tsale | Detection.FYI

Sigma_rules

Nov 29, 2023 ·
Share on:

Read More

Recent Posts

Potential Linux Process Code Injection Via DD Utility
Suspicious DNS Query for IP Lookup Service APIs
Suspicious Network Connection to IP Lookup Service APIs
Atbroker Registry Change
Cisco BGP Authentication Failures
Cisco LDP Authentication Failures
Clipboard Data Collection Via OSAScript
Copy Passwd Or Shadow From TMP Path

Language

SIGMA 3582 ELASTIC 987 MQL 304

Tags

ATTACK.DEFENSE_EVASION 1261 ATTACK.EXECUTION 775 USE-CASE-THREAT-DETECTION 645 DOMAIN-ENDPOINT 604 ATTACK.PERSISTENCE 516 DATA-SOURCE-ELASTIC-DEFEND 466 ATTACK.PRIVILEGE_ESCALATION 377 OS-WINDOWS 375 ATTACK.CREDENTIAL_ACCESS 302 DETECTION.EMERGING_THREATS 295 DATA-SOURCE-ELASTIC-ENDGAME 266 TACTIC-DEFENSE-EVASION 250 ATTACK.COMMAND_AND_CONTROL 243 RESOURCES-INVESTIGATION-GUIDE 243