Phoenix
Sigma IntelligenceBeta
Rule Library

Sigma Rules

1 rule found for "Samir Bousseaden"

3,707Total
3,116Detection
451Emerging
137Hunting
Threat Huntmediumtest

Potentially Suspicious Compression Tool Parameters

Detects potentially suspicious command line arguments of common data compression tools

WindowsProcess Creation
TA0009 · CollectionT1560.001 · Archive via Utilitydetection.threat-hunting
Florian Roth (Nextron Systems)+1Tue Oct 15windows