Phoenix
Sigma Intelligence
Beta
Home
Detections
Rules
Authors
MITRE
KB
Convert
Analytics
Coverage
Field Explorer
Testing
Ecosystem
Releases
About
Team
Philosophy
Search Rules
Rule Library
Sigma Rules
1 rule found for "Craig Young"
3,707
Total
3,116
Detection
451
Emerging
137
Hunting
Filters
Detection
medium
test
Potential Recon Activity Via Nltest.EXE
Detects nltest commands that can be used for information discovery
Windows
Process Creation
TA0007 · Discovery
T1016 · System Network Configuration Discovery
T1482 · Domain Trust Discovery
Craig Young
+2
Sat Jul 24
windows