Rule Library
Sigma Rules
5 rules found for "Dimitrios Slamaris"
3,731Total
3,132Detection
457Emerging
139Hunting
Detectionmediumtest
Potentially Suspicious AccessMask Requested From LSASS
Detects process handle on LSASS process with certain access mask
Windowssecurity
Roberto Rodriguez (Cyb3rWard0g)+5Fri Nov 01windows
Detectionhightest
DHCP Server Loaded the CallOut DLL
This rule detects a DHCP server in which a specified Callout DLL (in registry) was loaded
Windowssystem
Dimitrios SlamarisMon May 15windows
Detectionhightest
DHCP Server Error Failed Loading the CallOut DLL
This rule detects a DHCP server error in which a specified Callout DLL (in registry) could not be loaded
Windowssystem
Dimitrios SlamarisMon May 15windows
Detectionmediumtest
Potentially Suspicious GrantedAccess Flags On LSASS
Detects process access requests to LSASS process with potentially suspicious access flags
WindowsProcess Access
Florian Roth (Nextron Systems)+9Mon Nov 22windows
Detectionhightest
DHCP Callout DLL Installation
Detects the installation of a Callout DLL via CalloutDlls and CalloutEnabled parameter in Registry, which can be used to execute code in context of the DHCP server (restart required)
WindowsRegistry Set
Dimitrios SlamarisMon May 15windows