Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects a qlogin.exe command attempting to authenticate as the internal `_+_PublicSharingUser_` using a GUID as the password. This could be an indicator of an attacker exploiting CVE-2025-57788 to gain initial access using leaked credentials.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
1 year ago
0024