SigmaHQ Detections
@sigmaHQ12 followers122,473 downloads2,593 copies16 likes160,493 views
6,800 detections
Filters
Last updated
All Time
Detection languages
6,800
Categories
2,695
910
506
407
372
Platforms
5,315
505
263
204
164
Products / Services
2,051
1,570
475
423
316
MITRE Techniques
2,652
1,739
1,656
1,503
764
CVEs
19
19
19
16
10
Detects delete action in the Github audit logs for codespaces, environment, project and repo.
Detects instances where an email, identified as malicious or suspicious by the Microsoft Defender for Office 365 (formerly ATP) engine, was delivered to a user's Inbox or Junk folder.
It might indicate that a potential threat, such as a spearphishing attachment or links, has bypassed initial blocking mechanisms and reached an end-user, requiring further investigation and potential remediation.
It might indicate that a potential threat, such as a spearphishing attachment or links, has bypassed initial blocking mechanisms and reached an end-user, requiring further investigation and potential remediation.
Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network
Detects when an the Administrator role is assigned to an user or group.
Detects when a API Token is revoked.
Detects when Okta FastPass prevents a known phishing site.
Detects when a new identity provider is created for Okta.
Detects when an Okta policy is modified or deleted.
Detects when an Policy Rule is Modified or Deleted.
Detects when unauthorized access to app occurs.
Page 83 of 680