Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

275 detections

Detects suspicious process patterns used in NTDS.DIT exfiltration
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
4 years ago
000
Shadow Copies creation using operating systems utilities, possible credential access
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
4 years ago
001
Page 14 of 14