| sigma |
Suspicious SQL Query |
test |
2022-12-27 |
| sigma |
User Has Been Deleted Via Userdel |
test |
2022-12-26 |
| sigma |
Group Has Been Deleted Via Groupdel |
test |
2022-12-26 |
| sigma |
Recon Information for Export with PowerShell |
test |
2022-12-25 |
| sigma |
Live Memory Dump Using Powershell |
test |
2022-12-25 |
| sigma |
Atera Agent Installation |
test |
2022-12-25 |
| sigma |
Backup Catalog Deleted |
test |
2022-12-25 |
| sigma |
Tap Driver Installation |
test |
2022-12-25 |
| sigma |
Enumeration for Credentials in Registry |
test |
2022-12-25 |
| sigma |
Dump Credentials from Windows Credential Manager With PowerShell |
test |
2022-12-25 |
| sigma |
NTFS Alternate Data Stream |
test |
2022-12-25 |
| sigma |
User Couldn't Call a Privileged Service 'LsaRegisterLogonProcess' |
test |
2022-12-25 |
| sigma |
Potential COM Objects Download Cradles Usage - Process Creation |
test |
2022-12-25 |
| sigma |
PowerShell Decompress Commands |
test |
2022-12-25 |
| sigma |
ProcessHacker Privilege Elevation |
test |
2022-12-25 |
| sigma |
Potential COM Objects Download Cradles Usage - PS Script |
test |
2022-12-25 |
| sigma |
PowerShell Credential Prompt |
test |
2022-12-25 |
| sigma |
PowerShell Get-Clipboard Cmdlet Via CLI |
test |
2022-12-25 |
| sigma |
PowerShell Create Local User |
test |
2022-12-25 |
| sigma |
PowerShell Scripts Installed as Services |
test |
2022-12-25 |
| sigma |
Clearing Windows Console History |
test |
2022-12-25 |
| sigma |
PowerShell ICMP Exfiltration |
test |
2022-12-25 |
| sigma |
Powershell Store File In Alternate Data Stream |
test |
2022-12-25 |
| sigma |
AD Groups Or Users Enumeration Using PowerShell - ScriptBlock |
test |
2022-12-25 |
| sigma |
Execution via stordiag.exe |
test |
2022-12-25 |
| sigma |
PowerShell PSAttack |
test |
2022-12-25 |
| sigma |
Extracting Information with PowerShell |
test |
2022-12-25 |
| sigma |
Automated Collection Command PowerShell |
test |
2022-12-25 |
| sigma |
Linux Crypto Mining Indicators |
test |
2022-12-25 |
| sigma |
PowerShell Get-Process LSASS in ScriptBlock |
test |
2022-12-25 |
| sigma |
JNDIExploit Pattern |
test |
2022-12-25 |
| sigma |
Automated Collection Bookmarks Using Get-ChildItem PowerShell |
test |
2022-12-25 |
| sigma |
UAC Bypass With Fake DLL |
test |
2022-12-25 |
| sigma |
NTFS Vulnerability Exploitation |
test |
2022-12-25 |
| sigma |
Vulnerable Netlogon Secure Channel Connection Allowed |
test |
2022-12-25 |
| sigma |
Execution via WorkFolders.exe |
test |
2022-12-25 |
| sigma |
DHCP Server Error Failed Loading the CallOut DLL |
test |
2022-12-25 |
| sigma |
Volume Shadow Copy Mount |
test |
2022-12-25 |
| sigma |
Powershell Local Email Collection |
test |
2022-12-25 |
| sigma |
DHCP Server Loaded the CallOut DLL |
test |
2022-12-25 |