Phoenix
Sigma IntelligenceBeta
Rule Library

Sigma Rules

1 rule found for "Semanur Guneysu"

3,707Total
3,116Detection
451Emerging
137Hunting
Detectionhightest

Abused Debug Privilege by Arbitrary Parent Processes

Detection of unusual child processes by different system processes

WindowsProcess Creation
TA0005 · Defense EvasionTA0004 · Privilege EscalationT1548 · Abuse Elevation Control Mechanism
Semanur Guneysu+1Wed Oct 28windows