FH
François Hubaut
@frack113@frack113
First rule: Wed Jan 16 2019 01:00:00 GMT+0100 (Central European Standard Time)
Commits on SigmaHQPull Requests0rules authored
340sole author
137co-authored
By Severity
critical
3
high
125
medium
273
low
72
informational
4
By Status
stable
8
test
461
experimental
8
deprecated
0
unsupported
0
0
Total Rules
0
Stable Rules
0
High / Critical
0
Log Source Types
Recent RulesAll rules →
Suspicious Double Extension Files
Sun Jun 19 2022 02:00:00 GMT+0200 (Central European Summer Time)
highDetection
Potential Defense Evasion Via Rename Of Highly Relevant Binaries
Sat Jun 15 2019 02:00:00 GMT+0200 (Central European Summer Time)
highDetection
Registry Modification of MS-settings Protocol Handler
Mon Dec 20 2021 01:00:00 GMT+0100 (Central European Standard Time)
mediumDetection
File Creation Date Changed to Another Year
Fri Aug 12 2022 02:00:00 GMT+0200 (Central European Summer Time)
lowThreat Hunt
Modify User Shell Folders Startup Value
Sat Oct 01 2022 02:00:00 GMT+0200 (Central European Summer Time)
highDetection
Malicious PowerShell Scripts - PoshModule
Mon Jan 23 2023 01:00:00 GMT+0100 (Central European Standard Time)
highDetection
Browse all 477 rules by François Hubaut
Filter the full rule library to see only their contributions