SigmaHQ Detections
@sigmaHQ12 followers122,429 downloads2,472 copies16 likes159,571 views
6,797 detections
Filters
Last updated
All Time
Detection languages
6,797
Categories
2,695
910
506
407
372
Platforms
5,313
505
263
203
164
Products / Services
2,050
1,570
475
423
316
MITRE Techniques
2,652
1,738
1,655
1,502
764
CVEs
19
19
19
16
10
Detects image load events with revoked certificates by code integrity.
Detects the presence of a loaded unsigned kernel module on the system.
Detects loading of diagcab packages from a remote path, as seen in DogWalk vulnerability
Detects DNS queries for subdomains related to MEGA sharing website
USB Device Plugged
Sigma
Detects plugged/unplugged USB devices
Detects a successful export of an Exchange mailbox to untypical directory or with aspx name suffix which can be used to place a webshell or the needed role assignment for it
Detects scenarios where an attacker enables the OpenSSH server and server starts to listening on SSH socket.
Detects read access to a domain user from a non-machine account
Detects access to ADMIN$ network share
Detects tools extracting LSA secret DPAPI domain backup key from Domain Controllers
Page 610 of 680