elastic | Detection.FYI

detection-rules

Oct 11, 2024 ·
Share on:

Read More

Recent Posts

CodeIntegrity - Unmet Signing Level Requirements By File Under Validation
Renamed Powershell Under Powershell Channel
Suspicious Non PowerShell WSMAN COM Provider
Antivirus Password Dumper Detection
HackTool - Certipy Execution
Alternate PowerShell Hosts Pipe
Local System Accounts Discovery - Linux
Disable Windows Defender Functionalities Via Registry Keys

Language

SIGMA 3890 ELASTIC 1199 MQL 456

Tags

ATTACK.DEFENSE-EVASION 1267 ATTACK.EXECUTION 826 USE-CASE-THREAT-DETECTION 826 DOMAIN-ENDPOINT 753 DATA-SOURCE-ELASTIC-DEFEND 593 ATTACK.PERSISTENCE 570 OS-WINDOWS 440 ATTACK.PRIVILEGE-ESCALATION 370 DATA-SOURCE-ELASTIC-ENDGAME 332 DETECTION.EMERGING-THREATS 330 TACTIC-DEFENSE-EVASION 298 ATTACK.CREDENTIAL-ACCESS 297 RESOURCES-INVESTIGATION-GUIDE 272 OS-LINUX 263