Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1 detection
Filters
Last updated
All Time
Detection languages
1
Contributors
1
Platforms
1
Products / Services
1
MITRE Techniques
1
1
1
IDS Classtypes
1,900
506
453
381
237
1
Process Spawns Multiple Recon Processes
Cortex XDR
Detect or threat hunt for a burst of Windows built-in discovery/reconnaissance utilities (Seven or more distinct tools within a single day) executed under one causality chain on one host, consistent with post-exploitation situational awareness by an interactive operator, script, or C2 implant.
