Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

317 detections

Original Sigma Rule: https://github.com/Neo23x0/sigma/blob/master/rules/apt/apt_bear_activity_gtr19.yml.
Questions via Twitter: @janvonkirchheim.
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
2031
Bazacall uses malicious macro-enabled Excel documents to execute their payload.
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
0118
Page 16 of 16