Rule Library
Sigma Rules
6 rules found for "Thurein Oo"
3,731Total
3,132Detection
457Emerging
139Hunting
Detectionmediumtest
F5 BIG-IP iControl Rest API Command Execution - Proxy
Detects POST requests to the F5 BIG-IP iControl Rest API "bash" endpoint, which allows the execution of commands on the BIG-IP
Proxy Log
Nasreddine Bencherchali (Nextron Systems)+1Wed Nov 08web
Detectionmediumtest
F5 BIG-IP iControl Rest API Command Execution - Webserver
Detects POST requests to the F5 BIG-IP iControl Rest API "bash" endpoint, which allows the execution of commands on the BIG-IP
Web Server Log
Nasreddine Bencherchali (Nextron Systems)+1Wed Nov 08web
Detectionmediumtest
Path Traversal Exploitation Attempts
Detects path traversal exploitation attempts
Web Server Log
Subhash Popuri+3Sat Sep 25web
Detectionhightest
SQL Injection Strings In URI
Detects potential SQL injection attempts via GET requests in access logs.
Web Server Log
Saw Win Naung+2Sat Feb 22web
Detectionmediumtest
Potential Webshell Creation On Static Website
Detects the creation of files with certain extensions on a static web site. This can be indicative of potential uploads of a web shell.
WindowsFile Event
Beyu Denis+3Tue Oct 22windows
Detectionlowtest
PowerShell Script Execution Policy Enabled
Detects the enabling of the PowerShell script execution policy. Once enabled, this policy allows scripts to be executed.
WindowsRegistry Set
Nasreddine Bencherchali (Nextron Systems)+1Wed Oct 18windows