Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects .NET executables created in the Windows temp staging
directory C:\windows\temp\s\, a known Agrius wiper deployment location.
avatar
Luís Marques@remotecodeexecution
avatar
SIBS Cyberwatch
6 hours ago
000