Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

779 detections

Detects well-known credential dumping tools execution via service execution events
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
2 years ago
000
This method detects mimikatz keywords in different Eventlogs (some of them only appear in older Mimikatz version that are however still used by different threat groups)
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
5 years ago
000
Page 38 of 38