Rule Library
Sigma Rules
2 rules found for "Karneades / Markus Neis"
3,731Total
3,132Detection
457Emerging
139Hunting
Detectionmediumtest
Arbitrary File Download Via Squirrel.EXE
Detects the usage of the "Squirrel.exe" to download arbitrary files. This binary is part of multiple Electron based software installations (Slack, Teams, Discord, etc.)
WindowsProcess Creation
Nasreddine Bencherchali (Nextron Systems)+3Thu Jun 09windows
Detectionmediumtest
Process Proxy Execution Via Squirrel.EXE
Detects the usage of the "Squirrel.exe" binary to execute arbitrary processes. This binary is part of multiple Electron based software installations (Slack, Teams, Discord, etc.)
WindowsProcess Creation
Nasreddine Bencherchali (Nextron Systems)+3Thu Jun 09windows