Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects the installation of a service named "javamtsup" on the system. The CosmicDuke info stealer uses Windows services typically named "javamtsup" for persistence.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
1 year ago
0027