TS
Tim Shelton
First rule: Sun Mar 05 2017 01:00:00 GMT+0100 (Central European Standard Time)
0rules authored
4sole author
62co-authored
By Severity
critical
2
high
23
medium
37
low
4
informational
0
By Status
stable
2
test
64
experimental
0
deprecated
0
unsupported
0
0
Total Rules
0
Stable Rules
0
High / Critical
0
Log Source Types
Recent RulesAll rules →
Files With System Process Name In Unsuspected Locations
Tue May 26 2020 02:00:00 GMT+0200 (Central European Summer Time)
mediumDetection
Malicious PowerShell Commandlets - ScriptBlock
Sun Mar 05 2017 01:00:00 GMT+0100 (Central European Standard Time)
highDetection
Desktop.INI Created by Uncommon Process
Thu Mar 19 2020 01:00:00 GMT+0100 (Central European Standard Time)
mediumDetection
Wow6432Node CurrentVersion Autorun Keys Modification
Fri Oct 25 2019 02:00:00 GMT+0200 (Central European Summer Time)
mediumDetection
Suspicious Copy From or To System Directory
Fri Jul 03 2020 02:00:00 GMT+0200 (Central European Summer Time)
mediumDetection
Classes Autorun Keys Modification
Fri Oct 25 2019 02:00:00 GMT+0200 (Central European Summer Time)
mediumDetection
Browse all 66 rules by Tim Shelton
Filter the full rule library to see only their contributions