Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
ATT&CK technique

T1557.003

DHCP Spoofing

Credential AccessCollection 2 detections found
View on MITRE ATT&CK →

Detection rules

Source Rule Status Updated
elastic Multiple DHCP Servers Responding to the Same Transaction production 2026-10-06
sigma Potential Kerberos Coercion by Spoofing SPNs via DNS Manipulation experimental 2025-06-20