ditekshen/detection issues and pull requests

#31 - Issue with ditekSHen.MALWARE.Win.Trojan.RemoteUtilitiesRAT

Issue - State: closed - Opened by mrkpl125 17 days ago - 5 comments

#31 - Issue with ditekSHen.MALWARE.Win.Trojan.RemoteUtilitiesRAT

Issue - State: closed - Opened by mrkpl125 17 days ago - 5 comments

#30 - False detections

Issue - State: closed - Opened by kotenok2000 4 months ago - 1 comment

#30 - False detections

Issue - State: closed - Opened by kotenok2000 4 months ago - 1 comment

#29 - Poor rules

Issue - State: closed - Opened by abusech 4 months ago - 2 comments

#29 - Poor rules

Issue - State: closed - Opened by abusech 4 months ago - 2 comments

#28 - please help me to unpack a file with ConfuserEx Mod

Issue - State: closed - Opened by Siddugggggyjkygj 5 months ago - 2 comments

#28 - please help me to unpack a file with ConfuserEx Mod

Issue - State: closed - Opened by Siddugggggyjkygj 5 months ago - 2 comments

#27 - INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

Issue - State: closed - Opened by UnrealKaraulov 5 months ago - 2 comments

#27 - INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

Issue - State: closed - Opened by UnrealKaraulov 5 months ago - 2 comments

#26 - Remove arbitrary github urls from Gist matcher

Pull Request - State: closed - Opened by raggi 8 months ago - 1 comment

#26 - Remove arbitrary github urls from Gist matcher

Pull Request - State: closed - Opened by raggi 8 months ago - 1 comment

#25 - Add INDICATOR_SUSPICIOUS_REGKEYS_DisableFeatures

Pull Request - State: closed - Opened by HydraDragonAntivirus 9 months ago - 3 comments

#25 - Add INDICATOR_SUSPICIOUS_REGKEYS_DisableFeatures

Pull Request - State: closed - Opened by HydraDragonAntivirus 9 months ago - 3 comments

#24 - fix: very noisy rule

Pull Request - State: closed - Opened by Neo23x0 10 months ago - 5 comments

#24 - fix: very noisy rule

Pull Request - State: closed - Opened by Neo23x0 10 months ago - 5 comments

#23 - Certificate for Akeo Consulting is a false positive

Issue - State: closed - Opened by pbatard 11 months ago - 2 comments

#23 - Certificate for Akeo Consulting is a false positive

Issue - State: closed - Opened by pbatard 11 months ago - 2 comments

#22 - esetonlinescanner got detected by your signatures

Issue - State: closed - Opened by HydraDragonAntivirus 12 months ago - 5 comments

#22 - esetonlinescanner got detected by your signatures

Issue - State: closed - Opened by HydraDragonAntivirus 12 months ago - 5 comments

#21 - Minor changes

Pull Request - State: closed - Opened by iam-py-test 12 months ago

#21 - Minor changes

Pull Request - State: closed - Opened by iam-py-test 12 months ago

#20 - There no problems at Linux but I have problems on Windows

Issue - State: closed - Opened by HydraDragonAntivirus about 1 year ago - 1 comment

#20 - There no problems at Linux but I have problems on Windows

Issue - State: closed - Opened by HydraDragonAntivirus about 1 year ago - 1 comment

#19 - Error on ditekSHen.INDICATOR.Win.RMM.SplashtopStreamer

Issue - State: closed - Opened by teoberi about 1 year ago - 1 comment

#19 - Error on ditekSHen.INDICATOR.Win.RMM.SplashtopStreamer

Issue - State: closed - Opened by teoberi about 1 year ago - 1 comment

#18 - Error on Malware_Win_Warezov malware.yar

Issue - State: closed - Opened by HydraDragonAntivirus about 1 year ago - 3 comments

#18 - Error on Malware_Win_Warezov malware.yar

Issue - State: closed - Opened by HydraDragonAntivirus about 1 year ago - 3 comments

#17 - Possible typo in MALWARE_Linux_RansomExx

Issue - State: closed - Opened by PeterMatula about 1 year ago - 1 comment

#17 - Possible typo in MALWARE_Linux_RansomExx

Issue - State: closed - Opened by PeterMatula about 1 year ago - 1 comment

#16 - False Positive with AutoHotkey Compiles with MPRESS Compression

Issue - State: closed - Opened by KaptainCnuckz almost 2 years ago - 1 comment

#16 - False Positive with AutoHotkey Compiles with MPRESS Compression

Issue - State: closed - Opened by KaptainCnuckz almost 2 years ago - 1 comment

#15 - false positive??

Issue - State: closed - Opened by inikishev almost 2 years ago - 1 comment

#15 - false positive??

Issue - State: closed - Opened by inikishev almost 2 years ago - 1 comment

#14 - False positive: ditekSHen.MALWARE.Win.Ransomware.Epsilon.UNOFFICIAL

Issue - State: closed - Opened by ulyszk about 2 years ago - 1 comment

#14 - False positive: ditekSHen.MALWARE.Win.Ransomware.Epsilon.UNOFFICIAL

Issue - State: closed - Opened by ulyszk about 2 years ago - 1 comment

#13 - Rule INDICATOR_KB_CERT_0407abb64e9990180789eacb81f5f914

Issue - State: closed - Opened by madibon about 2 years ago

#13 - Rule INDICATOR_KB_CERT_0407abb64e9990180789eacb81f5f914

Issue - State: closed - Opened by madibon about 2 years ago

#12 - False positive

Issue - State: closed - Opened by JulyIghor about 2 years ago

#11 - Error on malware.yara

Issue - State: closed - Opened by petikvx about 2 years ago - 2 comments

#10 - False positive rule: INDICATOR_SUSPICIOUS_EXE_References_CryptoWallets

Issue - State: closed - Opened by ipetrovic11 about 2 years ago - 7 comments

#9 - False Positive

Issue - State: closed - Opened by krypt0x over 2 years ago - 3 comments

#8 - INDICATOR_KB_CERT_62e745e92165213c971f5c490aea12a5 is slightly too broad

Issue - State: closed - Opened by HenkPoley over 2 years ago - 1 comment

#7 - False positive on WinRAR setup?

Issue - State: closed - Opened by casperklein over 2 years ago - 1 comment

#6 - False positive on Python Software Foundation?

Issue - State: closed - Opened by danielgcom almost 3 years ago - 1 comment

#5 - Akeo Consulting certificate rule

Issue - State: closed - Opened by pbatard almost 3 years ago - 5 comments

#4 - False detection on virustotal?

Issue - State: closed - Opened by semenenkov almost 3 years ago - 2 comments

#3 - What is the point of this?

Issue - State: closed - Opened by Sainan almost 3 years ago - 1 comment

#2 - Stomped_PECompilation_Timerstamp_IntTheFuture is not supicious

Issue - State: closed - Opened by govert almost 3 years ago - 4 comments

#1 - Changed Piratestealer Detection

Pull Request - State: closed - Opened by StayWithMeSenpai almost 3 years ago - 1 comment

GitHub / ditekshen/detection issues and pull requests