C
Cyb3rEng
First rule: Fri Apr 06 2018 02:00:00 GMT+0200 (Central European Summer Time)
0rules authored
0sole author
4co-authored
Rule Types
By Severity
critical
0
high
4
medium
0
low
0
informational
0
By Status
stable
0
test
4
experimental
0
deprecated
0
unsupported
0
0
Total Rules
0
Stable Rules
0
High / Critical
0
Log Source Types
Recent RulesAll rules →
File With Uncommon Extension Created By An Office Application
Mon Aug 23 2021 02:00:00 GMT+0200 (Central European Summer Time)
highDetection
Suspicious WmiPrvSE Child Process
Mon Aug 23 2021 02:00:00 GMT+0200 (Central European Summer Time)
highDetection
Suspicious Microsoft Office Child Process
Fri Apr 06 2018 02:00:00 GMT+0200 (Central European Summer Time)
highDetection
Suspicious WMIC Execution Via Office Process
Mon Aug 23 2021 02:00:00 GMT+0200 (Central European Summer Time)
highDetection
Browse all 4 rules by Cyb3rEng
Filter the full rule library to see only their contributions