SigmaHQ Detections
@sigmaHQ12 followers122,429 downloads2,472 copies16 likes159,574 views
6,797 detections
Filters
Last updated
All Time
Detection languages
6,797
Categories
2,695
910
506
407
372
Platforms
5,313
505
263
203
164
Products / Services
2,050
1,570
475
423
316
MITRE Techniques
2,652
1,738
1,655
1,502
764
CVEs
19
19
19
16
10
Detects a file ending in jse, vbe, js, vba, vbs, wsf, wsh written by cscript.exe or wscript.exe
Detects wscript/cscript/mshta executions of scripts located in user directories
Detects delete action in the Github audit logs for codespaces, environment, project and repo.
Detects instances where an email, identified as malicious or suspicious by the Microsoft Defender for Office 365 (formerly ATP) engine, was delivered to a user's Inbox or Junk folder.
It might indicate that a potential threat, such as a spearphishing attachment or links, has bypassed initial blocking mechanisms and reached an end-user, requiring further investigation and potential remediation.
It might indicate that a potential threat, such as a spearphishing attachment or links, has bypassed initial blocking mechanisms and reached an end-user, requiring further investigation and potential remediation.
Detects when an the Administrator role is assigned to an user or group.
Detects when a API Token is revoked.
Detects when Okta FastPass prevents a known phishing site.
Detects when a new identity provider is created for Okta.
Detects when an Okta policy is modified or deleted.
Detects when an Policy Rule is Modified or Deleted.
Page 77 of 680