Стол безопасности, page 21

Sigma Security Group Change Detection Generator

Доступно

Generate a tuned Sigma detection for security group change with field mapping and false-positive guidance

Открыть инструмент

Sigma Lateral Movement via PsExec Detection Generator

Доступно

Generate a tuned Sigma detection for lateral movement via psexec with field mapping and false-positive guidance

Открыть инструмент

Sigma Pass-the-Hash Detection Generator

Доступно

Generate a tuned Sigma detection for pass-the-hash with field mapping and false-positive guidance

Открыть инструмент

Sigma Registry Run Key Persistence Detection Generator

Доступно

Generate a tuned Sigma detection for registry run key persistence with field mapping and false-positive guidance

Открыть инструмент

Sigma Unusual Parent-Child Process Detection Generator

Доступно

Generate a tuned Sigma detection for unusual parent-child process with field mapping and false-positive guidance

Открыть инструмент

CrowdStrike Falcon LogScale Impossible Travel Detection Generator

Доступно

Generate a tuned CrowdStrike Falcon LogScale detection for impossible travel with field mapping and false-positive guidance

Открыть инструмент

CrowdStrike Falcon LogScale Account Lockout Spike Detection Generator

Доступно

Generate a tuned CrowdStrike Falcon LogScale detection for account lockout spike with field mapping and false-positive guidance

Открыть инструмент

CrowdStrike Falcon LogScale MFA Fatigue Detection Generator

Доступно

Generate a tuned CrowdStrike Falcon LogScale detection for mfa fatigue with field mapping and false-positive guidance

Открыть инструмент

CrowdStrike Falcon LogScale Login from Tor or Anonymizer Detection Generator

Доступно

Generate a tuned CrowdStrike Falcon LogScale detection for login from tor or anonymizer with field mapping and false-positive guidance

Открыть инструмент

CrowdStrike Falcon LogScale Service Account Interactive Logon Detection Generator

Доступно

Generate a tuned CrowdStrike Falcon LogScale detection for service account interactive logon with field mapping and false-positive guidance

Открыть инструмент

CrowdStrike Falcon LogScale New Scheduled Task Created Detection Generator

Доступно

Generate a tuned CrowdStrike Falcon LogScale detection for new scheduled task created with field mapping and false-positive guidance

Открыть инструмент

CrowdStrike Falcon LogScale New Service Installed Detection Generator

Доступно

Generate a tuned CrowdStrike Falcon LogScale detection for new service installed with field mapping and false-positive guidance

Открыть инструмент

CrowdStrike Falcon LogScale Office App Spawning Shell Detection Generator

Доступно

Generate a tuned CrowdStrike Falcon LogScale detection for office app spawning shell with field mapping and false-positive guidance

Открыть инструмент

CrowdStrike Falcon LogScale Security Tool Disabled Detection Generator

Доступно

Generate a tuned CrowdStrike Falcon LogScale detection for security tool disabled with field mapping and false-positive guidance

Открыть инструмент

CrowdStrike Falcon LogScale Kerberoasting Detection Generator

Доступно

Generate a tuned CrowdStrike Falcon LogScale detection for kerberoasting with field mapping and false-positive guidance

Открыть инструмент

CrowdStrike Falcon LogScale RDP Exposed to Internet Detection Generator

Доступно

Generate a tuned CrowdStrike Falcon LogScale detection for rdp exposed to internet with field mapping and false-positive guidance

Открыть инструмент

CrowdStrike Falcon LogScale Large Outbound Data Transfer Detection Generator

Доступно

Generate a tuned CrowdStrike Falcon LogScale detection for large outbound data transfer with field mapping and false-positive guidance

Открыть инструмент

CrowdStrike Falcon LogScale DNS Tunneling Detection Generator

Доступно

Generate a tuned CrowdStrike Falcon LogScale detection for dns tunneling with field mapping and false-positive guidance

Открыть инструмент

CrowdStrike Falcon LogScale Web Attack Patterns Detection Generator

Доступно

Generate a tuned CrowdStrike Falcon LogScale detection for web attack patterns with field mapping and false-positive guidance

Открыть инструмент

CrowdStrike Falcon LogScale Security Group Change Detection Generator

Доступно

Generate a tuned CrowdStrike Falcon LogScale detection for security group change with field mapping and false-positive guidance

Открыть инструмент

CrowdStrike Falcon LogScale Lateral Movement via PsExec Detection Generator

Доступно

Generate a tuned CrowdStrike Falcon LogScale detection for lateral movement via psexec with field mapping and false-positive guidance

Открыть инструмент

CrowdStrike Falcon LogScale Pass-the-Hash Detection Generator

Доступно

Generate a tuned CrowdStrike Falcon LogScale detection for pass-the-hash with field mapping and false-positive guidance

Открыть инструмент

CrowdStrike Falcon LogScale Registry Run Key Persistence Detection Generator

Доступно

Generate a tuned CrowdStrike Falcon LogScale detection for registry run key persistence with field mapping and false-positive guidance

Открыть инструмент

CrowdStrike Falcon LogScale Unusual Parent-Child Process Detection Generator

Доступно

Generate a tuned CrowdStrike Falcon LogScale detection for unusual parent-child process with field mapping and false-positive guidance

Открыть инструмент