Rule Library
Sigma Rules
2 rules found for "Mateusz Wydra"
3,731Total
3,132Detection
457Emerging
139Hunting
Detectionmediumtest
Uncommon Assistive Technology Applications Execution Via AtBroker.EXE
Detects the start of a non built-in assistive technology applications via "Atbroker.EXE".
WindowsProcess Creation
Mateusz Wydra+1Mon Oct 12windows
Detectionmediumtest
Atbroker Registry Change
Detects creation/modification of Assistive Technology applications and persistence with usage of 'at'
WindowsRegistry Event
Mateusz Wydra+1Tue Oct 13windows