.
Read the full article on GamingOnLinux.
Intelligence View
If you're curious how to update the version of DXVK or VKD3D-Proton used by either Valve's official Proton or community versions like GE-Proton, here's what you can do..Read the full article on GamingOnLinux.
.
Read the full article on GamingOnLinux.
title: Detect Exploitation - How to update DXVK and VKD3D-Proton in Proton and GE-Proton
id: 746399dd-e95a-4841-9e6e-04ee11a21912
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
- https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-25
logsource:
category: network_connection
product: any
detection:
selection:
CommandLine|contains:
- 'exploit'
condition: selection
falsepositives:
- Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
- attack.initial_accessrule CTI_Threat_Indicator {
meta:
author = "iShareStuff CTI Automated Detection Engine"
date = "2026-09-25"
description = "YARA Signature for "
strings:
$str = "How to update DXVK and VKD3D-P" ascii wide
condition:
any of them
}index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("How to update DXVK and VKD3D-Proton in P")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - countmessage: "*How to update DXVK and VKD3D-Proton in P*"CommonSecurityLog
| where Message has "How to update DXVK and VKD3D-Proton in P"
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount descKognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich How to update DXVK and VKD3D-Proton in P.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.
Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.
Ähnliche Beiträge
Thematisch verwandte Begriffe: update, DXVK, VKD3DProton, Proton · 6 Treffer
Videos werden geladen ...
Beiträge werden geladen ...
Videos werden geladen ...
Beiträge werden geladen ...
Videos werden geladen ...
Beiträge werden geladen ...
Videos werden geladen ...
Beiträge werden geladen ...
Videos werden geladen ...
Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.