Phoenix
Sigma IntelligenceBeta
All Authors
S

SCYTHE

@scythe_io
First rule: Fri Apr 06 2018 02:00:00 GMT+0200 (Central European Summer Time)
Share profile card
0rules authored
0sole author
21co-authored
Top Log Sources
1
windows / process_creation
10 rules
2
windows / file_event
3 rules
3
linux / process_creation
2 rules
Rule Types
detection
20threat hunting
1
By Severity
critical
0
high
2
medium
14
low
5
informational
0
By Status
stable
0
test
21
experimental
0
deprecated
0
unsupported
0
0
Total Rules
0
Stable Rules
0
High / Critical
0
Log Source Types
Recent RulesAll rules →
Suspicious Network Command
Tue Dec 07 2021 01:00:00 GMT+0100 (Central European Standard Time)
lowDetection
Firewall Configuration Discovery Via Netsh.EXE
Tue Dec 07 2021 01:00:00 GMT+0100 (Central European Standard Time)
lowDetection
Office Application Initiated Network Connection To Non-Local IP
Wed Nov 10 2021 01:00:00 GMT+0100 (Central European Standard Time)
mediumDetection
Potential Bucket Enumeration on AWS
Fri Jan 06 2023 01:00:00 GMT+0100 (Central European Standard Time)
lowDetection
Use of FSharp Interpreters
Thu Jun 02 2022 02:00:00 GMT+0200 (Central European Summer Time)
mediumDetection
Outbound Network Connection To Public IP Via Winlogon
Fri Apr 28 2023 02:00:00 GMT+0200 (Central European Summer Time)
mediumDetection
Browse all 21 rules by SCYTHE
Filter the full rule library to see only their contributions
View Rules →