SigmaHQ Detections
@sigmaHQ12 followers122,429 downloads2,470 copies16 likes159,541 views
6,797 detections
Filters
Last updated
All Time
Detection languages
6,797
Categories
2,695
910
506
407
372
Platforms
5,313
505
263
203
164
Products / Services
2,050
1,570
475
423
316
MITRE Techniques
2,652
1,738
1,655
1,502
764
CVEs
19
19
19
16
10
Detects installation or execution of services
Detects Remote Utilities Host service installation on the target system.
Detects suspicious service installation commands
Detects PsExec service installation and execution events
Well-known TAP software installation. Possible preparation for data exfiltration using tunnelling techniques
Detects uncommon service installation commands by looking at suspicious or uncommon image path values containing references to encoded powershell commands, temporary paths, etc.
Detects the installation of RTCore service. Which could be an indication of Micro-Star MSI Afterburner vulnerable driver abuse
Detects service installation in suspicious folder appdata
Detects service installation with suspicious folder patterns
Detects Access to LSASS Process
Page 639 of 680