Rule Library
Sigma Rules
2 rules found for "Relativity"
3,731Total
3,132Detection
457Emerging
139Hunting
Detectionhightest
Metasploit Or Impacket Service Installation Via SMB PsExec
Detects usage of Metasploit SMB PsExec (exploit/windows/smb/psexec) and Impacket psexec.py by triggering on specific service installation
Windowssecurity
Bartlomiej Czyz+1Thu Jan 21windows
Detectionhightest
Rundll32 Execution Without Parameters
Detects rundll32 execution without parameters as observed when running Metasploit windows/smb/psexec exploit module
WindowsProcess Creation
Bartlomiej Czyz+1Sun Jan 31windows