avatar

SigmaHQ Detections

@sigmaHQ
12 followers122,473 downloads2,618 copies16 likes160,616 views

6,800 detections

Detects remote RPC calls to possibly abuse remote printing service via MS-RPRN / MS-PAR
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
1 year ago
000
Detects remote RPC calls to collect information
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
1 year ago
000
Detects remote RPC calls to possibly abuse remote encryption service via MS-SRVS
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
1 year ago
000
Detects remote RPC calls to read information about scheduled tasks via SASec
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
1 year ago
000
Detects remote RPC calls useb by SharpHound to map remote connections and local group membership.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
1 year ago
000
Detects remote RPC calls useb by SharpHound to map remote connections and local group membership.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
1 year ago
000
Detects when a Container Registry is created or deleted.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
1 year ago
000
Detects when a Azure Kubernetes Cluster is created or deleted.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
1 year ago
000
Identifies when ClusterRoles/Roles are being modified or deleted.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
1 year ago
000
Detects the creation or patching of potential malicious RoleBinding/ClusterRoleBinding.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
1 year ago
000
Page 333 of 680