macos | Detection.FYI

process_creation

Apr 16, 2025 ·
Share on:

Read More
file_event

Aug 12, 2024 ·
Share on:

Read More

Recent Posts

Suspicious CrushFTP Child Process
Suspicious Process Spawned by CentreStack Portal AppPool
Exploitation Attempt Of CVE-2020-1472 - Execution of ZeroLogon PoC
Hiding User Account Via SpecialAccounts Registry Key - CommandLine
Obfuscated PowerShell OneLiner Execution
Potential Defense Evasion Activity Via Emoji Usage In CommandLine - 1
Potential Defense Evasion Activity Via Emoji Usage In CommandLine - 2
Potential Defense Evasion Activity Via Emoji Usage In CommandLine - 3

Language

SIGMA 3914 ELASTIC 1368 MQL 602

Tags

RESOURCES-INVESTIGATION-GUIDE 1292 ATTACK.DEFENSE-EVASION 1285 USE-CASE-THREAT-DETECTION 945 DOMAIN-ENDPOINT 841 ATTACK.EXECUTION 835 DATA-SOURCE-ELASTIC-DEFEND 688 ATTACK.PERSISTENCE 571 OS-WINDOWS 453 DATA-SOURCE-ELASTIC-ENDGAME 391 ATTACK.PRIVILEGE-ESCALATION 377 DETECTION.EMERGING-THREATS 368 OS-LINUX 345 TACTIC-DEFENSE-EVASION 339 DATA-SOURCE-SENTINELONE 309