MH
Michael Haag
@MHaggis
First rule: Thu Mar 09 2017 01:00:00 GMT+0100 (Central European Standard Time)
Commits on SigmaHQPull Requests0rules authored
4sole author
17co-authored
By Severity
critical
0
high
9
medium
9
low
3
informational
0
By Status
stable
1
test
16
experimental
4
deprecated
0
unsupported
0
0
Total Rules
0
Stable Rules
0
High / Critical
0
Log Source Types
Recent RulesAll rules →
Windows AppX Deployment Full Trust Package Installation
Mon Nov 03 2025 01:00:00 GMT+0100 (Central European Standard Time)
mediumDetection
Windows AppX Deployment Unsigned Package Installation
Mon Nov 03 2025 01:00:00 GMT+0100 (Central European Standard Time)
mediumDetection
Windows MSIX Package Support Framework AI_STUBS Execution
Mon Nov 03 2025 01:00:00 GMT+0100 (Central European Standard Time)
lowDetection
Successful MSIX/AppX Package Installation
Mon Nov 03 2025 01:00:00 GMT+0100 (Central European Standard Time)
lowThreat Hunt
Potential Product Class Reconnaissance Via Wmic.EXE
Tue Feb 14 2023 01:00:00 GMT+0100 (Central European Standard Time)
mediumDetection
PowerShell Web Access Installation - PsScript
Tue Sep 03 2024 02:00:00 GMT+0200 (Central European Summer Time)
highDetection
Browse all 21 rules by Michael Haag
Filter the full rule library to see only their contributions