Download File To Potentially Suspicious Directory Via Wget

Rule Info

Name
Download File To Potentially Suspicious Directory Via Wget
Author
Joseliyo Sanchez, @Joseliyo_Jstnk
Description
Detects the use of wget to download content to a suspicious directory
Date
2023-06-02 00:00:00
Modified
None
Id
cf610c15-ed71-46e1-bdf8-2bd1a99de6c4
Tags
attack.command_and_control attack.t1105 DEMO
Type
Community Rule

Rule History

Author
Title
Date
Commit
github-actions[bot]
Merge PR #4791 from @nasbench - Promote older rules status from `experimental` to `test`
2024-04-01
jstnk9
feat: new linux rules related to GobRAT malware (#4272)
2023-06-02