Phoenix
Sigma IntelligenceBeta
Rule Library

Sigma Rules

1 rule found for "Chad Hudson"

3,707Total
3,116Detection
451Emerging
137Hunting
Detectionhightest

Webshell Detection With Command Line Keywords

Detects certain command line parameters often used during reconnaissance activity via web shells

WindowsProcess Creation
TA0003 · PersistenceTA0007 · DiscoveryT1505.003 · Web ShellT1018 · Remote System Discovery+2
Florian Roth (Nextron Systems)+5Sun Jan 01windows