Phoenix
Sigma IntelligenceBeta
Rule Library

Sigma Rules

1 rule found for "Aidan Bracher"

3,707Total
3,116Detection
451Emerging
137Hunting
Emerging Threatcriticaltest

Leviathan Registry Key Activity

Detects registry key used by Leviathan APT in Malaysian focused campaign

WindowsRegistry Event
TA0004 · Privilege EscalationTA0003 · PersistenceT1547.001 · Registry Run Keys / Startup Folderdetection.emerging-threats
Aidan BracherTue Jul 072020