2025 | Detection.FYI

Malware

Feb 17, 2025 ·
Share on:

Read More

Recent Posts

Operator Bloopers Cobalt Strike Commands
AnyDesk Network
Bumblebee WmiPrvSE execution pattern
Conhost Suspicious Command Execution
Custom Cobalt Strike Command Execution
Deleting Windows Defender scheduled tasks
Enable WDigest using PowerShell
Enable WDigest using PowerShell (ps_module)

Language

SIGMA 3910 ELASTIC 1342 MQL 581

Tags

ATTACK.DEFENSE-EVASION 1285 RESOURCES-INVESTIGATION-GUIDE 1243 USE-CASE-THREAT-DETECTION 926 DOMAIN-ENDPOINT 834 ATTACK.EXECUTION 832 DATA-SOURCE-ELASTIC-DEFEND 674 ATTACK.PERSISTENCE 571 OS-WINDOWS 448 DATA-SOURCE-ELASTIC-ENDGAME 389 ATTACK.PRIVILEGE-ESCALATION 377 DETECTION.EMERGING-THREATS 366 OS-LINUX 335 TACTIC-DEFENSE-EVASION 334 DATA-SOURCE-SENTINELONE 307