HackTool - Rubeus Execution

SigmaHQ Detections@sigmaHQ

•updated Oct 23, 2025•1•0•29

Detects the execution of the hacktool Rubeus via PE information or command line parameters. Rubeus is a C# toolset designed for raw Kerberos interaction, often used for credential access, Kerberoasting, and pass-the-ticket attacks.