Tag
high
advisory
Detection of Malicious Activity via Anti-Virus Application Logs
1 rule 1 TTPThis detection brief provides a comprehensive list of keyword signatures for identifying malicious tool and malware execution artifacts within the Windows Application event log.
anti-virus
detection-engineering
windows
monitoring
1r
1t
medium
advisory
Kaspersky Anti-Virus Reverse Engineering for Document Detection
2 rules 1 TTPA blog post details the reverse engineering of the Kaspersky anti-virus engine on macOS to demonstrate the potential for crafting signatures capable of detecting and flagging classified documents, leveraging the product's scanning capabilities and dynamic signature updates, without implying any malicious activity by Kaspersky.
Kaspersky Internet Security
anti-virus
reverse-engineering
signature-analysis
macos
2r
1t