Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1 detection
Filters
Last updated
All Time
Detection languages
1
Contributors
1
Categories
20,322
11,715
5,842
5,123
4,863
Platforms
1
Products / Services
1
MITRE Techniques
1
1
Detects a randomly-named 8-character .sys file created outside standard driver/staging paths and then loaded from a non-standard user or temp directory shortly after — matching the pattern of BTR.sys being extracted from MpEngine.dll's embedded resource and executed outside its normal location.
