Mena Nabil
@mena0 followers11 downloads8 copies3 likes124 views
3 detections
Filters
Last updated
All Time
Detection languages
3
Categories
1
1
1
Platforms
3
Products / Services
1
MITRE Techniques
1
1
1
1
1
Detects when logs are cleared using the legitimate tool "wevtutil". This is usually done by threat actors to clear traces using LOLBins.
Detects if multiple users logged into a single machine within the same day.
Detects processes spawning cmd.exe excluding cmd instances spawned from services.exe or svchost.exe to focus on the most possible suspicious behavior.