Potential Data Exfiltration Via Audio File

Rule Info

Name
Potential Data Exfiltration Via Audio File
Description
Detects potential exfiltration attempt via audio file using PowerShell
Modified
None
Date
2023-01-16 00:00:00
Author
Nasreddine Bencherchali (Nextron Systems)
Tags
attack.exfiltration DEMO
Id
e4f93c99-396f-47c8-bb0f-201b1fa69034
Type
Community Rule

Rule History

Author
Commit
Title
Date
Nasreddine Bencherchali
chore: add nextron authors tag
2023-02-01
Nasreddine Bencherchali
fix: fp and broken field name
2023-01-18
Nasreddine Bencherchali
fix: apply suggestions from code review
2023-01-18
Nasreddine Bencherchali
feat: new rules and updates
2023-01-17