Phoenix
Sigma IntelligenceBeta
All Authors
S

SCYTHE

@scythe_io
First rule: Fri Apr 06 2018 00:00:00 GMT+0000 (Coordinated Universal Time)
Share profile card
0rules authored
0sole author
21co-authored
Top Log Sources
1
windows / process_creation
10 rules
2
windows / file_event
3 rules
3
linux / process_creation
2 rules
Rule Types
detection
20threat hunting
1
By Severity
critical
0
high
2
medium
14
low
5
informational
0
By Status
stable
0
test
21
experimental
0
deprecated
0
unsupported
0
0
Total Rules
0
Stable Rules
0
High / Critical
0
Log Source Types
Recent RulesAll rules →
Chmod Targeting Sensitive Directories
Fri Jun 03 2022 00:00:00 GMT+0000 (Coordinated Universal Time)
mediumDetection
Suspicious Network Command
Tue Dec 07 2021 00:00:00 GMT+0000 (Coordinated Universal Time)
lowDetection
Firewall Configuration Discovery Via Netsh.EXE
Tue Dec 07 2021 00:00:00 GMT+0000 (Coordinated Universal Time)
lowDetection
Office Application Initiated Network Connection To Non-Local IP
Wed Nov 10 2021 00:00:00 GMT+0000 (Coordinated Universal Time)
mediumDetection
Potential Bucket Enumeration on AWS
Fri Jan 06 2023 00:00:00 GMT+0000 (Coordinated Universal Time)
lowDetection
Use of FSharp Interpreters
Thu Jun 02 2022 00:00:00 GMT+0000 (Coordinated Universal Time)
mediumDetection
Browse all 21 rules by SCYTHE
Filter the full rule library to see only their contributions
View Rules →