Rule Library
Sigma Rules
2 rules found for "Mark Russinovich"
3,731Total
3,132Detection
457Emerging
139Hunting
Detectionmediumtest
Potentially Suspicious AccessMask Requested From LSASS
Detects process handle on LSASS process with certain access mask
Windowssecurity
Roberto Rodriguez (Cyb3rWard0g)+5Fri Nov 01windows
Detectionmediumtest
Potentially Suspicious GrantedAccess Flags On LSASS
Detects process access requests to LSASS process with potentially suspicious access flags
WindowsProcess Access
Florian Roth (Nextron Systems)+9Mon Nov 22windows