Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

HackTool - CrackMapExec Execution Patterns

SigmaHQ Detections@sigmaHQ

•updated Nov 6, 2023•0•0•0

Detects various execution patterns of the CrackMapExec pentesting framework

Sigma

Tags

TA0004 - Privilege Escalation TA0003 - Persistence TA0002 - Execution T1047 - Windows Management Instrumentation T1053 - Scheduled Task/Job T1059.003 - Windows Command Shell T1059.001 - PowerShell S0106 - cmd Process Creation Windows Windows Sysmon Windows Eventlog Securityattack.privilege-escalationattack.persistenceattack.executionattack.t1047attack.t1053attack.t1059.003attack.t1059.001attack.s0106

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?