Phoenix
Sigma IntelligenceBeta

Search rules

Search the full rule library from any page.

    Open navigation menuClose navigation menu
    Rule Library

    Sigma Rules

    Browse detections by severity and log source, with YAML and sample events one click away.

    3,782Total
    3,164Detection
    474Emerging
    141Hunting
    7 rulesInspect a rule without leaving your results.
    mediumtestEmerging Threat

    Kapeka Backdoor Configuration Persistence

    Detects registry set activity of a value called "Seed" stored in the "\Cryptography\Providers\" registry key. The Kapeka backdoor leverages this location to register a new SIP provider for backdoor configuration persistence.

    windowsregistry_set
    2024-07-03
    hightestEmerging Threat

    Kapeka Backdoor Scheduled Task Creation

    Detects Kapeka backdoor scheduled task creation based on attributes such as paths, commands line flags, etc.

    windowssecurity
    2024-07-03
    ‹12›