SEC
Sicherheits-Schreibtisch
Hashes, Kodierungen, Header und Prüfungen, die Sie lieber selbst ausführen. Nichts hier verlangt ein Konto.
721–744 / 915
IBM QRadar New Service Installed Detection Generator
AktivGenerate a tuned IBM QRadar detection for new service installed with field mapping and false-positive guidance
Werkzeug öffnenIBM QRadar Office App Spawning Shell Detection Generator
AktivGenerate a tuned IBM QRadar detection for office app spawning shell with field mapping and false-positive guidance
Werkzeug öffnenIBM QRadar Security Tool Disabled Detection Generator
AktivGenerate a tuned IBM QRadar detection for security tool disabled with field mapping and false-positive guidance
Werkzeug öffnenIBM QRadar Kerberoasting Detection Generator
AktivGenerate a tuned IBM QRadar detection for kerberoasting with field mapping and false-positive guidance
Werkzeug öffnenIBM QRadar RDP Exposed to Internet Detection Generator
AktivGenerate a tuned IBM QRadar detection for rdp exposed to internet with field mapping and false-positive guidance
Werkzeug öffnenIBM QRadar Large Outbound Data Transfer Detection Generator
AktivGenerate a tuned IBM QRadar detection for large outbound data transfer with field mapping and false-positive guidance
Werkzeug öffnenIBM QRadar DNS Tunneling Detection Generator
AktivGenerate a tuned IBM QRadar detection for dns tunneling with field mapping and false-positive guidance
Werkzeug öffnenIBM QRadar Web Attack Patterns Detection Generator
AktivGenerate a tuned IBM QRadar detection for web attack patterns with field mapping and false-positive guidance
Werkzeug öffnenIBM QRadar Security Group Change Detection Generator
AktivGenerate a tuned IBM QRadar detection for security group change with field mapping and false-positive guidance
Werkzeug öffnenIBM QRadar Lateral Movement via PsExec Detection Generator
AktivGenerate a tuned IBM QRadar detection for lateral movement via psexec with field mapping and false-positive guidance
Werkzeug öffnenIBM QRadar Pass-the-Hash Detection Generator
AktivGenerate a tuned IBM QRadar detection for pass-the-hash with field mapping and false-positive guidance
Werkzeug öffnenIBM QRadar Registry Run Key Persistence Detection Generator
AktivGenerate a tuned IBM QRadar detection for registry run key persistence with field mapping and false-positive guidance
Werkzeug öffnenIBM QRadar Unusual Parent-Child Process Detection Generator
AktivGenerate a tuned IBM QRadar detection for unusual parent-child process with field mapping and false-positive guidance
Werkzeug öffnenGoogle SecOps Impossible Travel Detection Generator
AktivGenerate a tuned Google SecOps detection for impossible travel with field mapping and false-positive guidance
Werkzeug öffnenGoogle SecOps Account Lockout Spike Detection Generator
AktivGenerate a tuned Google SecOps detection for account lockout spike with field mapping and false-positive guidance
Werkzeug öffnenGoogle SecOps MFA Fatigue Detection Generator
AktivGenerate a tuned Google SecOps detection for mfa fatigue with field mapping and false-positive guidance
Werkzeug öffnenGoogle SecOps Login from Tor or Anonymizer Detection Generator
AktivGenerate a tuned Google SecOps detection for login from tor or anonymizer with field mapping and false-positive guidance
Werkzeug öffnenGoogle SecOps Service Account Interactive Logon Detection Generator
AktivGenerate a tuned Google SecOps detection for service account interactive logon with field mapping and false-positive guidance
Werkzeug öffnenGoogle SecOps New Scheduled Task Created Detection Generator
AktivGenerate a tuned Google SecOps detection for new scheduled task created with field mapping and false-positive guidance
Werkzeug öffnenGoogle SecOps New Service Installed Detection Generator
AktivGenerate a tuned Google SecOps detection for new service installed with field mapping and false-positive guidance
Werkzeug öffnenGoogle SecOps Office App Spawning Shell Detection Generator
AktivGenerate a tuned Google SecOps detection for office app spawning shell with field mapping and false-positive guidance
Werkzeug öffnenGoogle SecOps Security Tool Disabled Detection Generator
AktivGenerate a tuned Google SecOps detection for security tool disabled with field mapping and false-positive guidance
Werkzeug öffnenGoogle SecOps Kerberoasting Detection Generator
AktivGenerate a tuned Google SecOps detection for kerberoasting with field mapping and false-positive guidance
Werkzeug öffnenGoogle SecOps RDP Exposed to Internet Detection Generator
AktivGenerate a tuned Google SecOps detection for rdp exposed to internet with field mapping and false-positive guidance
Werkzeug öffnen