Rule Info
Name
Potentially Suspicious File Download From ZIP TLD
Author
Florian Roth (Nextron Systems)
Description
Detects the download of a file with a potentially suspicious extension from a .zip top level domain.
Date
2023-05-18 00:00:00
Modified
None
Id
0bb4bbeb-fe52-4044-b40c-430a04577ebe
Tags
attack.defense_evasion DEMO
Type
Community Rule
Link to Public Repo
Rule History
Author
Title
Date
Commit
github-actions[bot]
Merge PR #4791 from @nasbench - Promote older rules status from `experimental` to `test`
2024-04-01
Scan your endpoints, forensic images or collected files with our portable scanner THOR