system | Detection.FYI

service_control_manager

Mar 18, 2025 ·
Share on:

Read More

Recent Posts

Operator Bloopers Cobalt Strike Commands
AnyDesk Network
Bumblebee WmiPrvSE execution pattern
Conhost Suspicious Command Execution
Custom Cobalt Strike Command Execution
Deleting Windows Defender scheduled tasks
Enable WDigest using PowerShell
Enable WDigest using PowerShell (ps_module)

Language

SIGMA 3910 ELASTIC 1344 MQL 582

Tags

ATTACK.DEFENSE-EVASION 1285 RESOURCES-INVESTIGATION-GUIDE 1245 USE-CASE-THREAT-DETECTION 928 DOMAIN-ENDPOINT 834 ATTACK.EXECUTION 832 DATA-SOURCE-ELASTIC-DEFEND 674 ATTACK.PERSISTENCE 571 OS-WINDOWS 448 DATA-SOURCE-ELASTIC-ENDGAME 389 ATTACK.PRIVILEGE-ESCALATION 377 DETECTION.EMERGING-THREATS 366 OS-LINUX 335 TACTIC-DEFENSE-EVASION 334 DATA-SOURCE-SENTINELONE 307