Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
43 detections
Filters
Last updated
All Time
Detection languages
27
4
4
4
4
Contributors
17
15
11
Categories
22
19
13
12
11
Platforms
40
9
4
Products / Services
26
9
4
4
4
MITRE Techniques
18,116
15,638
12,587
8,397
6,227
IDS Classtypes
4
IDS Protocols
2
2
Detects the creation of a scheduled task named 'XenoUpdateManager' using 'schtasks.exe', which is associated with the Operation XENOFISCAL campaign and the SideCopy threat group. The rule also surfaces the parent process that initiated the scheduled task creation.
Page 3 of 3