2021-08-09
Rule Library
Sigma Rules
Browse detections by severity and log source, with YAML and sample events one click away.
3,782Total
3,164Detection
474Emerging
141Hunting
highstableEmerging Threat
Ursnif Malware Download URL Pattern
Detects download of Ursnif malware done by dropper documents.
Generalproxy
2022-08-15
hightestEmerging Threat
Potential Ursnif Malware Activity - Registry
Detects registry keys related to Ursnif malware.
windowsregistry_add
2025-10-22
hightestEmerging Threat
Ursnif Redirection Of Discovery Commands
Detects the redirection of Ursnif discovery commands as part of the initial execution of the malware.
windowsprocess_creation
2023-07-16