SigmaHQ Detections
@sigmaHQ12 followers122,468 downloads2,593 copies16 likes160,483 views
6,800 detections
Filters
Last updated
All Time
Detection languages
6,800
Categories
2,695
910
506
407
372
Platforms
5,315
505
263
204
164
Products / Services
2,051
1,570
475
423
316
MITRE Techniques
2,652
1,739
1,656
1,503
764
CVEs
19
19
19
16
10
Detects service installation in suspicious folder appdata
Detects service installation with suspicious folder patterns
Detects Access to LSASS Process
Detects remote thread creation by PowerShell processes into "lsass.exe"
Detects DNS queries for "anonfiles.com", which is an anonymous file upload platform often used for malicious purposes
Detects Azure Hybrid Connection Manager services querying the Azure service bus service
Detects DNS queries for subdomains related to MEGA sharing website
Detects a driver load from a temporary directory
Detects the creation of an "Active Directory Schema Cache File" (.sch) file by an uncommon tool.
Detects potential DLL hijack of "iertutil.dll" found in the DCOM InternetExplorer.Application Class over the network
Page 636 of 680