diagnosis | Detection.FYI

scripted

Aug 12, 2024 ·
Share on:

Read More

Recent Posts

Potentially Suspicious JWT Token Search Via CLI
Potential Python DLL SideLoading
ETW Logging/Processing Option Disabled On IIS Server
HTTP Logging Disabled On IIS Server
New Module Module Added To IIS Server
Previously Installed IIS Module Was Removed
COM Object Hijacking Via Modification Of Default System CLSID Default Value
Add Potential Suspicious New Download Source To Winget

Language

SIGMA 3890 ELASTIC 1198 MQL 444

Tags

ATTACK.DEFENSE-EVASION 1267 ATTACK.EXECUTION 826 USE-CASE-THREAT-DETECTION 825 DOMAIN-ENDPOINT 753 DATA-SOURCE-ELASTIC-DEFEND 593 ATTACK.PERSISTENCE 570 OS-WINDOWS 440 ATTACK.PRIVILEGE-ESCALATION 370 DETECTION.EMERGING-THREATS 330 DATA-SOURCE-ELASTIC-ENDGAME 322 TACTIC-DEFENSE-EVASION 298 ATTACK.CREDENTIAL-ACCESS 297 RESOURCES-INVESTIGATION-GUIDE 272 OS-LINUX 263