SigmaHQ Detections
@sigmaHQ12 followers122,473 downloads2,593 copies16 likes160,492 views
6,800 detections
Filters
Last updated
All Time
Detection languages
6,800
Categories
2,695
910
506
407
372
Platforms
5,315
505
263
204
164
Products / Services
2,051
1,570
475
423
316
MITRE Techniques
2,652
1,739
1,656
1,503
764
CVEs
19
19
19
16
10
WebDav Put Request
Sigma
A General detection for WebDav user-agent being used to PUT files on a WebDav network share. This could be an indicator of exfiltration.
Detects kerberos TGS request using RC4 encryption which may be indicative of kerberoasting
Detects an issue in apache logs that reports threading related errors
Nginx Core Dump
Sigma
Detects a core dump of a crashing Nginx worker process, which could be a signal of a serious problem or exploitation attempts.
Detects WebDav DownloadCradle
Detects suspicious encoded User-Agent strings, as seen used by some malware.
Detects potential abuse of ntdsutil to dump ntds.dit database to a suspicious location
Detects when an application exports a certificate (and potentially the private key as well) from the local Windows certificate store.
Detects blocked image load events with revoked certificates by code integrity.
Detects image load events with revoked certificates by code integrity.
Page 607 of 680