Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
2 detections
Filters
Last updated
All Time
Detection languages
2
Contributors
1
1
Categories
1
1
1
Platforms
1
1
Products / Services
1
MITRE Techniques
18,116
15,638
12,587
8,397
6,227
Detects files dropped into the %ProgramData%\USOShared\Logs\User path, a location used by PRISMEX to hide its proxy DLL.
KQL Query from file: Entra QR Code Sign-In KQL Detection

