SigmaHQ Detections
@sigmaHQ12 followers122,433 downloads2,527 copies16 likes159,781 views
6,797 detections
Filters
Last updated
All Time
Detection languages
6,797
Categories
2,695
910
506
407
372
Platforms
5,313
505
263
203
164
Products / Services
2,050
1,570
475
423
316
MITRE Techniques
2,652
1,738
1,655
1,502
764
CVEs
19
19
19
16
10
Detects remote RPC calls to MS-DRSR from non DC hosts, which could indicate DCSync / DCShadow attacks.
Detects remote RPC calls to get event log information via EVEN or EVEN6
Detects remote RPC calls to read information about scheduled tasks
Detects remote RPC calls to possibly abuse remote printing service via MS-RPRN / MS-PAR
Detects remote RPC calls to collect information
Detects remote RPC calls to possibly abuse remote encryption service via MS-SRVS
Detects remote RPC calls to read information about scheduled tasks via SASec
Detects remote RPC calls useb by SharpHound to map remote connections and local group membership.
Detects remote RPC calls useb by SharpHound to map remote connections and local group membership.
Detects when a Container Registry is created or deleted.
Page 336 of 680