sigma-rules:自定义sigma规则的集合
需积分: 49 123 浏览量
2021-03-26
05:15:54
上传
评论
收藏 13KB ZIP 举报
sigma-rules-main.zip （19个子文件） 
sigma-rules-main 
README.md 48B windows process_creation File Execution via Bash.exe.yml 602B Arbitrary File Download Via AppInstaller.yml 393B Possible Windows Defender Bypass Techniques.yml 2KB Pass-Thru Command Execution with OpenURL.yml 677B Possible Code Injection Attempt via Discord LOLBIN.yml 554B Possible FileUpload or FileDownload via CertReq.exe.yml 525B Bypass UAC via Sdclt.yml 498B Suspicious Process Creation - winapiexec.yml 625B System Shells via Services.yml 674B IIS HTTP Logging Disabled.yml 561B image_load Possible Office Child Process Masquerading.yml 735B network_connection Suspicious Program Location with Network Connections.yml 862B RDP Over Reverse SSH Tunnel.yml 696B file_create QuarksPwDump Dump File.yml 634B registry_event Possible VB Object Model Bypass.yml 954B Sticky Key Like Backdoor Usage - via Registry Change.yml 2KB Disabling of Windows Defender.yml 706B RDP Sensitive Settings Changed.yml 686B资源评论
