| Name / Title | Added | Expires | Hits | Comments | Syntax | |
|---|---|---|---|---|---|---|
| StarBlizzard Domains | Oct 13th, 2024 | Never | 253 | 0 | None | - |
| PotentialPaperCutExploitRelatedInfra | Apr 20th, 2023 | Never | 964 | 0 | None | - |
| OktaPhishing | Feb 10th, 2023 | Never | 514 | 0 | None | - |
| RISE_Resources | Feb 1st, 2023 | Never | 277 | 4 | None | - |
| Possible_IcedID_C2_Domains | Jan 18th, 2023 | Never | 209 | 0 | None | - |
| Skytalks2022_References | Aug 14th, 2022 | Never | 612 | 0 | None | - |
| MSHTML_Vuln_IOCs | Sep 8th, 2021 | Never | 3,256 | 0 | None | - |
| Pos_SVR_2021_Campaign | May 27th, 2021 | Never | 581 | 0 | None | - |
| pos_strongpity | Mar 15th, 2021 | Never | 423 | 0 | None | - |
| exchange_malicious_IPs | Mar 8th, 2021 | Never | 1,275 | 0 | None | - |
| CloudAtlas_Infrastructure | Feb 18th, 2021 | Never | 692 | 0 | None | - |
| unk_UA_Phishing_Campaign | Feb 16th, 2021 | Never | 437 | 0 | None | - |
| edu_pos_BEC | Feb 15th, 2021 | Never | 1,451 | 0 | None | - |
| gov-us Domains | Feb 10th, 2021 | Never | 1,261 | 0 | None | - |
| 28jan_BazarLoader_Infrastructure | Jan 28th, 2021 | Never | 681 | 0 | None | - |
| additional_possible_bazar | Jan 27th, 2021 | Never | 589 | 0 | None | - |
| possible_bazar_infrastructure | Jan 27th, 2021 | Never | 538 | 0 | None | - |
| possible_bazar_campaign | Jan 26th, 2021 | Never | 777 | 0 | None | - |
| Possible_Bazar_Infrastructure | Dec 21st, 2020 | Never | 2,617 | 1 | None | - |
| possible_bazar_linked | Dec 21st, 2020 | Never | 727 | 0 | None | - |
| sunburst_extended_pivoting | Dec 15th, 2020 | Never | 3,623 | 0 | None | - |
| avsvmcloud_pdns | Dec 13th, 2020 | Never | 7,206 | 0 | None | - |
| crybaby_terrorist_infrastructure | Dec 9th, 2020 | Never | 3,298 | 0 | None | - |
| europa_registrations | Dec 9th, 2020 | Never | 1,198 | 0 | None | - |
| jerrywilliams775 | Dec 8th, 2020 | Never | 388 | 0 | None | - |
| heyorwalata | Dec 8th, 2020 | Never | 446 | 0 | None | - |
| Possible_CobaltStrike_NetworkInfrastructure | Dec 6th, 2020 | Never | 3,800 | 11 | None | - |
| COVID_ColdChain_Related_Infrastructure | Dec 3rd, 2020 | Never | 739 | 0 | None | - |
| Possible_Kimsuky_Domains | Dec 2nd, 2020 | Never | 951 | 0 | None | - |
| QuakBot_DropperXLS_YARA | Dec 1st, 2020 | Never | 428 | 0 | None | - |
| Possible_QuakBot_Doc_SHA256 | Dec 1st, 2020 | Never | 1,041 | 0 | None | - |
| Late2020_Possible_Ryuk | Nov 25th, 2020 | Never | 652 | 0 | None | - |
| possilble_ryuk_related | Oct 29th, 2020 | Never | 635 | 0 | None | - |
| suspect_ryuk | Oct 28th, 2020 | Never | 3,938 | 0 | None | - |
| kimsuky_konkuk | Oct 28th, 2020 | Never | 1,004 | 0 | None | - |
| kimsuky_moar_leaseweb_ip | Oct 27th, 2020 | Never | 982 | 0 | None | - |
| kimsuky_leaseweb_ip | Oct 27th, 2020 | Never | 1,001 | 0 | None | - |
| kimsuky_daou_server | Oct 27th, 2020 | Never | 894 | 0 | None | - |
| kimsuky_sslport | Oct 27th, 2020 | Never | 967 | 0 | None | - |
| x33fcon_2020_resources | Sep 14th, 2020 | Never | 488 | 0 | None | - |
| TaiwanMediaSites | Aug 20th, 2020 | Never | 593 | 0 | None | - |
| Slowik_BHUSA_2020_Rejected | Jul 4th, 2020 | Never | 2,012 | 0 | None | - |
| Related_Registration_Items_Tied_To_US_Unrest | Jun 7th, 2020 | Never | 570 | 0 | None | - |
| EKANS_ProcessList_With_Description | Jan 28th, 2020 | Never | 1,353 | 5 | None | - |
| Microsoft_DPRK_Takedown | Dec 31st, 2019 | Never | 11,225 | 9 | None | - |
| THALLIUM/Kimsuky_Infrastructure | Dec 31st, 2019 | Never | 4,104 | 0 | None | - |
| ovh-related_items | Dec 19th, 2019 | Never | 1,778 | 0 | None | - |
| wellsfargo_spoofing | Oct 9th, 2019 | Never | 442 | 0 | None | - |
| alfidaa_forum | Jun 17th, 2019 | Never | 334 | 0 | None | - |
| magnallium_hta_fuzzing | Apr 9th, 2019 | Never | 488 | 0 | None | - |
| lockergoga_samples | Mar 27th, 2019 | Never | 1,229 | 0 | None | - |
| possible_shamoon_items | Dec 11th, 2018 | Never | 550 | 0 | None | - |
| odd_related_registrations | Sep 2nd, 2018 | Never | 1,506 | 0 | None | - |
| scammy_mcscamface | Jun 29th, 2018 | Never | 390 | 0 | None | - |
| linode_fun | Jun 28th, 2018 | Never | 379 | 0 | None | - |
| olympicdestroyer_redux | Jun 20th, 2018 | Never | 495 | 0 | None | - |
| njRAT_samples | Jun 14th, 2018 | Never | 303 | 0 | None | - |
| misc_phishing | Jun 13th, 2018 | Never | 390 | 0 | None | - |
| iran_military | May 12th, 2018 | Never | 404 | 0 | None | - |
| odd_israel_themed | May 12th, 2018 | Never | 426 | 0 | None | - |
| apple_spoofing | Apr 27th, 2018 | Never | 264 | 0 | None | - |
| amex_and_related | Mar 31st, 2018 | Never | 470 | 0 | None | - |
| otan_spoof | Mar 10th, 2018 | Never | 803 | 0 | None | - |
| canadian_financials | Feb 21st, 2018 | Never | 391 | 0 | None | - |
| olympicdestroyer_hashes | Feb 16th, 2018 | Never | 931 | 0 | None | - |
| Latin_Theme | Jan 22nd, 2018 | Never | 567 | 0 | None | - |
| weird_campaign | Jan 12th, 2018 | Never | 354 | 0 | None | - |
