SIGMA Detection Rules
@SIGMADetectionRules3 followers10,486 downloads91 copies0 likes3,573 views
281 detections
Filters
Last updated
All Time
Detection languages
281
Categories
89
11
6
4
4
Platforms
264
3
1
Products / Services
128
5
4
3
3
MITRE Techniques
109
99
85
46
43
Detects scenarios where APT actors exploits Fortinet vulnerabilities to gain access into Windows infrastructure.
Detects scenarios where an attacker attempts to access vault credentials
Detects user enumeration and/or creation performed by Manic Menagerie.
Detects scenarios where an attacker calls the stickey key and execute CMD.
Detects scenarios where SearchIndexer spwaned another process with the same name, or when SearchIndexer process exists in an unexpected directory.
Detects scenarios where an attacker exploits the PrintNightmare vulnerability and obtained a CMD shell.
Detects scenarios where an attacker attempts to enumerate the password policy via commandline.
Detects scenarios where an attacker attempts to modify proxy configuration in order to bypass network restrictions.
Detects scenarios where a suspicious anonymous login is performed during discovery phases.
Detects scenarios where an attacker attempt read the Hosts file content via network share.
Page 26 of 29