criticaltestEmerging Threat
Elise Backdoor Activity
Detects Elise backdoor activity used by APT32
windowsprocess_creation
2023-03-09
Rule Library
Sigma Rules
Browse detections by severity and log source, with YAML and sample events one click away.
3,782Total
3,164Detection
474Emerging
141Hunting
hightestEmerging Threat
Potential EmpireMonkey Activity
Detects potential EmpireMonkey APT activity
windowsprocess_creation
2023-03-09
hightestEmerging Threat
Conti Volume Shadow Listing
Detects a command used by conti to find volume shadow backups
windowsprocess_creation
2021-08-09
hightestEmerging Threat
Conti NTDS Exfiltration Command
Detects a command used by conti to exfiltrate NTDS
windowsprocess_creation
2022-10-09
criticaltestEmerging Threat
Potential Conti Ransomware Activity
Detects a specific command used by the Conti ransomware group
windowsprocess_creation
2023-02-13