FH

François Hubaut

@frack113 @frack113

First rule: Wed Jan 16 2019 01:00:00 GMT+0100 (Central European Standard Time)

Commits on SigmaHQ Pull Requests

Share profile card

0rules authored

340sole author

137co-authored

Top Log Sources

windows / process_creation

windows / ps_script

windows / registry_set

Rule Types

431 threat hunting

35 emerging threat

By Severity

critical

3

high

125

medium

273

low

72

informational

4

By Status

stable

8

test

461

experimental

8

deprecated

0

unsupported

0

0

Total Rules

0

Stable Rules

0

High / Critical

0

Log Source Types

Recent RulesAll rules →

Suspicious Double Extension Files

Sun Jun 19 2022 02:00:00 GMT+0200 (Central European Summer Time)

Potential Defense Evasion Via Rename Of Highly Relevant Binaries

Sat Jun 15 2019 02:00:00 GMT+0200 (Central European Summer Time)

Registry Modification of MS-settings Protocol Handler

Mon Dec 20 2021 01:00:00 GMT+0100 (Central European Standard Time)

mediumDetection

File Creation Date Changed to Another Year

Fri Aug 12 2022 02:00:00 GMT+0200 (Central European Summer Time)

Modify User Shell Folders Startup Value

Sat Oct 01 2022 02:00:00 GMT+0200 (Central European Summer Time)

Malicious PowerShell Scripts - PoshModule

Mon Jan 23 2023 01:00:00 GMT+0100 (Central European Standard Time)

Browse all 477 rules by François Hubaut

Filter the full rule library to see only their contributions