O

OTR

Open Threat Research

First rule: Wed Nov 28 2018 01:00:00 GMT+0100 (Central European Standard Time)

Share profile card

0rules authored

2sole author

52co-authored

Top Log Sources

windows / security

windows / image_load

linux / process_creation

Rule Types

51 threat hunting

By Severity

critical

1

high

20

medium

24

low

6

informational

3

By Status

stable

0

test

54

experimental

0

deprecated

0

unsupported

0

0

Total Rules

0

Stable Rules

0

High / Critical

0

Log Source Types

Recent RulesAll rules →

CredUI.DLL Loaded By Uncommon Process

Tue Oct 20 2020 02:00:00 GMT+0200 (Central European Summer Time)

mediumDetection

Startup Folder File Write

Sat May 02 2020 02:00:00 GMT+0200 (Central European Summer Time)

mediumDetection

Sysmon Channel Reference Deletion

Tue Jul 14 2020 02:00:00 GMT+0200 (Central European Summer Time)

Suspicious Non PowerShell WSMAN COM Provider

Wed Jun 24 2020 02:00:00 GMT+0200 (Central European Summer Time)

mediumDetection

PFX File Creation

Sat May 02 2020 02:00:00 GMT+0200 (Central European Summer Time)

SMB Create Remote File Admin Share

Thu Aug 06 2020 02:00:00 GMT+0200 (Central European Summer Time)

Browse all 54 rules by OTR

Filter the full rule library to see only their contributions