kotenok2000
closed
1 month ago
1
Poor rules
#29
abusech
closed
15 hours ago
2
please help me to unpack a file with ConfuserEx Mod
#28
Siddugggggyjkygj
closed
2 months ago
2
INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL
#27
UnrealKaraulov
closed
3 months ago
2
Remove arbitrary github urls from Gist matcher
#26
raggi
closed
3 months ago
1
Add INDICATOR_SUSPICIOUS_REGKEYS_DisableFeatures
#25
HydraDragonAntivirus
closed
6 months ago
3
fix: very noisy rule
#24
Neo23x0
closed
6 months ago
5
Certificate for Akeo Consulting is a false positive
#23
pbatard
closed
9 months ago
2
esetonlinescanner got detected by your signatures
#22
HydraDragonAntivirus
closed
9 months ago
5
Minor changes
#21
iam-py-test
closed
9 months ago
0
There no problems at Linux but I have problems on Windows
#20
HydraDragonAntivirus
closed
10 months ago
1
Error on ditekSHen.INDICATOR.Win.RMM.SplashtopStreamer
#19
teoberi
closed
10 months ago
1
Error on Malware_Win_Warezov malware.yar
#18
HydraDragonAntivirus
closed
10 months ago
3
Possible typo in MALWARE_Linux_RansomExx
#17
PeterMatula
closed
10 months ago
1
False Positive with AutoHotkey Compiles with MPRESS Compression
#16
KaptainCnuckz
closed
1 year ago
1
false positive??
#15
inikishev
closed
1 year ago
1
False positive: ditekSHen.MALWARE.Win.Ransomware.Epsilon.UNOFFICIAL
#14
ulyszk
closed
1 year ago
1
Rule INDICATOR_KB_CERT_0407abb64e9990180789eacb81f5f914
#13
madibon
closed
1 year ago
0
False positive
#12
JulyIghor
closed
1 year ago
0
Error on malware.yara
#11
petikvx
closed
1 year ago
2
False positive rule: INDICATOR_SUSPICIOUS_EXE_References_CryptoWallets
#10
ipetrovic11
closed
1 year ago
7
False Positive
#9
krypt0x
closed
1 year ago
3
INDICATOR_KB_CERT_62e745e92165213c971f5c490aea12a5 is slightly too broad
#8
HenkPoley
closed
2 years ago
1
False positive on WinRAR setup?
#7
casperklein
closed
2 years ago
1
False positive on Python Software Foundation?
#6
danielgcom
closed
2 years ago
1
Akeo Consulting certificate rule
#5
pbatard
closed
2 years ago
5
False detection on virustotal?
#4
semenenkov
closed
2 years ago
2
What is the point of this?
#3
Sainan
closed
2 years ago
1
Stomped_PECompilation_Timerstamp_IntTheFuture is not supicious
#2
govert
closed
2 years ago
4
Changed Piratestealer Detection
#1
StayWithMeSenpai
closed
2 years ago
1