Rule Library
Sigma Rules
2 rules found for "Microsoft Defender ATP"
3,731Total
3,132Detection
457Emerging
139Hunting
Emerging Threathighstable
TropicTrooper Campaign November 2018
Detects TropicTrooper activity, an actor who targeted high-profile organizations in the energy and food and beverage sectors in Asia
WindowsProcess Creation
@41thexplorer+1Tue Nov 122018
Emerging Threathightest
UNC2452 Process Creation Patterns
Detects a specific process creation patterns as seen used by UNC2452 and provided by Microsoft as Microsoft Defender ATP queries
WindowsProcess Creation
Florian Roth (Nextron Systems)Fri Jan 222020