Rule Library
Sigma Rules
3 rules found for "Bartlomiej Czyz"
3,731Total
3,132Detection
457Emerging
139Hunting
Emerging Threathightest
Lazarus System Binary Masquerading
Detects binaries used by the Lazarus group which use system names but are executed and launched from non-default location
WindowsProcess Creation
Trent Liffick+1Wed Jun 032017
Emerging Threatmediumtest
Defrag Deactivation
Detects the deactivation and disabling of the Scheduled defragmentation task as seen by Slingshot APT group
WindowsProcess Creation
Florian Roth (Nextron Systems)+1Mon Mar 042018
Emerging Threatmediumtest
Defrag Deactivation - Security
Detects the deactivation and disabling of the Scheduled defragmentation task as seen by Slingshot APT group
Windowssecurity
Florian Roth (Nextron Systems)+1Mon Mar 042018