FR

Florian Roth

Nextron Systems

@Neo23x0 @cyb3rops

First rule: Wed Jun 27 2012 00:00:00 GMT+0000 (Coordinated Universal Time)

Commits on SigmaHQ Pull Requests

Share profile card

0rules authored

392sole author

246co-authored

Top Log Sources

windows / process_creation

windows / file_event

Rule Types

498 emerging threat

125 threat hunting

By Severity

critical

97

high

397

medium

131

low

13

informational

0

By Status

stable

30

test

603

experimental

5

deprecated

0

unsupported

0

0

Total Rules

0

Stable Rules

0

High / Critical

0

Log Source Types

Recent RulesAll rules →

PowerShell Download Via Net.WebClient - PowerShell Classic

Sun Mar 05 2017 00:00:00 GMT+0000 (Coordinated Universal Time)

Dynamic .NET Compilation Via Csc.EXE

Sat Aug 24 2019 00:00:00 GMT+0000 (Coordinated Universal Time)

mediumDetection

Csc.EXE Execution Form Potentially Suspicious Parent

Mon Feb 11 2019 00:00:00 GMT+0000 (Coordinated Universal Time)

Potential File Extension Spoofing Using Right-to-Left Override

Sun Nov 17 2024 00:00:00 GMT+0000 (Coordinated Universal Time)

Suspicious Copy From or To System Directory

Fri Jul 03 2020 00:00:00 GMT+0000 (Coordinated Universal Time)

mediumDetection

Obfuscated IP Download Activity

Wed Aug 03 2022 00:00:00 GMT+0000 (Coordinated Universal Time)

mediumDetection

Browse all 638 rules by Florian Roth

Filter the full rule library to see only their contributions