CP

Christopher Peacock

First rule: Fri Apr 06 2018 00:00:00 GMT+0000 (Coordinated Universal Time)

Share profile card

0rules authored

1sole author

24co-authored

Top Log Sources

windows / process_creation

windows / file_event

linux / process_creation

Rule Types

23 emerging threat

1 threat hunting

By Severity

critical

0

high

3

medium

15

low

7

informational

0

By Status

stable

1

test

24

experimental

0

deprecated

0

unsupported

0

0

Total Rules

0

Stable Rules

0

High / Critical

0

Log Source Types

Recent RulesAll rules →

Chmod Targeting Sensitive Directories

Fri Jun 03 2022 00:00:00 GMT+0000 (Coordinated Universal Time)

mediumDetection

Potential NetWire RAT Activity - Registry

Thu Oct 07 2021 00:00:00 GMT+0000 (Coordinated Universal Time)

highEmerging Threat

Suspicious Network Command

Tue Dec 07 2021 00:00:00 GMT+0000 (Coordinated Universal Time)

Firewall Configuration Discovery Via Netsh.EXE

Tue Dec 07 2021 00:00:00 GMT+0000 (Coordinated Universal Time)

Office Application Initiated Network Connection To Non-Local IP

Wed Nov 10 2021 00:00:00 GMT+0000 (Coordinated Universal Time)

mediumDetection

Potential Bucket Enumeration on AWS

Fri Jan 06 2023 00:00:00 GMT+0000 (Coordinated Universal Time)

Browse all 25 rules by Christopher Peacock

Filter the full rule library to see only their contributions