SigmaHQ Detections
@sigmaHQ12 followers122,429 downloads2,472 copies16 likes159,593 views
6,797 detections
Filters
Last updated
All Time
Detection languages
6,797
Categories
2,695
910
506
407
372
Platforms
5,313
505
263
203
164
Products / Services
2,050
1,570
475
423
316
MITRE Techniques
2,652
1,738
1,655
1,502
764
CVEs
19
19
19
16
10
Detects Obfuscated Powershell via Stdin in Scripts
Detects Obfuscated Powershell via use Clip.exe in Scripts
Detects Obfuscated Powershell via use MSHTA in Scripts
Detects Obfuscated Powershell via use Rundll32 in Scripts
Detects the use of getsystem Meterpreter/Cobalt Strike command by detecting a specific service installation
Detects important or interesting Windows services that got terminated for whatever reason
Windows Defender logs when the history of detected infections is deleted.
Detects issues with Windows Defender Real-Time Protection features
Detects the creation of a remote thread from a Powershell process in an uncommon target process
Detects uncommon processes creating remote threads.
Page 96 of 680