Sponsor of the Day:
Jerkmate
https://detection.fyi/sigmahq/sigma/windows/process_creation/proc_creation_win_rundll32_shelldispatch_potential_abuse/
Potential ShellDispatch.DLL Functionality Abuse | Detection.FYI
abuse detectionpotentialdllfunctionalityfyi
https://www.first.org/global/sigs/dns/stakeholder-advice/detection/lame-delegations
DNS Abuse Detection: Lame delegations
dns abuse detectionlamedelegations
https://www.first.org/global/sigs/dns/stakeholder-advice/detection/infiltration-and-exfiltration-via-the-dns
DNS Abuse Detection: Infiltration and exfiltration via the DNS
dns abuse detectionexfiltration viainfiltration
https://www.first.org/global/sigs/dns/stakeholder-advice/detection/dns-beacons-c2-communication
DNS Abuse Detection: DNS Beacons - C2 Communication
dns abuse detectionbeaconsc2communication
https://www.first.org/global/sigs/dns/stakeholder-advice/detection/cache-poisoning
DNS Abuse Detection: Cache Poisoning
dns abuse detectioncache poisoning
https://spur.us/solutions/web-applications-platforms
Web Applications & Platforms Teams – Session-Level Abuse Detection | Spur
See how web application and platform teams use infrastructure-aware session intelligence to detect anonymized abuse, stop account farming and bots, and protect...
web applicationsabuse detectionplatformsteamssession
https://www.first.org/global/sigs/dns/stakeholder-advice/detection/dns-rebinding
DNS Abuse Detection: DNS rebinding
dns abuse detectionrebinding
https://www.first.org/global/sigs/dns/stakeholder-advice/detection/stub-resolver-hijacking
DNS Abuse Detection: Stub resolver hijacking
dns abuse detectionresolver hijackingstub
https://codeberg.org/gone/go-away
gone/go-away: [Mirror] Self-hosted abuse detection and rule enforcement against low-effort mass AI...
go-away - [Mirror] Self-hosted abuse detection and rule enforcement against low-effort mass AI scraping and bots.
self hosted abuselow effort massgo awayrule enforcementgone
https://detection.fyi/sigmahq/sigma/windows/process_creation/proc_creation_win_mftrace_child_process/
Potential Mftrace.EXE Abuse | Detection.FYI
Detects child processes of the
abuse detectionpotentialexefyi
https://www.first.org/global/sigs/dns/stakeholder-advice/detection/malicious-registration-of-effective-second-level-domains
DNS Abuse Detection: Malicious registration of (effective) second level domains
dns abuse detectionsecond levelmaliciousregistrationeffective
https://www.first.org/global/sigs/dns/stakeholder-advice/detection/dns-tunneling
DNS Abuse Detection: DNS Tunneling - Tunneling Another Protocol Over DNS
dns abuse detectiontunnelinganotherprotocol
https://www.first.org/global/sigs/dns/stakeholder-advice/detection/local-resolver-hijacking
DNS Abuse Detection: Local recursive resolver hijacking
dns abuse detectionresolver hijackinglocalrecursive
https://xenforo.com/community/threads/signup-abuse-detection-and-blocking-paid.156501/
Signup abuse detection and blocking [Paid] | XenForo community
Xon submitted a new resource: Signup abuse detection and blocking - Provides a toolkit to reduce signup spam From (simple) multiple accounts detection to...
signup abuse detectionpaid xenforo communityblocking
https://git.sr.ht/~datahoarder/go-away
~datahoarder/go-away - [Mirror] Self-hosted abuse detection and rule enforcement against low-effort...
self hosted abusego awayrule enforcementlow effortdatahoarder
https://ecpat.org/joint-call-on-european-parliament-to-allow-the-continuation-of-current-child-sexual-abuse-detection-practices/
Joint Call on European Parliament to Allow the Continuation of Current Child Sexual Abuse Detection...
