Phoenix
Sigma IntelligenceBeta
Rule Library

Sigma Rules

1 rule found for "SecurityAura"

3,731Total
3,132Detection
457Emerging
139Hunting
Detectionhightest

HackTool - Potential Remote Credential Dumping Activity Via CrackMapExec Or Impacket-Secretsdump

Detects default filenames output from the execution of CrackMapExec and Impacket-secretsdump against an endpoint.

WindowsFile Event
SecurityAuraWed Nov 16windows