Rule Library
Sigma Rules
2 rules found for "Pushkarev Dmitry"
3,731Total
3,132Detection
457Emerging
139Hunting
Detectionmediumtest
AppLocker Prevented Application or Script from Running
Detects when AppLocker prevents the execution of an Application, DLL, Script, MSI, or Packaged-App from running.
Windowsapplocker
Pushkarev DmitrySun Jun 28windows
Detectionmediumtest
Denied Access To Remote Desktop
This event is generated when an authenticated user who is not allowed to log on remotely attempts to connect to this computer through Remote Desktop. Often, this event can be generated by attackers when searching for available windows servers in the network.
Windowssecurity
Pushkarev DmitrySat Jun 27windows