FH

François Hubaut

@frack113 @frack113

First rule: Wed Jan 16 2019 00:00:00 GMT+0000 (Coordinated Universal Time)

Commits on SigmaHQ Pull Requests

Share profile card

0rules authored

340sole author

137co-authored

Top Log Sources

windows / process_creation

windows / ps_script

windows / registry_set

Rule Types

430 threat hunting

36 emerging threat

By Severity

critical

3

high

124

medium

274

low

72

informational

4

By Status

stable

8

test

461

experimental

8

deprecated

0

unsupported

0

0

Total Rules

0

Stable Rules

0

High / Critical

0

Log Source Types

Recent RulesAll rules →

Suspicious Double Extension Files

Sun Jun 19 2022 00:00:00 GMT+0000 (Coordinated Universal Time)

Powershell Token Obfuscation - Process Creation

Tue Dec 27 2022 00:00:00 GMT+0000 (Coordinated Universal Time)

Important Scheduled Task Deleted or Disabled

Fri Jan 13 2023 00:00:00 GMT+0000 (Coordinated Universal Time)

Disable Important Scheduled Task

Sun Dec 26 2021 00:00:00 GMT+0000 (Coordinated Universal Time)

Potential Defense Evasion Via Rename Of Highly Relevant Binaries

Sat Jun 15 2019 00:00:00 GMT+0000 (Coordinated Universal Time)

Registry Modification of MS-settings Protocol Handler

Mon Dec 20 2021 00:00:00 GMT+0000 (Coordinated Universal Time)

mediumDetection

Browse all 477 rules by François Hubaut

Filter the full rule library to see only their contributions