Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects authentication to a web application using default/built-in account credentials followed by outbound mail sent from an internal address — the technique CISA's red team used to send phishing email from a trusted internal identity.
avatar
Duo Tech@duotech
avatar
Detections.ai Community
2 months ago
6012