Phoenix
Sigma IntelligenceBeta
Rule Library

Sigma Rules

1 rule found for "Andreas Hunkeler"

3,707Total
3,116Detection
451Emerging
137Hunting
Emerging Threathightest

Potential ACTINIUM Persistence Activity

Detects specific process parameters as used by ACTINIUM scheduled task persistence creation.

WindowsProcess Creation
TA0004 · Privilege EscalationTA0002 · ExecutionTA0003 · PersistenceT1053 · Scheduled Task/Job+2
Andreas HunkelerMon Feb 072022