Rule Library
Sigma Rules
3 rules found for "Aaron Greetham - NCC Group"
3,731Total
3,132Detection
457Emerging
139Hunting
Detectionmediumtest
DNS Query To MEGA Hosting Website
Detects DNS queries for subdomains related to MEGA sharing website
WindowsDNS Query
Aaron Greetham - NCC GroupWed May 26windows
Detectionmediumtest
Rclone Config File Creation
Detects Rclone config files being created
WindowsFile Event
Aaron Greetham - NCC GroupWed May 26windows
Detectionhightest
PUA - Rclone Execution
Detects execution of RClone utility for exfiltration as used by various ransomwares strains like REvil, Conti, FiveHands, etc
WindowsProcess Creation
Bhabesh Raj+2Mon May 10windows