Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1 detection
Filters
Last updated
All Time
Detection languages
1
Contributors
1
Categories
1
Platforms
1
MITRE Techniques
18,123
15,639
12,581
8,394
6,215
Detects the deployment of "Golden Chickens" malware, a method used by the Evilnum APT group. This rule specifically looks for the execution of 'regsvr32.exe' with specific command-line arguments that indicate the registration of an OCX file located in the user's AppData\Roaming directory. This technique is often used for defense evasion and persistence.
