SM

Sean Metcalf

source

First rule: Sun Mar 05 2017 01:00:00 GMT+0100 (Central European Standard Time)

Share profile card

0rules authored

0sole author

4co-authored

Top Log Sources

windows / ps_script

windows / ps_classic_start

Rule Types

By Severity

critical

0

high

3

medium

1

low

0

informational

0

By Status

stable

0

test

4

experimental

0

deprecated

0

unsupported

0

0

Total Rules

0

Stable Rules

0

High / Critical

0

Log Source Types

Recent RulesAll rules →

Malicious PowerShell Commandlets - ScriptBlock

Sun Mar 05 2017 01:00:00 GMT+0100 (Central European Standard Time)

PowerShell Called from an Executable Version Mismatch

Sun Mar 05 2017 01:00:00 GMT+0100 (Central European Standard Time)

Malicious PowerShell Keywords

Sun Mar 05 2017 01:00:00 GMT+0100 (Central European Standard Time)

mediumDetection

PowerShell PSAttack

Sun Mar 05 2017 01:00:00 GMT+0100 (Central European Standard Time)

Browse all 4 rules by Sean Metcalf

Filter the full rule library to see only their contributions