Rule Library

Sigma Rules

Browse detections by severity and log source, with YAML and sample events one click away.

3,782Total
3,164Detection
474Emerging
141Hunting
2 rulesInspect a rule without leaving your results.
hightestEmerging Threat

Exchange ProxyShell Pattern

Detects URL patterns that could be found in ProxyShell exploitation attempts against Exchange servers (failed and successful)

Generalwebserver
2023-01-02
criticaltestEmerging Threat

Successful Exchange ProxyShell Attack

Detects URP patterns and status codes that indicate a successful ProxyShell exploitation attack against Exchange servers

Generalwebserver
2023-01-02