Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects creation of an HKCU Run key value whose data references a temp or AppData temp path, consistent with the Windows persistence step of the botking implant after the build-time payload drop.
avatar
Duo Tech@duotech
avatar
Detections.ai Community
2 months ago
0011