elastic | Detection.FYI

detection-rules

Jan 23, 2026 ·
Share on:

Read More

Recent Posts

Local System Accounts Discovery - Linux
Suspicious Package Installed - Linux
Curl Web Request With Potential Custom User-Agent
File Download From IP URL Via Curl.EXE
Insecure Proxy/DOH Transfer Via Curl.EXE
Insecure Transfer Via Curl.EXE
Local File Read Using Curl.EXE
Potential Cookies Session Hijacking

Language

SIGMA 4013 ELASTIC 1597 MQL 833

Tags

RESOURCES-INVESTIGATION-GUIDE 1523 ATTACK.DEFENSE-EVASION 1507 USE-CASE-THREAT-DETECTION 1150 DOMAIN-ENDPOINT 964 ATTACK.EXECUTION 933 ATTACK.PERSISTENCE 850 DATA-SOURCE-ELASTIC-DEFEND 799 ATTACK.PRIVILEGE-ESCALATION 719 OS-WINDOWS 520 DATA-SOURCE-ELASTIC-ENDGAME 451 DETECTION.EMERGING-THREATS 434 OS-LINUX 416 DATA-SOURCE-SENTINELONE 402 TACTIC-DEFENSE-EVASION 398