SM
Sean Metcalf
source
First rule: Sun Mar 05 2017 01:00:00 GMT+0100 (Central European Standard Time)
0rules authored
0sole author
4co-authored
Rule Types
By Severity
critical
0
high
3
medium
1
low
0
informational
0
By Status
stable
0
test
4
experimental
0
deprecated
0
unsupported
0
0
Total Rules
0
Stable Rules
0
High / Critical
0
Log Source Types
Recent RulesAll rules →
Malicious PowerShell Commandlets - ScriptBlock
Sun Mar 05 2017 01:00:00 GMT+0100 (Central European Standard Time)
highDetection
PowerShell Called from an Executable Version Mismatch
Sun Mar 05 2017 01:00:00 GMT+0100 (Central European Standard Time)
highDetection
Malicious PowerShell Keywords
Sun Mar 05 2017 01:00:00 GMT+0100 (Central European Standard Time)
mediumDetection
PowerShell PSAttack
Sun Mar 05 2017 01:00:00 GMT+0100 (Central European Standard Time)
highDetection
Browse all 4 rules by Sean Metcalf
Filter the full rule library to see only their contributions