Rule Library
Sigma Rules
2 rules found for "Vadim Khrykov (ThreatIntel)"
3,731Total
3,132Detection
457Emerging
139Hunting
Detectionhightest
File With Uncommon Extension Created By An Office Application
Detects the creation of files with an executable or script extension by an Office application.
WindowsFile Event
Vadim Khrykov (ThreatIntel)+2Mon Aug 23windows
Detectionhightest
Suspicious WmiPrvSE Child Process
Detects suspicious and uncommon child processes of WmiPrvSE
WindowsProcess Creation
Vadim Khrykov (ThreatIntel)+2Mon Aug 23windows