powershell | Detection.FYI

powershell_script

Aug 28, 2023 ·
Share on:

Read More
powershell_classic

Jul 13, 2023 ·
Share on:

Read More
powershell_module

May 15, 2023 ·
Share on:

Read More

Recent Posts

DarkGate
Disabling Multi Factor Authentication
New Federated Domain Added
New Federated Domain Added - Exchange
SCR File Write Event
Rundll32 Execution Without CommandLine Parameters
Access To .Reg/.Hive Files By Uncommon Application
Access To Browser Credential Files By Uncommon Application

Language

SIGMA 3483 ELASTIC 931 MQL 254

Tags

ATTACK.DEFENSE_EVASION 1229 ATTACK.EXECUTION 748 USE-CASE-THREAT-DETECTION 633 DOMAIN-ENDPOINT 584 ATTACK.PERSISTENCE 508 DATA-SOURCE-ELASTIC-DEFEND 455 ATTACK.PRIVILEGE_ESCALATION 375 OS-WINDOWS 371 ATTACK.CREDENTIAL_ACCESS 293 DATA-SOURCE-ELASTIC-ENDGAME 270 RESOURCES-INVESTIGATION-GUIDE 249 DETECTION.EMERGING_THREATS 233 ATTACK.COMMAND_AND_CONTROL 230 ATTACK.DISCOVERY 223