Phoenix
Sigma IntelligenceBeta
Rule Library

Sigma Rules

1 rule found for "Christopher Peacock"

3,707Total
3,116Detection
451Emerging
137Hunting
Threat Huntlowtest

Local Firewall Rules Enumeration Via NetFirewallRule Cmdlet

Detects execution of "Get-NetFirewallRule" or "Show-NetFirewallRule" to enumerate the local firewall rules on a host.

WindowsPowerShell Module
detection.threat-huntingTA0007 · DiscoveryT1518.001 · Security Software DiscoveryT1016 · System Network Configuration Discovery
Christopher Peacock+1Thu Jul 13windows