Rule Library

Sigma Rules

1 rule found for "Jason Rathbun (Blackpoint Cyber)"

3,731Total

3,132Detection

457Emerging

139Hunting

Filters

Type

Severity

Status

Product

Category

Detectionhightest

Remote Access Tool - ScreenConnect Server Web Shell Execution

Detects potential web shell execution from the ScreenConnect server process.

WindowsProcess Creation

Jason Rathbun (Blackpoint Cyber)Mon Feb 26windows