The-DFIR-Report | Detection.FYI

Sigma-Rules

Mar 18, 2025 ·
Share on:

Read More

Recent Posts

Audio Capture
Crash Dump Created By Operating System
ESXi Account Creation Via ESXCLI
ESXi Admin Permission Assigned To Account Via ESXCLI
ESXi Network Configuration Discovery Via ESXCLI
ESXi Storage Information Discovery Via ESXCLI
ESXi Syslog Configuration Change Via ESXCLI
ESXi System Information Discovery Via ESXCLI

Language

SIGMA 3917 ELASTIC 1410 MQL 630

Tags

RESOURCES-INVESTIGATION-GUIDE 1306 ATTACK.DEFENSE-EVASION 1300 USE-CASE-THREAT-DETECTION 981 DOMAIN-ENDPOINT 869 ATTACK.EXECUTION 848 DATA-SOURCE-ELASTIC-DEFEND 706 ATTACK.PERSISTENCE 579 OS-WINDOWS 465 DATA-SOURCE-ELASTIC-ENDGAME 396 ATTACK.PRIVILEGE-ESCALATION 379 DETECTION.EMERGING-THREATS 369 OS-LINUX 361 TACTIC-DEFENSE-EVASION 357 ATTACK.CREDENTIAL-ACCESS 318