Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects the creation of scheduled tasks originating from processes executing out of temporary or download directories. This behavior aligns with the persistence mechanisms of the SilverGorilla .NET dropper, which is typically delivered via recruitment-themed phishing archives.
avatar
Ethan Andrews@eandrews
avatar
Federal Signal Detections
5 months ago
207