@hexacorn.bsky.social :o someone just sent me your list hexacorn.com/examples/201... this is great thanks!

Thanks! Glad you like them!

Of course! PRs are welcome 🙏

Hexadecimal IP Detection:

Identifiy hexadecimal IP addresses format in command lines with a "simple" regex (some default behaviors to exclude)

Special Caracters anomaly Detection:

This query Extracts common special caracters from the process command line, counts occurrences, calculates ratio, and return commands with more than 20% specials caracters in it, could catch the quote insertions and url transformers techniques

github.com/blechschmidt...