elastic | Detection.FYI

detection-rules

Mar 31, 2026 ·
Share on:

Read More

Recent Posts

DMSA Link Attributes Modified
DMSA Service Account Created in Specific OUs - PowerShell
New DMSA Service Account Created in Specific OUs
PUA - TruffleHog Execution
Script Interpreter Spawning Credential Scanner - Linux
Script Interpreter Spawning Credential Scanner - Windows
Shai-Hulud 2.0 Malicious NPM Package Installation
Shai-Hulud 2.0 Malicious NPM Package Installation - Linux

Language

SIGMA 4052 ELASTIC 1759 MQL 932

Tags

RESOURCES-INVESTIGATION-GUIDE 1679 ATTACK.DEFENSE-EVASION 1527 USE-CASE-THREAT-DETECTION 1317 DOMAIN-ENDPOINT 1040 ATTACK.EXECUTION 946 DATA-SOURCE-ELASTIC-DEFEND 867 ATTACK.PERSISTENCE 860 ATTACK.PRIVILEGE-ESCALATION 731 OS-WINDOWS 541 OS-LINUX 472 DATA-SOURCE-ELASTIC-ENDGAME 471 DETECTION.EMERGING-THREATS 440 TACTIC-DEFENSE-EVASION 429 DATA-SOURCE-SENTINELONE 420