Rule Library
Sigma Rules
3 rules found for "Dmitry Uchakin"
3,731Total
3,132Detection
457Emerging
139Hunting
Detectionhightest
UAC Bypass With Fake DLL
Attempts to load dismcore.dll after dropping it
WindowsImage Load (DLL)
oscd.community+1Tue Oct 06windows
Detectionmediumtest
Function Call From Undocumented COM Interface EditionUpgradeManager
Detects function calls from the EditionUpgradeManager COM interface. Which is an interface that is not used by standard executables.
WindowsProcess Access
oscd.community+1Wed Oct 07windows
Detectionhightest
UAC Bypass Via Wsreset
Unfixed method for UAC bypass from Windows 10. WSReset.exe file associated with the Windows Store. It will run a binary file contained in a low-privilege registry.
WindowsRegistry Event
oscd.community+1Wed Oct 07windows