Rule Library
Sigma Rules
4 rules found for "Max Altgelt (Nextron Systems)"
3,731Total
3,132Detection
457Emerging
139Hunting
Emerging Threatcriticaltest
CVE-2021-33766 Exchange ProxyToken Exploitation
Detects the exploitation of Microsoft Exchange ProxyToken vulnerability as described in CVE-2021-33766
Web Server Log
Florian Roth (Nextron Systems)+2Mon Aug 302021
Emerging Threathightest
ADSelfService Exploitation
Detects suspicious access to URLs that was noticed in cases in which attackers exploitated the ADSelfService vulnerability CVE-2021-40539
Web Server Log
Tobias Michalski+1Mon Sep 202021
Emerging Threathightest
Conti Volume Shadow Listing
Detects a command used by conti to find volume shadow backups
WindowsProcess Creation
Max Altgelt (Nextron Systems)+1Mon Aug 092021
Emerging Threathightest
Conti NTDS Exfiltration Command
Detects a command used by conti to exfiltrate NTDS
WindowsProcess Creation
Max Altgelt (Nextron Systems)+1Mon Aug 092021