Language | Detection.FYI

Elastic

Nov 24, 2025 ·
Share on:

Read More
MQL

Nov 24, 2025 ·
Share on:

Read More
Sigma

Nov 24, 2025 ·
Share on:

Read More

Recent Posts

Suspicious Filename with Embedded Base64 Commands
Abused Debug Privilege by Arbitrary Parent Processes
Active Directory Replication from Non Machine Account
Always Install Elevated MSI Spawned Cmd And Powershell
APT User Agent
Arbitrary Shell Command Execution Via Settingcontent-Ms
Auditing Configuration Changes on Linux Host
AWS IAM Backdoor Users Keys

Language

SIGMA 3996 ELASTIC 1528 MQL 772

Tags

ATTACK.DEFENSE-EVASION 1498 RESOURCES-INVESTIGATION-GUIDE 1454 USE-CASE-THREAT-DETECTION 1091 DOMAIN-ENDPOINT 934 ATTACK.EXECUTION 925 ATTACK.PERSISTENCE 845 DATA-SOURCE-ELASTIC-DEFEND 768 ATTACK.PRIVILEGE-ESCALATION 717 OS-WINDOWS 504 DATA-SOURCE-ELASTIC-ENDGAME 434 DETECTION.EMERGING-THREATS 431 OS-LINUX 390 TACTIC-DEFENSE-EVASION 390 DATA-SOURCE-SENTINELONE 373