Yamato Security Hayabusa
@YamatoSecurityHayabusa23 followers164,250 downloads303 copies5 likes55,514 views
4,504 detections
Filters
Last updated
All Time
Detection languages
4,504
Categories
2,724
432
211
185
125
Platforms
4,504
Products / Services
185
78
30
24
10
MITRE Techniques
2,153
1,271
970
844
414
Detects when a shell program such as the Windows command prompt or PowerShell is launched with system privileges. Use this rule to hunt for potential suspicious processes.
Detects suspicious failed logins with different user accounts from a single source system
Detects a Chromium based browser process with the 'load-extension' flag to start a instance with a custom extension
Detects changes to the AppInstaller (winget) admin settings. Such as enabling local manifest installations or disabling installer hash checks
Page 451 of 451