Rule Library
Sigma Rules
2 rules found for "Den Iuzvyk"
3,731Total
3,132Detection
457Emerging
139Hunting
Detectionlowtest
Potential Azure Browser SSO Abuse
Detects abusing Azure Browser SSO by requesting OAuth 2.0 refresh tokens for an Azure-AD-authenticated Windows user (i.e. the machine is joined to Azure AD and a user logs in with their Azure AD account) wanting to perform SSO authentication in the browser. An attacker can use this to authenticate to Azure AD in a browser as that user.
WindowsImage Load (DLL)
Den IuzvykWed Jul 15windows
Detectionhightest
Suspicious Camera and Microphone Access
Detects Processes accessing the camera and microphone from suspicious folder
WindowsRegistry Event
Den IuzvykSun Jun 07windows