Rule Library

Sigma Rules

Browse detections by severity and log source, with YAML and sample events one click away.

3,782Total
3,164Detection
474Emerging
141Hunting
1 rulesInspect a rule without leaving your results.
hightestEmerging Threat

Potential CVE-2022-26809 Exploitation Attempt

Detects suspicious remote procedure call (RPC) service anomalies based on the spawned sub processes (long shot to detect the exploitation of vulnerabilities like CVE-2022-26809)

windowsprocess_creation
2023-02-03