Robuta

Sponsor of the Day: Jerkmate
https://detection.fyi/sigmahq/sigma/windows/process_creation/proc_creation_win_rundll32_shelldispatch_potential_abuse/ Potential ShellDispatch.DLL Functionality Abuse | Detection.FYI abuse detectionpotentialdllfunctionalityfyi https://www.first.org/global/sigs/dns/stakeholder-advice/detection/lame-delegations DNS Abuse Detection: Lame delegations dns abuse detectionlamedelegations https://www.first.org/global/sigs/dns/stakeholder-advice/detection/infiltration-and-exfiltration-via-the-dns DNS Abuse Detection: Infiltration and exfiltration via the DNS dns abuse detectionexfiltration viainfiltration https://www.first.org/global/sigs/dns/stakeholder-advice/detection/dns-beacons-c2-communication DNS Abuse Detection: DNS Beacons - C2 Communication dns abuse detectionbeaconsc2communication https://www.first.org/global/sigs/dns/stakeholder-advice/detection/cache-poisoning DNS Abuse Detection: Cache Poisoning dns abuse detectioncache poisoning https://spur.us/solutions/web-applications-platforms Web Applications & Platforms Teams – Session-Level Abuse Detection | Spur See how web application and platform teams use infrastructure-aware session intelligence to detect anonymized abuse, stop account farming and bots, and protect... web applicationsabuse detectionplatformsteamssession https://www.first.org/global/sigs/dns/stakeholder-advice/detection/dns-rebinding DNS Abuse Detection: DNS rebinding dns abuse detectionrebinding https://www.first.org/global/sigs/dns/stakeholder-advice/detection/stub-resolver-hijacking DNS Abuse Detection: Stub resolver hijacking dns abuse detectionresolver hijackingstub https://codeberg.org/gone/go-away gone/go-away: [Mirror] Self-hosted abuse detection and rule enforcement against low-effort mass AI... go-away - [Mirror] Self-hosted abuse detection and rule enforcement against low-effort mass AI scraping and bots. self hosted abuselow effort massgo awayrule enforcementgone https://detection.fyi/sigmahq/sigma/windows/process_creation/proc_creation_win_mftrace_child_process/ Potential Mftrace.EXE Abuse | Detection.FYI Detects child processes of the abuse detectionpotentialexefyi https://www.first.org/global/sigs/dns/stakeholder-advice/detection/malicious-registration-of-effective-second-level-domains DNS Abuse Detection: Malicious registration of (effective) second level domains dns abuse detectionsecond levelmaliciousregistrationeffective https://www.first.org/global/sigs/dns/stakeholder-advice/detection/dns-tunneling DNS Abuse Detection: DNS Tunneling - Tunneling Another Protocol Over DNS dns abuse detectiontunnelinganotherprotocol https://www.first.org/global/sigs/dns/stakeholder-advice/detection/local-resolver-hijacking DNS Abuse Detection: Local recursive resolver hijacking dns abuse detectionresolver hijackinglocalrecursive https://xenforo.com/community/threads/signup-abuse-detection-and-blocking-paid.156501/ Signup abuse detection and blocking [Paid] | XenForo community Xon submitted a new resource: Signup abuse detection and blocking - Provides a toolkit to reduce signup spam From (simple) multiple accounts detection to... signup abuse detectionpaid xenforo communityblocking https://git.sr.ht/~datahoarder/go-away ~datahoarder/go-away - [Mirror] Self-hosted abuse detection and rule enforcement against low-effort... self hosted abusego awayrule enforcementlow effortdatahoarder https://ecpat.org/joint-call-on-european-parliament-to-allow-the-continuation-of-current-child-sexual-abuse-detection-practices/ Joint Call on European Parliament to Allow the Continuation of Current Child Sexual Abuse Detection... Mar 18, 2026 - Brussels, 10 March 2026 For more than a decade, online services have voluntarily deployed well-established technologies to detect, report and remove child... child sexual abusejoint calleuropean parliamentallowcontinuation