sublime-security | Detection.FYI

sublime-rules

Jun 11, 2026 ·
Share on:

Read More

Recent Posts

UFW Disable Attempt
Cmd.EXE Missing Space Characters Execution Anomaly
Creation of WerFault.exe/Wer.dll in Unusual Folder
File And SubFolder Enumeration Via Dir Command
Potential Vcruntime140 DLL Sideloading
Potentially Suspicious WDAC Policy File Creation
Suspicious Volume Shadow Copy Vssapi.dll Load
7Zip Compressing Dump Files

Language

SIGMA 4085 ELASTIC 1868 MQL 1039

Tags

RESOURCES-INVESTIGATION-GUIDE 1792 USE-CASE-THREAT-DETECTION 1422 ATTACK.EXECUTION 1097 DOMAIN-ENDPOINT 1075 ATTACK.STEALTH 1039 DATA-SOURCE-ELASTIC-DEFEND 884 ATTACK.PERSISTENCE 867 ATTACK.PRIVILEGE-ESCALATION 740 OS-WINDOWS 552 OS-LINUX 507 DATA-SOURCE-ELASTIC-ENDGAME 473 DETECTION.EMERGING-THREATS 456 TACTIC-DEFENSE-EVASION 428 DATA-SOURCE-SENTINELONE 424