CP

Christopher Peacock

First rule: Fri Apr 06 2018 02:00:00 GMT+0200 (Central European Summer Time)

Share profile card

0rules authored

1sole author

24co-authored

Top Log Sources

windows / process_creation

windows / file_event

linux / process_creation

Rule Types

23 emerging threat

1 threat hunting

By Severity

critical

0

high

3

medium

15

low

7

informational

0

By Status

stable

1

test

24

experimental

0

deprecated

0

unsupported

0

0

Total Rules

0

Stable Rules

0

High / Critical

0

Log Source Types

Recent RulesAll rules →

Potential NetWire RAT Activity - Registry

Thu Oct 07 2021 02:00:00 GMT+0200 (Central European Summer Time)

highEmerging Threat

Suspicious Network Command

Tue Dec 07 2021 01:00:00 GMT+0100 (Central European Standard Time)

Firewall Configuration Discovery Via Netsh.EXE

Tue Dec 07 2021 01:00:00 GMT+0100 (Central European Standard Time)

Office Application Initiated Network Connection To Non-Local IP

Wed Nov 10 2021 01:00:00 GMT+0100 (Central European Standard Time)

mediumDetection

Potential Bucket Enumeration on AWS

Fri Jan 06 2023 01:00:00 GMT+0100 (Central European Standard Time)

Use of FSharp Interpreters

Thu Jun 02 2022 02:00:00 GMT+0200 (Central European Summer Time)

mediumDetection

Browse all 25 rules by Christopher Peacock

Filter the full rule library to see only their contributions