Phoenix
Sigma IntelligenceBeta
All Authors
EA

E.M. Anhaus (originally from Atomic Blue Detections

First rule: Thu Oct 24 2019 02:00:00 GMT+0200 (Central European Summer Time)
Share profile card
0rules authored
0sole author
13co-authored
Top Log Sources
1
windows / process_creation
12 rules
2
linux / auditd
1 rules
Rule Types
detection
13
By Severity
critical
0
high
7
medium
4
low
2
informational
0
By Status
stable
1
test
12
experimental
0
deprecated
0
unsupported
0
0
Total Rules
0
Stable Rules
0
High / Critical
0
Log Source Types
Recent RulesAll rules →
Forfiles Command Execution
Tue Jun 14 2022 02:00:00 GMT+0200 (Central European Summer Time)
mediumDetection
HH.EXE Execution
Thu Oct 24 2019 02:00:00 GMT+0200 (Central European Summer Time)
lowDetection
Audio Capture via PowerShell
Thu Oct 24 2019 02:00:00 GMT+0200 (Central European Summer Time)
mediumDetection
Boot Configuration Tampering Via Bcdedit.EXE
Thu Oct 24 2019 02:00:00 GMT+0200 (Central European Summer Time)
highDetection
Suspicious JavaScript Execution Via Mshta.EXE
Thu Oct 24 2019 02:00:00 GMT+0200 (Central European Summer Time)
highDetection
Use of Pcalua For Execution
Tue Jun 14 2022 02:00:00 GMT+0200 (Central European Summer Time)
mediumDetection
Browse all 13 rules by E.M. Anhaus (originally from Atomic Blue Detections
Filter the full rule library to see only their contributions
View Rules →