SigmaHQ | Detection.FYI

sigma

Jan 15, 2025 ·
Share on:

Read More

Recent Posts

Potential CVE-2023-36874 Exploitation - Fake Wermgr.Exe Creation
CVE-2024-49113 Exploitation Attempt - LDAP Nightmare
Active Directory Certificate Services Denied Certificate Enrollment Request
AWS Console GetSigninToken Potential Abuse
Bitbucket Audit Log Configuration Updated
Bitbucket Full Data Export Triggered
Bitbucket Global Permission Changed
Bitbucket Global Secret Scanning Rule Deleted

Language

SIGMA 3901 ELASTIC 1266 MQL 512

Tags

ATTACK.DEFENSE-EVASION 1271 USE-CASE-THREAT-DETECTION 876 ATTACK.EXECUTION 829 DOMAIN-ENDPOINT 792 DATA-SOURCE-ELASTIC-DEFEND 636 ATTACK.PERSISTENCE 571 OS-WINDOWS 443 ATTACK.PRIVILEGE-ESCALATION 373 DATA-SOURCE-ELASTIC-ENDGAME 370 DETECTION.EMERGING-THREATS 331 TACTIC-DEFENSE-EVASION 321 ATTACK.CREDENTIAL-ACCESS 298 OS-LINUX 298 DATA-SOURCE-SENTINELONE 288