criticaltestEmerging Threat
OilRig APT Activity
Detects OilRig activity as reported by Nyotron in their March 2018 report
windowsprocess_creation
2023-03-08
Rule Library
Sigma Rules
Browse detections by severity and log source, with YAML and sample events one click away.
3,782Total
3,164Detection
474Emerging
141Hunting
criticaltestEmerging Threat
OilRig APT Registry Persistence
Detects OilRig registry persistence as reported by Nyotron in their March 2018 report
windowsregistry_event
2023-03-08
criticaltestEmerging Threat
OilRig APT Schedule Task Persistence - Security
Detects OilRig schedule task persistence as reported by Nyotron in their March 2018 report
windowssecurity
2023-03-08
criticaltestEmerging Threat
OilRig APT Schedule Task Persistence - System
Detects OilRig schedule task persistence as reported by Nyotron in their March 2018 report
windowssystem
2023-03-08