Rule Library
Sigma Rules
3 rules found for "Alexander Rausch"
3,731Total
3,132Detection
457Emerging
139Hunting
Detectionhightest
Potential Winnti Dropper Activity
Detects files dropped by Winnti as described in RedMimicry Winnti playbook
WindowsFile Event
Alexander RauschWed Jun 24windows
Detectionhightest
HackTool - RedMimicry Winnti Playbook Execution
Detects actions caused by the RedMimicry Winnti playbook a automated breach emulations utility
WindowsProcess Creation
Alexander RauschWed Jun 24windows
Detectionhightest
RedMimicry Winnti Playbook Registry Manipulation
Detects actions caused by the RedMimicry Winnti playbook
WindowsRegistry Event
Alexander RauschWed Jun 24windows