Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1 detection
Filters
Last updated
All Time
Detection languages
1
Contributors
1
Categories
1
1
Platforms
1
Products / Services
1
MITRE Techniques
1
1
IDS Classtypes
1,937
503
461
381
237
1
Detects the execution of the Windows Bluetooth File Transfer Wizard (fsquirt.exe), which may be abused for data exfiltration or payload delivery over Bluetooth. The rule identifies execution of fsquirt.exe and flags potentially suspicious indicators like specific transfer arguments or execution from non-standard paths.
