SigmaHQ Detections
@sigmaHQ12 followers122,468 downloads2,593 copies16 likes160,483 views
6,800 detections
Filters
Last updated
All Time
Detection languages
6,800
Categories
2,695
910
506
407
372
Platforms
5,315
505
263
204
164
Products / Services
2,051
1,570
475
423
316
MITRE Techniques
2,652
1,739
1,656
1,503
764
CVEs
19
19
19
16
10
Detects the use of smbexec.py tool by detecting a specific service installation
Detects well-known credential dumping tools execution via service execution events
Detects powershell script installed as a Service
Detects CSExec service installation and execution events
Detects Remote Utilities Host service installation on the target system.
Detects suspicious service installation commands
Detects PsExec service installation and execution events
Well-known TAP software installation. Possible preparation for data exfiltration using tunnelling techniques
Detects uncommon service installation commands by looking at suspicious or uncommon image path values containing references to encoded powershell commands, temporary paths, etc.
Detects the installation of RTCore service. Which could be an indication of Micro-Star MSI Afterburner vulnerable driver abuse
Page 635 of 680