Language | Detection.FYI

MQL

Jan 25, 2025 ·
Share on:

Read More
Elastic

Jan 24, 2025 ·
Share on:

Read More
Sigma

Jan 22, 2025 ·
Share on:

Read More

Recent Posts

Privileged User Has Been Created
Forest Blizzard APT - Process Creation Activity
HackTool - Dumpert Process Dumper Execution
ManageEngine Endpoint Central Dctask64.EXE Potential Abuse
Renamed ZOHO Dctask64 Execution
Potentially Suspicious Volume Shadow Copy Vsstrace.dll Load
Azure Login Bypassing Conditional Access Policies
Shell Execution via Rsync - Linux

Language

SIGMA 3903 ELASTIC 1281 MQL 512

Tags

ATTACK.DEFENSE-EVASION 1272 RESOURCES-INVESTIGATION-GUIDE 1208 USE-CASE-THREAT-DETECTION 890 ATTACK.EXECUTION 830 DOMAIN-ENDPOINT 806 DATA-SOURCE-ELASTIC-DEFEND 650 ATTACK.PERSISTENCE 571 OS-WINDOWS 444 DATA-SOURCE-ELASTIC-ENDGAME 383 ATTACK.PRIVILEGE-ESCALATION 373 DETECTION.EMERGING-THREATS 331 TACTIC-DEFENSE-EVASION 324 OS-LINUX 311 DATA-SOURCE-SENTINELONE 301