Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

44 detections

Detects tampering with the "Enabled" registry key in order to disable Windows logging of a Windows event channel
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
6 months ago
001
Detects scenarios where system auditing for important events such as "Process Creation" or "Logon" events is disabled.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
6 months ago
000
Page 3 of 3