Rule Library
Sigma Rules
3 rules found for "Dmitriy Lifanov"
3,731Total
3,132Detection
457Emerging
139Hunting
Detectionmediumtest
DNS Query Request By Regsvr32.EXE
Detects DNS queries initiated by "Regsvr32.exe"
WindowsDNS Query
Dmitriy Lifanov+1Fri Oct 25windows
Detectionmediumtest
Network Connection Initiated By Regsvr32.EXE
Detects a network connection initiated by "Regsvr32.exe"
WindowsNetwork Connection
Dmitriy Lifanov+1Fri Oct 25windows
Detectionhightest
Narrator's Feedback-Hub Persistence
Detects abusing Windows 10 Narrator's Feedback-Hub
WindowsRegistry Event
Dmitriy Lifanov+1Fri Oct 25windows