Rule Library
Sigma Rules
2 rules found for "MSTI (query)"
3,731Total
3,132Detection
457Emerging
139Hunting
Detectionhightest
Suspicious ASPX File Drop by Exchange
Detects suspicious file type dropped by an Exchange component in IIS into a suspicious folder
WindowsFile Event
Florian Roth (Nextron Systems)+2Sat Oct 01windows
Detectionhightest
Chopper Webshell Process Pattern
Detects patterns found in process executions cause by China Chopper like tiny (ASPX) webshells
WindowsProcess Creation
Florian Roth (Nextron Systems)+1Sat Oct 01windows