مكتب الأمن

Generate a tuned Wazuh detection for kerberoasting with field mapping and false-positive guidance

Generate a tuned Wazuh detection for rdp exposed to internet with field mapping and false-positive guidance

Generate a tuned Wazuh detection for large outbound data transfer with field mapping and false-positive guidance

Generate a tuned Wazuh detection for dns tunneling with field mapping and false-positive guidance

Generate a tuned Wazuh detection for web attack patterns with field mapping and false-positive guidance

Generate a tuned Wazuh detection for security group change with field mapping and false-positive guidance

Generate a tuned Wazuh detection for lateral movement via psexec with field mapping and false-positive guidance

Generate a tuned Wazuh detection for pass-the-hash with field mapping and false-positive guidance

Generate a tuned Wazuh detection for registry run key persistence with field mapping and false-positive guidance

Generate a tuned Wazuh detection for unusual parent-child process with field mapping and false-positive guidance

Generate a tuned Sigma detection for impossible travel with field mapping and false-positive guidance

Generate a tuned Sigma detection for account lockout spike with field mapping and false-positive guidance

Generate a tuned Sigma detection for mfa fatigue with field mapping and false-positive guidance

Generate a tuned Sigma detection for login from tor or anonymizer with field mapping and false-positive guidance

Generate a tuned Sigma detection for service account interactive logon with field mapping and false-positive guidance

Generate a tuned Sigma detection for new scheduled task created with field mapping and false-positive guidance

Generate a tuned Sigma detection for new service installed with field mapping and false-positive guidance

Generate a tuned Sigma detection for office app spawning shell with field mapping and false-positive guidance

Generate a tuned Sigma detection for security tool disabled with field mapping and false-positive guidance

Generate a tuned Sigma detection for kerberoasting with field mapping and false-positive guidance

Generate a tuned Sigma detection for rdp exposed to internet with field mapping and false-positive guidance

Generate a tuned Sigma detection for large outbound data transfer with field mapping and false-positive guidance

Generate a tuned Sigma detection for dns tunneling with field mapping and false-positive guidance

Generate a tuned Sigma detection for web attack patterns with field mapping and false-positive guidance