Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

2 detections

KQL Query
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
7066
Prior to deploying Macaw ransomware in an organization, the adversary will disable several tools and functions in order to inhibit later recovery efforts.
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
0023