Rule Library
Sigma Rules
2 rules found for "Slingshot"
3,731Total
3,132Detection
457Emerging
139Hunting
Emerging Threatmediumtest
Defrag Deactivation
Detects the deactivation and disabling of the Scheduled defragmentation task as seen by Slingshot APT group
WindowsProcess Creation
Florian Roth (Nextron Systems)+1Mon Mar 042018
Emerging Threatmediumtest
Defrag Deactivation - Security
Detects the deactivation and disabling of the Scheduled defragmentation task as seen by Slingshot APT group
Windowssecurity
Florian Roth (Nextron Systems)+1Mon Mar 042018