sublime-security | Detection.FYI

sublime-rules

Mar 13, 2026 ·
Share on:

Read More

Recent Posts

System Language Discovery via Reg.Exe
BITS Transfer Job With Uncommon Or Suspicious Remote TLD
CodeIntegrity - Unmet Signing Level Requirements By File Under Validation
Non Interactive PowerShell Process Spawned
Files With System Process Name In Unsuspected Locations
Suspicious Process Masquerading As SvcHost.EXE
System Control Panel Item Loaded From Uncommon Location
System File Execution Location Anomaly

Language

SIGMA 4043 ELASTIC 1727 MQL 911

Tags

RESOURCES-INVESTIGATION-GUIDE 1651 ATTACK.DEFENSE-EVASION 1525 USE-CASE-THREAT-DETECTION 1286 DOMAIN-ENDPOINT 1019 ATTACK.EXECUTION 938 ATTACK.PERSISTENCE 858 DATA-SOURCE-ELASTIC-DEFEND 848 ATTACK.PRIVILEGE-ESCALATION 728 OS-WINDOWS 531 OS-LINUX 461 DATA-SOURCE-ELASTIC-ENDGAME 459 DETECTION.EMERGING-THREATS 435 TACTIC-DEFENSE-EVASION 423 DATA-SOURCE-SENTINELONE 408