Rule Library
Sigma Rules
2 rules found for "Chad Hudson"
3,731Total
3,132Detection
457Emerging
139Hunting
Detectionhightest
Webshell Detection With Command Line Keywords
Detects certain command line parameters often used during reconnaissance activity via web shells
WindowsProcess Creation
Florian Roth (Nextron Systems)+5Sun Jan 01windows
Emerging Threathighexperimental
CVE-2024-50623 Exploitation Attempt - Cleo
Detects exploitation attempt of Cleo's CVE-2024-50623 by looking for a "cmd.exe" process spawning from the Celo software suite with suspicious Powershell commandline.
WindowsProcess Creation
Tanner Filip+3Mon Dec 092024