Phoenix
Sigma IntelligenceBeta
All Authors
OT

Open Threat Research

OTR
First rule: Sat Oct 26 2019 00:00:00 GMT+0000 (Coordinated Universal Time)
Share profile card
0rules authored
0sole author
7co-authored
Top Log Sources
1
windows / security
3 rules
2
windows / system
1 rules
3
windows / file_event
1 rules
Rule Types
detection
7
By Severity
critical
2
high
3
medium
0
low
1
informational
1
By Status
stable
0
test
7
experimental
0
deprecated
0
unsupported
0
0
Total Rules
0
Stable Rules
0
High / Critical
0
Log Source Types
Recent RulesAll rules →
Suspicious Child Process Created as System
Sat Oct 26 2019 00:00:00 GMT+0000 (Coordinated Universal Time)
highDetection
Volume Shadow Copy Mount
Tue Oct 20 2020 00:00:00 GMT+0000 (Coordinated Universal Time)
lowDetection
Potential DCOM InternetExplorer.Application DLL Hijack
Mon Oct 12 2020 00:00:00 GMT+0000 (Coordinated Universal Time)
criticalDetection
Potential DCOM InternetExplorer.Application DLL Hijack - Image Load
Mon Oct 12 2020 00:00:00 GMT+0000 (Coordinated Universal Time)
criticalDetection
DCOM InternetExplorer.Application Iertutil DLL Hijack - Security
Mon Oct 12 2020 00:00:00 GMT+0000 (Coordinated Universal Time)
highDetection
VSSAudit Security Event Source Registration
Tue Oct 20 2020 00:00:00 GMT+0000 (Coordinated Universal Time)
informationalDetection
Browse all 7 rules by Open Threat Research
Filter the full rule library to see only their contributions
View Rules →