Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
3 detections
Filters
Last updated
All Time
Detection languages
2
1
Contributors
2
1
Categories
2
1
1
1
1
Platforms
3
1
1
Products / Services
2
1
1
1
MITRE Techniques
18,115
15,635
12,576
8,388
6,215
Detects the ZEROLOT wiper, a component reportedly used by the Sandworm group. This rule identifies specific artifacts related to its disk wiping functionality.
KQL Query from file: Global Admin Entra Cookie with Chrome ZeroDay
KQL Query from file: Vulnerability Profile: CVE-2024-30040 (Zero-day)