SEC
Secretária de segurança
Hashes, codificações, cabeçalhos e verificações que prefere executar. Nada aqui pede uma conta.
433–456 / 915
IBM QRadar Suspicious PowerShell Execution Detection Generator
AtivoGenerate a tuned IBM QRadar detection for suspicious powershell execution with field mapping and false-positive guidance
Abrir ferramentaIBM QRadar Ransomware File Activity Detection Generator
AtivoGenerate a tuned IBM QRadar detection for ransomware file activity with field mapping and false-positive guidance
Abrir ferramentaIBM QRadar Cloud Admin Login Without MFA Detection Generator
AtivoGenerate a tuned IBM QRadar detection for cloud admin login without mfa with field mapping and false-positive guidance
Abrir ferramentaIBM QRadar Mailbox Forwarding Rule Created Detection Generator
AtivoGenerate a tuned IBM QRadar detection for mailbox forwarding rule created with field mapping and false-positive guidance
Abrir ferramentaIBM QRadar Credential Dumping (LSASS Access) Detection Generator
AtivoGenerate a tuned IBM QRadar detection for credential dumping (lsass access) with field mapping and false-positive guidance
Abrir ferramentaGoogle SecOps Brute Force Login Detection Generator
AtivoGenerate a tuned Google SecOps detection for brute force login with field mapping and false-positive guidance
Abrir ferramentaGoogle SecOps Password Spray Detection Generator
AtivoGenerate a tuned Google SecOps detection for password spray with field mapping and false-positive guidance
Abrir ferramentaGoogle SecOps New Admin Account Created Detection Generator
AtivoGenerate a tuned Google SecOps detection for new admin account created with field mapping and false-positive guidance
Abrir ferramentaGoogle SecOps Privileged Group Membership Change Detection Generator
AtivoGenerate a tuned Google SecOps detection for privileged group membership change with field mapping and false-positive guidance
Abrir ferramentaGoogle SecOps Security Log Cleared Detection Generator
AtivoGenerate a tuned Google SecOps detection for security log cleared with field mapping and false-positive guidance
Abrir ferramentaGoogle SecOps Suspicious PowerShell Execution Detection Generator
AtivoGenerate a tuned Google SecOps detection for suspicious powershell execution with field mapping and false-positive guidance
Abrir ferramentaGoogle SecOps Ransomware File Activity Detection Generator
AtivoGenerate a tuned Google SecOps detection for ransomware file activity with field mapping and false-positive guidance
Abrir ferramentaGoogle SecOps Cloud Admin Login Without MFA Detection Generator
AtivoGenerate a tuned Google SecOps detection for cloud admin login without mfa with field mapping and false-positive guidance
Abrir ferramentaGoogle SecOps Mailbox Forwarding Rule Created Detection Generator
AtivoGenerate a tuned Google SecOps detection for mailbox forwarding rule created with field mapping and false-positive guidance
Abrir ferramentaGoogle SecOps Credential Dumping (LSASS Access) Detection Generator
AtivoGenerate a tuned Google SecOps detection for credential dumping (lsass access) with field mapping and false-positive guidance
Abrir ferramentaWazuh Impossible Travel Detection Generator
AtivoGenerate a tuned Wazuh detection for impossible travel with field mapping and false-positive guidance
Abrir ferramentaWazuh Account Lockout Spike Detection Generator
AtivoGenerate a tuned Wazuh detection for account lockout spike with field mapping and false-positive guidance
Abrir ferramentaWazuh MFA Fatigue Detection Generator
AtivoGenerate a tuned Wazuh detection for mfa fatigue with field mapping and false-positive guidance
Abrir ferramentaWazuh Login from Tor or Anonymizer Detection Generator
AtivoGenerate a tuned Wazuh detection for login from tor or anonymizer with field mapping and false-positive guidance
Abrir ferramentaWazuh Service Account Interactive Logon Detection Generator
AtivoGenerate a tuned Wazuh detection for service account interactive logon with field mapping and false-positive guidance
Abrir ferramentaWazuh New Scheduled Task Created Detection Generator
AtivoGenerate a tuned Wazuh detection for new scheduled task created with field mapping and false-positive guidance
Abrir ferramentaWazuh New Service Installed Detection Generator
AtivoGenerate a tuned Wazuh detection for new service installed with field mapping and false-positive guidance
Abrir ferramentaWazuh Office App Spawning Shell Detection Generator
AtivoGenerate a tuned Wazuh detection for office app spawning shell with field mapping and false-positive guidance
Abrir ferramentaWazuh Security Tool Disabled Detection Generator
AtivoGenerate a tuned Wazuh detection for security tool disabled with field mapping and false-positive guidance
Abrir ferramenta