joesecurity | Detection.FYI

sigma-rules

Sep 21, 2023 ·
Share on:

Read More

Recent Posts

AWS Identity Center Identity Provider Change
Uncommon Microsoft Office Trusted Location Added
Scheduled Task Created - FileCreation
Scheduled Task Created - Registry
Service Registry Key Read Access Request
Suspicious Epmap Connection
Linux Network Service Scanning - Auditd
DarkGate

Language

SIGMA 3487 ELASTIC 944 MQL 257

Tags

ATTACK.DEFENSE_EVASION 1230 ATTACK.EXECUTION 750 USE-CASE-THREAT-DETECTION 633 DOMAIN-ENDPOINT 586 ATTACK.PERSISTENCE 512 DATA-SOURCE-ELASTIC-DEFEND 457 ATTACK.PRIVILEGE_ESCALATION 378 OS-WINDOWS 371 ATTACK.CREDENTIAL_ACCESS 293 DATA-SOURCE-ELASTIC-ENDGAME 270 RESOURCES-INVESTIGATION-GUIDE 249 DETECTION.EMERGING_THREATS 233 ATTACK.COMMAND_AND_CONTROL 230 ATTACK.DISCOVERY 223