Rule Library
Sigma Rules
2 rules found for "Harjot Singh"
3,731Total
3,132Detection
457Emerging
139Hunting
Threat Huntmediumtest
Mail Forwarding/Redirecting Activity In O365
Detects email forwarding or redirecting activity in O365 Audit logs.
Microsoft 365audit
RedCanary Team+1Wed Oct 11cloud
Threat Huntmediumtest
Diskshadow Child Process Spawned
Detects any child process spawning from "Diskshadow.exe". This could be due to executing Diskshadow in interpreter mode or script mode and using the "exec" flag to launch other applications.
WindowsProcess Creation
Harjot SinghFri Sep 15windows