Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
44 detections
Filters
Last updated
All Time
Detection languages
28
10
3
2
1
Contributors
26
6
5
3
2
Categories
15
9
7
7
6
Platforms
42
Products / Services
20
15
13
7
6
MITRE Techniques
18,123
15,639
12,581
8,394
6,215
Detects scenarios where system auditing for important events such as "Process Creation" or "Logon" events is disabled.
Detects the addition of the 'MiniNt' key to the registry. Upon a reboot, Windows Event Log service will stop writing events.
Windows Event Log is a service that collects and stores event logs from the operating system and applications. It is an important component of Windows security and auditing.
Adversary may want to disable this service to disable logging of security events which could be used to detect their activities.
Windows Event Log is a service that collects and stores event logs from the operating system and applications. It is an important component of Windows security and auditing.
Adversary may want to disable this service to disable logging of security events which could be used to detect their activities.
Page 3 of 3