Rule Info
Name
Potential GobRAT File Discovery Via Grep
Author
Joseliyo Sanchez, @Joseliyo_Jstnk
Description
Detects the use of grep to discover specific files created by the GobRAT malware
Date
2023-06-02 00:00:00
Modified
None
Id
e34cfa0c-0a50-4210-9cb3-5632d08eb041
Tags
attack.discovery attack.t1082 DEMO
Type
Community Rule
Link to Public Repo
Scan your endpoints, forensic images or collected files with our portable scanner THOR