Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1 detection
Filters
Last updated
All Time
Detection languages
1
Contributors
1
Categories
20,632
11,971
5,918
5,199
4,875
Platforms
1
Products / Services
1
MITRE Techniques
1
1
Detects a randomly-named 8-character .sys file created outside standard driver/staging paths and then loaded from a non-standard user or temp directory shortly after — matching the pattern of BTR.sys being extracted from MpEngine.dll's embedded resource and executed outside its normal location.
