avatar

SigmaHQ Detections

@sigmaHQ
12 followers122,429 downloads2,472 copies16 likes159,585 views

6,797 detections

Detects keywords from well-known PowerShell exploitation frameworks
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
2 years ago
003
Detects command line parameters used by Hydra password guessing hack tool
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
2 years ago
003
Detect usage of the "sqlite" binary to query databases in Chromium-based browsers for potential data stealing.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
2 years ago
003
Detects potential local file read vulnerability in JVM based apps.
If the exceptions are caused due to user input and contain path traversal payloads then it's a red flag.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
2 years ago
002
Detects process execution related exceptions in JVM based apps, often relates to RCE
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
2 years ago
002
Detects exceptions in velocity template renderer, this most likely happens due to dynamic rendering of user input and may lead to RCE.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
2 years ago
002
Identifies when a application gateway is modified or deleted.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
2 years ago
002
Identifies when a application security group is modified or deleted.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
2 years ago
002
Identifies when a network security configuration is modified or deleted.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
2 years ago
002
Detects when storage bucket is modified or deleted in Google Cloud.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
2 years ago
302
Page 598 of 680