cloud | Detection.FYI

azure

Oct 2, 2026 ·
Share on:

Read More
gcp

Sep 24, 2026 ·
Share on:

Read More
aws

Sep 3, 2026 ·
Share on:

Read More
m365

Apr 28, 2026 ·
Share on:

Read More

Recent Posts

Disable of ETW Trace - Powershell
ETW Trace Evasion Activity
Relevant Anti-Virus Signature Keywords In Application Log
Suspicious Double Extension Files
PowerShell Dynamic Module Invocation Via ExportedCommands Array Index
PowerShell Dynamic Module Invocation Via ExportedCommands Array Index - PS Script
Uncommon Child Process Spawned From XBootMgrSleep.EXE
Azure Subscription Permission Elevation Via AuditLogs

Language

SIGMA 4119 ELASTIC 2216 MQL 1327

Tags

RESOURCES-INVESTIGATION-GUIDE 2139 USE-CASE-THREAT-DETECTION 1717 PERFORMANCE-NORMAL 1377 DOMAIN-ENDPOINT 1308 ATTACK.EXECUTION 1110 ATTACK.STEALTH 1044 DATA-SOURCE-ELASTIC-DEFEND 1031 RULE-TYPE-EVENT-CORRELATION-EQL 974 ATTACK.PERSISTENCE 870 ATTACK.PRIVILEGE-ESCALATION 743 NOISE-LOW 727 DOMAIN-CLOUD 653 OS-WINDOWS 604 PLATFORM-WINDOWS 596