Ferramentas práticas para administradores de sistemas, redes, segurança e operações.

SEC

Secretária de segurança

Hashes, codificações, cabeçalhos e verificações que prefere executar. Nada aqui pede uma conta.

457–480 / 915

Wazuh Kerberoasting Detection Generator

Ativo

Generate a tuned Wazuh detection for kerberoasting with field mapping and false-positive guidance

Abrir ferramenta

Wazuh RDP Exposed to Internet Detection Generator

Ativo

Generate a tuned Wazuh detection for rdp exposed to internet with field mapping and false-positive guidance

Abrir ferramenta

Wazuh Large Outbound Data Transfer Detection Generator

Ativo

Generate a tuned Wazuh detection for large outbound data transfer with field mapping and false-positive guidance

Abrir ferramenta

Wazuh DNS Tunneling Detection Generator

Ativo

Generate a tuned Wazuh detection for dns tunneling with field mapping and false-positive guidance

Abrir ferramenta

Wazuh Web Attack Patterns Detection Generator

Ativo

Generate a tuned Wazuh detection for web attack patterns with field mapping and false-positive guidance

Abrir ferramenta

Wazuh Security Group Change Detection Generator

Ativo

Generate a tuned Wazuh detection for security group change with field mapping and false-positive guidance

Abrir ferramenta

Wazuh Lateral Movement via PsExec Detection Generator

Ativo

Generate a tuned Wazuh detection for lateral movement via psexec with field mapping and false-positive guidance

Abrir ferramenta

Wazuh Pass-the-Hash Detection Generator

Ativo

Generate a tuned Wazuh detection for pass-the-hash with field mapping and false-positive guidance

Abrir ferramenta

Wazuh Registry Run Key Persistence Detection Generator

Ativo

Generate a tuned Wazuh detection for registry run key persistence with field mapping and false-positive guidance

Abrir ferramenta

Wazuh Unusual Parent-Child Process Detection Generator

Ativo

Generate a tuned Wazuh detection for unusual parent-child process with field mapping and false-positive guidance

Abrir ferramenta

Sigma Impossible Travel Detection Generator

Ativo

Generate a tuned Sigma detection for impossible travel with field mapping and false-positive guidance

Abrir ferramenta

Sigma Account Lockout Spike Detection Generator

Ativo

Generate a tuned Sigma detection for account lockout spike with field mapping and false-positive guidance

Abrir ferramenta

Sigma MFA Fatigue Detection Generator

Ativo

Generate a tuned Sigma detection for mfa fatigue with field mapping and false-positive guidance

Abrir ferramenta

Sigma Login from Tor or Anonymizer Detection Generator

Ativo

Generate a tuned Sigma detection for login from tor or anonymizer with field mapping and false-positive guidance

Abrir ferramenta

Sigma Service Account Interactive Logon Detection Generator

Ativo

Generate a tuned Sigma detection for service account interactive logon with field mapping and false-positive guidance

Abrir ferramenta

Sigma New Scheduled Task Created Detection Generator

Ativo

Generate a tuned Sigma detection for new scheduled task created with field mapping and false-positive guidance

Abrir ferramenta

Sigma New Service Installed Detection Generator

Ativo

Generate a tuned Sigma detection for new service installed with field mapping and false-positive guidance

Abrir ferramenta

Sigma Office App Spawning Shell Detection Generator

Ativo

Generate a tuned Sigma detection for office app spawning shell with field mapping and false-positive guidance

Abrir ferramenta

Sigma Security Tool Disabled Detection Generator

Ativo

Generate a tuned Sigma detection for security tool disabled with field mapping and false-positive guidance

Abrir ferramenta

Sigma Kerberoasting Detection Generator

Ativo

Generate a tuned Sigma detection for kerberoasting with field mapping and false-positive guidance

Abrir ferramenta

Sigma RDP Exposed to Internet Detection Generator

Ativo

Generate a tuned Sigma detection for rdp exposed to internet with field mapping and false-positive guidance

Abrir ferramenta

Sigma Large Outbound Data Transfer Detection Generator

Ativo

Generate a tuned Sigma detection for large outbound data transfer with field mapping and false-positive guidance

Abrir ferramenta

Sigma DNS Tunneling Detection Generator

Ativo

Generate a tuned Sigma detection for dns tunneling with field mapping and false-positive guidance

Abrir ferramenta

Sigma Web Attack Patterns Detection Generator

Ativo

Generate a tuned Sigma detection for web attack patterns with field mapping and false-positive guidance

Abrir ferramenta