AB

Andreas Braathen

mnemonic.io

First rule: Wed Aug 30 2023 02:00:00 GMT+0200 (Central European Summer Time)

Share profile card

0rules authored

17sole author

3co-authored

Top Log Sources

windows / process_creation

windows / network_connection

windows / file_event

Rule Types

emerging threat

9 threat hunting

By Severity

critical

0

high

7

medium

13

low

0

informational

0

By Status

stable

0

test

18

experimental

2

deprecated

0

unsupported

0

0

Total Rules

0

Stable Rules

0

High / Critical

0

Log Source Types

Recent RulesAll rules →

File Access Of Signal Desktop Sensitive Data

Sun Oct 19 2025 02:00:00 GMT+0200 (Central European Summer Time)

mediumDetection

WDAC Policy File Creation In CodeIntegrity Folder

Thu Jan 30 2025 01:00:00 GMT+0100 (Central European Standard Time)

mediumThreat Hunt

Communication To LocaltoNet Tunneling Service Initiated - Linux

Mon Jun 17 2024 02:00:00 GMT+0200 (Central European Summer Time)

Communication To LocaltoNet Tunneling Service Initiated

Mon Jun 17 2024 02:00:00 GMT+0200 (Central European Summer Time)

Potential CVE-2024-3400 Exploitation - Palo Alto GlobalProtect OS Command Injection - File Creation

Thu Apr 25 2024 02:00:00 GMT+0200 (Central European Summer Time)

mediumEmerging Threat

Python Path Configuration File Creation - Linux

Thu Apr 25 2024 02:00:00 GMT+0200 (Central European Summer Time)

mediumThreat Hunt

Browse all 20 rules by Andreas Braathen

Filter the full rule library to see only their contributions