Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

23 detections

'Beyond your internal software management systems, it is possible you may not have visibility into your entire footprint of SolarWinds installations. This is intended to help use process exection information to discovery any systems that have SolarWinds processes'
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
009
Remote Monitoring and Management (RMM) programs are IT to manage remote endpoints. Attackers have begun to abuse these programs to persist or provide C2 channels.
https://github.com/jischell-msft/RemoteManagementMonitoringTools
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
008
Page 2 of 2