mediumtestEmerging Threat
Defrag Deactivation - Security
Detects the deactivation and disabling of the Scheduled defragmentation task as seen by Slingshot APT group
windowssecurity
2022-11-27
Emerging Threats
Actor2018
Slingshot
2Rules
1References
1Folders
2022-11-27Latest
Summary
Slingshot is tracked here as a threat actor, intrusion set, or campaign with 2 Sigma detections spanning 2018. Coverage centers on windows / process_creation, windows / security.
Related Detections
Search this threatmediumtestEmerging Threat
Defrag Deactivation
Detects the deactivation and disabling of the Scheduled defragmentation task as seen by Slingshot APT group
windowsprocess_creation
2022-10-09
References