criticalstableEmerging Threat
Potential QBot Activity
Detects potential QBot activity by looking for process executions used previously by QBot
windowsprocess_creation
2023-02-03
Rule Library
Sigma Rules
Browse detections by severity and log source, with YAML and sample events one click away.
3,782Total
3,164Detection
474Emerging
141Hunting
hightestEmerging Threat
Exploitation Attempt Of CVE-2020-1472 - Execution of ZeroLogon PoC
Detects the execution of the commonly used ZeroLogon PoC executable.
windowsprocess_creation
2022-02-12