SIGMA Detection Rules
@SIGMADetectionRules3 followers10,486 downloads91 copies0 likes3,582 views
281 detections
Filters
Last updated
All Time
Detection languages
281
Categories
89
11
6
4
4
Platforms
264
3
1
Products / Services
128
5
4
3
3
MITRE Techniques
109
99
85
46
43
Detects scenarios where an attacker remotely creates a scheduled task over named pipes to execute commands or elevate privileges.
Detects scenarios where an attacker abuse task scheduler capacities to execute commands or elevate privileges.
Detects scenarios where APT actors exploits Fortinet vulnerabilities to gain access into Windows infrastructure.
Detects scenarios where an attacker attempts to access vault credentials
Detects user enumeration and/or creation performed by Manic Menagerie.
Detects scenarios where an attacker calls the stickey key and execute CMD.
Detects scenarios where SearchIndexer spwaned another process with the same name, or when SearchIndexer process exists in an unexpected directory.
Detects scenarios where an attacker exploits the PrintNightmare vulnerability and obtained a CMD shell.
Detects scenarios where an attacker attempts to enumerate the password policy via commandline.
Detects scenarios where an attacker attempts to modify proxy configuration in order to bypass network restrictions.
Page 26 of 29