SigmaHQ Detections
@sigmaHQ12 followers122,429 downloads2,472 copies16 likes159,581 views
6,797 detections
Filters
Last updated
All Time
Detection languages
6,797
Categories
2,695
910
506
407
372
Platforms
5,313
505
263
203
164
Products / Services
2,050
1,570
475
423
316
MITRE Techniques
2,652
1,738
1,655
1,502
764
CVEs
19
19
19
16
10
Detects abuse of the cron utility to perform task scheduling for initial or recurring execution of malicious code. Detection will focus on crontab jobs uploaded from the tmp folder.
Detects attempts to use screencapture to collect macOS screenshots
Detection use of the command "split" to split files into parts and possible transfer.
Detects commandline operations on shell history files
Adversaries may shutdown/reboot systems to interrupt access to, or aid in the destruction of, those systems.
Identifies the execution traces of the XCSSET malware. XCSSET is a macOS trojan that primarily spreads via Xcode projects and maliciously modifies applications. Infected users are also vulnerable to having their credentials, accounts, and other vital data stolen.
Cisco Discovery
Sigma
Find information about network devices that is not stored in config files
Detects suspicious DNS queries using base64 encoding
Transferring files with well-known filenames (sensitive files with credential data) using network shares
Detects Baby Shark C2 Framework default communication patterns
Page 600 of 680