https://xenforo.com/community/resources/signup-abuse-detection-and-blocking.6812/reviews Signup abuse detection and blocking - Reviews | XenForo community signup abuse detectionreviews xenforo communityblocking https://www.first.org/global/sigs/dns/stakeholder-advice/detection/on-path-dns-attack DNS Abuse Detection: On-path DNS attack dns abuse detectionpathattack https://shield.com/use-cases/referral-promo-abuse Referral Fraud Prevention & Promo Abuse Detection | SHIELD SHIELD’s AI-powered device-first fraud intelligence platform prevents referral fraud, collusion, and promo abuse by detecting multi-accounting, bots, and... fraud preventionabuse detectionreferralpromoshield https://git.gammaspectra.live/git/go-away?ref=blog.arcjet.com git/go-away: Self-hosted abuse detection and rule enforcement against low-effort mass AI scraping... go-away - Self-hosted abuse detection and rule enforcement against low-effort mass AI scraping and bots. self hosted abuselow effort massgit gorule enforcementai scraping https://www.first.org/global/sigs/dns/stakeholder-advice/detection/dga DNS Abuse Detection: Domain Generation Algorithms dns abuse detectiondomain generationalgorithms https://xenforo.com/community/resources/signup-abuse-detection-and-blocking.6812/ Signup abuse detection and blocking | XenForo community Apr 29, 2026 - From (simple) multiple accounts detection to isp/connection fingerprinting with score-based moderating/rejecting logic. These are very effective low-hanging... signup abuse detectionxenforo communityblocking https://www.first.org/global/sigs/dns/stakeholder-advice/detection/spoofing-of-a-registered-domain DNS Abuse Detection: Spoofing of a registered domain dns abuse detectionregistered domainspoofing https://git.gammaspectra.live/git/go-away git/go-away: Self-hosted abuse detection and rule enforcement against low-effort mass AI scraping... go-away - Self-hosted abuse detection and rule enforcement against low-effort mass AI scraping and bots. self hosted abuselow effort massgit gorule enforcementai scraping https://spur.us/platform/residential-proxy-detection Residential Proxy Detection – Expose Automation & Abuse | Spur Reveal automation, scraping, and account abuse hidden behind residential proxies. Spur classifies anonymized networks with verified attribution and real-time... residential proxydetectionexposeautomationabuse https://www.cnn.com/interactive/2026/03/world/expose-rape-assault-online-vis-intl/index.html Exposing a global ‘online rape academy’ that is teaching men how to abuse women and evade detection Mar 26, 2026 - CNN exposes an online network of men encouraging each other to drug and assault their partners, and swap tips on how to get away with it. teaching menevade detectionexposingglobalrape https://detection.fyi/sigmahq/sigma/windows/process_creation/proc_creation_win_sc_sdset_hide_sevices/ Service DACL Abuse To Hide Services Via Sc.EXE | Detection.FYI Detects usage of the exe detection fyiservices viadaclabusehide https://detection.fyi/sigmahq/sigma/windows/powershell/powershell_module/posh_pm_remotefxvgpudisablement_abuse/ Potential RemoteFXvGPUDisablement.EXE Abuse - PowerShell Module | Detection.FYI Detects PowerShell module creation where the module Contents are set to powershell module detectionpotentialexeabusefyi https://detection.fyi/sigmahq/sigma/linux/process_creation/proc_creation_lnx_vim_shell_execution/ Vim GTFOBin Abuse - Linux | Detection.FYI linux detection fyivimabuse https://detection.fyi/tsale/sigma_rules/windows_exploitation/proc_creation_windows_wsus_abuse/ Abuse of the Windows Server Update Services (WSUS) for lateral movement. | Detection.FYI Windows Server Update Services (WSUS) is a critical component of Windows systems and is frequently configured in a way that allows an attacker to circumvent … windows server updatelateral movement detectionabuseserviceswsus