| sigma |
New DLL Added to AppInit_DLLs Registry Key |
test |
2022-12-25 |
| sigma |
Suspicious Splwow64 Without Params |
test |
2022-12-25 |
| sigma |
Tasks Folder Evasion |
test |
2022-12-25 |
| sigma |
Execution via WorkFolders.exe |
test |
2022-12-25 |
| sigma |
Suspicious ZipExec Execution |
test |
2022-12-25 |
| sigma |
Scanner PoC for CVE-2019-0708 RDP RCE Vuln |
test |
2022-12-25 |
| sigma |
Potential RDP Exploit CVE-2019-0708 |
test |
2022-12-25 |
| sigma |
Enumeration for Credentials in Registry |
test |
2022-12-25 |
| sigma |
CVE-2020-0688 Exploitation via Eventlog |
test |
2022-12-25 |
| sigma |
CVE-2021-1675 Print Spooler Exploitation Filename Pattern |
test |
2022-12-25 |
| sigma |
InstallerFileTakeOver LPE CVE-2021-41379 File Create Event |
test |
2022-12-25 |
| sigma |
Suspicious Computer Account Name Change CVE-2021-42287 |
test |
2022-12-25 |
| sigma |
Dump Credentials from Windows Credential Manager With PowerShell |
test |
2022-12-25 |
| sigma |
Google Cloud Kubernetes CronJob |
test |
2022-12-25 |
| sigma |
Linux Capabilities Discovery |
test |
2022-12-25 |
| sigma |
Possible Coin Miner CPU Priority Param |
test |
2022-12-25 |
| sigma |
Data Exfiltration with Wget |
test |
2022-12-25 |
| sigma |
User Access Blocked by Azure Conditional Access |
test |
2022-12-25 |
| sigma |
Live Memory Dump Using Powershell |
test |
2022-12-25 |
| sigma |
NTFS Alternate Data Stream |
test |
2022-12-25 |
| sigma |
Suspicious Get Information for SMB Share |
test |
2022-12-25 |
| sigma |
PowerShell Credential Prompt |
test |
2022-12-25 |
| sigma |
Linux Reverse Shell Indicator |
test |
2022-12-25 |
| sigma |
PowerShell ICMP Exfiltration |
test |
2022-12-25 |
| sigma |
Automated Collection Bookmarks Using Get-ChildItem PowerShell |
test |
2022-12-25 |
| sigma |
Change to Authentication Method |
test |
2022-12-25 |
| sigma |
Linux Crypto Mining Indicators |
test |
2022-12-25 |
| sigma |
Enumerate Credentials from Windows Credential Manager With PowerShell |
test |
2022-12-25 |
| sigma |
Tap Driver Installation |
test |
2022-12-25 |
| sigma |
Powershell Store File In Alternate Data Stream |
test |
2022-12-25 |
| sigma |
ProcessHacker Privilege Elevation |
test |
2022-12-25 |
| sigma |
AD Groups Or Users Enumeration Using PowerShell - ScriptBlock |
test |
2022-12-25 |
| sigma |
Potential COM Objects Download Cradles Usage - PS Script |
test |
2022-12-25 |
| sigma |
Extracting Information with PowerShell |
test |
2022-12-25 |
| sigma |
PowerShell Scripts Installed as Services |
test |
2022-12-25 |
| sigma |
UAC Bypass With Fake DLL |
test |
2022-12-25 |
| sigma |
User Couldn't Call a Privileged Service 'LsaRegisterLogonProcess' |
test |
2022-12-25 |
| sigma |
PowerShell Create Local User |
test |
2022-12-25 |
| sigma |
PowerShell Get-Process LSASS in ScriptBlock |
test |
2022-12-25 |
| sigma |
Clearing Windows Console History |
test |
2022-12-25 |