Sponsor of the Day:
Jerkmate
https://detection.fyi/sigmahq/sigma/web/proxy_generic/proxy_ua_powershell/
Windows PowerShell User Agent | Detection.FYI
Detects Windows PowerShell Web Access
user agent detectionwindows powershellfyi
https://detection.fyi/sigmahq/sigma/emerging-threats/2025/malware/katz-stealer/zeek_http_katz_stealer_susp_useragent/
Katz Stealer Suspicious User-Agent | Detection.FYI
Detects network connections with a suspicious user-agent string containing
user agent detectionkatzstealersuspiciousfyi
https://detection.fyi/sigmahq/sigma/web/proxy_generic/proxy_ua_susp_base64/
Potential Base64 Encoded User-Agent | Detection.FYI
Detects User Agent strings that end with an equal sign, which can be a sign of base64 encoding.
user agent detectionbase64 encodedpotentialfyi