Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects non-administrative access querying SCCM to enumerate user-device relationships, used by CISA's red team to identify which workstations belonged to high-value targets.
avatar
Duo Tech@duotech
avatar
Detections.ai Community
2 months ago
8015