Mar 18, 2026 - Brussels, 10 March 2026 For more than a decade, online services have voluntarily deployed well-established technologies to detect, report and remove child...
child sexual abusejoint calleuropean parliamentallowcontinuation
https://xenforo.com/community/resources/signup-abuse-detection-and-blocking.6812/reviews
Signup abuse detection and blocking - Reviews | XenForo community
signup abuse detectionreviews xenforo communityblocking
https://www.first.org/global/sigs/dns/stakeholder-advice/detection/on-path-dns-attack
DNS Abuse Detection: On-path DNS attack
dns abuse detectionpathattack
https://shield.com/use-cases/referral-promo-abuse
Referral Fraud Prevention & Promo Abuse Detection | SHIELD
SHIELD’s AI-powered device-first fraud intelligence platform prevents referral fraud, collusion, and promo abuse by detecting multi-accounting, bots, and...
fraud preventionabuse detectionreferralpromoshield
https://git.gammaspectra.live/git/go-away?ref=blog.arcjet.com
git/go-away: Self-hosted abuse detection and rule enforcement against low-effort mass AI scraping...
go-away - Self-hosted abuse detection and rule enforcement against low-effort mass AI scraping and bots.
self hosted abuselow effort massgit gorule enforcementai scraping
https://www.first.org/global/sigs/dns/stakeholder-advice/detection/dga
DNS Abuse Detection: Domain Generation Algorithms
dns abuse detectiondomain generationalgorithms
https://xenforo.com/community/resources/signup-abuse-detection-and-blocking.6812/
Signup abuse detection and blocking | XenForo community
Apr 29, 2026 - From (simple) multiple accounts detection to isp/connection fingerprinting with score-based moderating/rejecting logic. These are very effective low-hanging...
signup abuse detectionxenforo communityblocking
https://www.first.org/global/sigs/dns/stakeholder-advice/detection/spoofing-of-a-registered-domain
DNS Abuse Detection: Spoofing of a registered domain
dns abuse detectionregistered domainspoofing
https://git.gammaspectra.live/git/go-away
git/go-away: Self-hosted abuse detection and rule enforcement against low-effort mass AI scraping...
go-away - Self-hosted abuse detection and rule enforcement against low-effort mass AI scraping and bots.
self hosted abuselow effort massgit gorule enforcementai scraping
https://spur.us/platform/residential-proxy-detection
Residential Proxy Detection – Expose Automation & Abuse | Spur
Reveal automation, scraping, and account abuse hidden behind residential proxies. Spur classifies anonymized networks with verified attribution and real-time...
residential proxydetectionexposeautomationabuse
https://www.cnn.com/interactive/2026/03/world/expose-rape-assault-online-vis-intl/index.html
Exposing a global ‘online rape academy’ that is teaching men how to abuse women and evade detection
Mar 26, 2026 - CNN exposes an online network of men encouraging each other to drug and assault their partners, and swap tips on how to get away with it.
teaching menevade detectionexposingglobalrape
https://detection.fyi/sigmahq/sigma/windows/process_creation/proc_creation_win_sc_sdset_hide_sevices/
Service DACL Abuse To Hide Services Via Sc.EXE | Detection.FYI
Detects usage of the
exe detection fyiservices viadaclabusehide
https://detection.fyi/sigmahq/sigma/windows/powershell/powershell_module/posh_pm_remotefxvgpudisablement_abuse/
Potential RemoteFXvGPUDisablement.EXE Abuse - PowerShell Module | Detection.FYI
Detects PowerShell module creation where the module Contents are set to
powershell module detectionpotentialexeabusefyi
https://detection.fyi/sigmahq/sigma/linux/process_creation/proc_creation_lnx_vim_shell_execution/
Vim GTFOBin Abuse - Linux | Detection.FYI
linux detection fyivimabuse
https://detection.fyi/tsale/sigma_rules/windows_exploitation/proc_creation_windows_wsus_abuse/
Abuse of the Windows Server Update Services (WSUS) for lateral movement. | Detection.FYI
Windows Server Update Services (WSUS) is a critical component of Windows systems and is frequently configured in a way that allows an attacker to circumvent …
windows server updatelateral movement detectionabuseserviceswsus