Rule Library

Sigma Rules

1 rule found for "Dave Johnson"

3,731Total

3,132Detection

457Emerging

139Hunting

Filters

Type

Severity

Status

Product

Category

Detectionmediumtest

Potential Dropper Script Execution Via WScript/CScript/MSHTA

Detects wscript/cscript/mshta executions of scripts located in user directories

WindowsProcess Creation

TA0002 · ExecutionT1059.005 · Visual BasicT1059.007 · JavaScript

Margaritis Dimitrios+4Wed Jan 16windows