CSEC_PUBLIC/hayabusa
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Files
034f9c0957aea6c623ea8a7dd633312ebfb2bb33
hayabusa/rules/sigma/windows/file_event
History
itiB 034f9c0957 Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
..
file_event_advanced_ip_scanner.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
file_event_apt_unidentified_nov_18.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
file_event_cve_2021_31979_cve_2021_33771_exploits.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
file_event_executable_and_script_creation_by_office_using_file_ext.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
file_event_hack_dumpert.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
file_event_hktl_createminidump.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
file_event_mal_adwind.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
file_event_moriya_rootkit.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
file_event_pingback_backdoor.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
file_event_script_creation_by_office_using_file_ext.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
file_event_tool_psexec.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
file_event_uac_bypass_winsat.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
file_event_uac_bypass_wmp.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
file_event_winrm_awl_bypass.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
file_event_wmiprvse_wbemcomn_dll_hijack.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
sysmon_creation_system_file.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
sysmon_cred_dump_tools_dropped_files.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
sysmon_cve_2021_26858_msexchange.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
sysmon_detect_powerup_dllhijacking.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
sysmon_ghostpack_safetykatz.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
sysmon_lsass_memory_dump_file_creation.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
sysmon_non_priv_program_files_move.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
sysmon_office_persistence.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
sysmon_outlook_newform.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
sysmon_pcre_net_temp_file.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
sysmon_powershell_exploit_scripts.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
sysmon_quarkspw_filedump.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
sysmon_redmimicry_winnti_filedrop.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
sysmon_startup_folder_file_write.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
sysmon_susp_adsi_cache_usage.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
sysmon_susp_clr_logs.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
sysmon_susp_desktop_ini.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
sysmon_susp_pfx_file_creation.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
sysmon_susp_procexplorer_driver_created_in_tmp_folder.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
sysmon_suspicious_powershell_profile_create.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
sysmon_tsclient_filewrite_startup.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
sysmon_uac_bypass_consent_comctl32.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
sysmon_uac_bypass_dotnet_profiler.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
sysmon_uac_bypass_ieinstal.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
sysmon_uac_bypass_msconfig_gui.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
sysmon_uac_bypass_ntfs_reparse_point.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
sysmon_webshell_creation_detect.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
sysmon_wmi_persistence_script_event_consumer_write.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
win_cve_2021_1675_printspooler.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
win_file_winword_cve_2021_40444.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
win_hivenightmare_file_exports.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
win_outlook_c2_macro_creation.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
win_rclone_exec_file.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00
win_susp_desktopimgdownldr_file.yml
Add: sigma rules (#175)
2021-11-22 08:45:44 +09:00