Rule Library
Sigma Rules
3 rules found for "Tobias Michalski"
3,731Total
3,132Detection
457Emerging
139Hunting
Emerging Threathightest
ADSelfService Exploitation
Detects suspicious access to URLs that was noticed in cases in which attackers exploitated the ADSelfService vulnerability CVE-2021-40539
Web Server Log
Tobias Michalski+1Mon Sep 202021
Emerging Threathightest
Conti Volume Shadow Listing
Detects a command used by conti to find volume shadow backups
WindowsProcess Creation
Max Altgelt (Nextron Systems)+1Mon Aug 092021
Emerging Threathightest
Conti NTDS Exfiltration Command
Detects a command used by conti to exfiltrate NTDS
WindowsProcess Creation
Max Altgelt (Nextron Systems)+1Mon Aug 092021