Rule Library

Sigma Rules

1 rule found for "Dan Beavin)"

3,707Total

3,116Detection

451Emerging

137Hunting

Filters

Type

Severity

Status

Product

Category

Detectionlowtest

HH.EXE Execution

Detects the execution of "hh.exe" to open ".chm" files.

WindowsProcess Creation

TA0005 · Defense EvasionT1218.001 · Compiled HTML File

E.M. Anhaus (originally from Atomic Blue Detections+2Thu Oct 24windows