Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1,597 detections

Detects cases in which an ISO files is opend within an archiver like 7Zip or Winrar, which is a sign of phishing as threat actors put small ISO files in archives as email attachments to bypass certain filters and protective measures (mark of web)
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
2 years ago
000
Page 77 of 77