SigmaHQ | Detection.FYI

sigma

Feb 16, 2026 ·
Share on:

Read More

Recent Posts

Potential Defense Evasion Via Rename Of Highly Relevant Binaries
System File Execution Location Anomaly
Suspicious Child Process of SolarWinds WebHelpDesk
Notepad++ Updater DNS Query to Uncommon Domains
Suspicious Child Process of Notepad++ Updater - GUP.Exe
Uncommon File Created by Notepad++ Updater Gup.EXE
Windows Credential Guard Disabled - Registry
Windows Credential Guard Registry Tampering Via CommandLine

Language

SIGMA 4041 ELASTIC 1705 MQL 870

Tags

RESOURCES-INVESTIGATION-GUIDE 1629 ATTACK.DEFENSE-EVASION 1525 USE-CASE-THREAT-DETECTION 1266 DOMAIN-ENDPOINT 1009 ATTACK.EXECUTION 937 ATTACK.PERSISTENCE 857 DATA-SOURCE-ELASTIC-DEFEND 840 ATTACK.PRIVILEGE-ESCALATION 727 OS-WINDOWS 526 DATA-SOURCE-ELASTIC-ENDGAME 456 OS-LINUX 454 DETECTION.EMERGING-THREATS 435 TACTIC-DEFENSE-EVASION 414 DATA-SOURCE-SENTINELONE 405