sublime-security | Detection.FYI

sublime-rules

Mar 12, 2025 ·
Share on:

Read More

Recent Posts

Service Reload or Start - Linux
Notepad Password Files Discovery
ADS Zone.Identifier Deleted By Uncommon Application
Cisco Duo Successful MFA Authentication Via Bypass Code
Forest Blizzard APT - Custom Protocol Handler Creation
Forest Blizzard APT - Custom Protocol Handler DLL Registry Set
Forest Blizzard APT - JavaScript Constrained File Creation
Kubernetes Unauthorized or Unauthenticated Access

Language

SIGMA 3911 ELASTIC 1321 MQL 568

Tags

ATTACK.DEFENSE-EVASION 1272 RESOURCES-INVESTIGATION-GUIDE 1222 USE-CASE-THREAT-DETECTION 926 DOMAIN-ENDPOINT 834 ATTACK.EXECUTION 832 DATA-SOURCE-ELASTIC-DEFEND 674 ATTACK.PERSISTENCE 571 OS-WINDOWS 448 DATA-SOURCE-ELASTIC-ENDGAME 389 ATTACK.PRIVILEGE-ESCALATION 374 DETECTION.EMERGING-THREATS 366 OS-LINUX 335 TACTIC-DEFENSE-EVASION 334 DATA-SOURCE-SENTINELONE 307