面向系统、网络、安全与运维管理员的实用工具。

SEC

安全桌

哈希、编码、头字段,以及你更愿意亲自运行的检查。这里不会要求账户。

457–480 / 915

Wazuh Kerberoasting Detection Generator

已上线

Generate a tuned Wazuh detection for kerberoasting with field mapping and false-positive guidance

打开工具

Wazuh RDP Exposed to Internet Detection Generator

已上线

Generate a tuned Wazuh detection for rdp exposed to internet with field mapping and false-positive guidance

打开工具

Wazuh Large Outbound Data Transfer Detection Generator

已上线

Generate a tuned Wazuh detection for large outbound data transfer with field mapping and false-positive guidance

打开工具

Wazuh DNS Tunneling Detection Generator

已上线

Generate a tuned Wazuh detection for dns tunneling with field mapping and false-positive guidance

打开工具

Wazuh Web Attack Patterns Detection Generator

已上线

Generate a tuned Wazuh detection for web attack patterns with field mapping and false-positive guidance

打开工具

Wazuh Security Group Change Detection Generator

已上线

Generate a tuned Wazuh detection for security group change with field mapping and false-positive guidance

打开工具

Wazuh Lateral Movement via PsExec Detection Generator

已上线

Generate a tuned Wazuh detection for lateral movement via psexec with field mapping and false-positive guidance

打开工具

Wazuh Pass-the-Hash Detection Generator

已上线

Generate a tuned Wazuh detection for pass-the-hash with field mapping and false-positive guidance

打开工具

Wazuh Registry Run Key Persistence Detection Generator

已上线

Generate a tuned Wazuh detection for registry run key persistence with field mapping and false-positive guidance

打开工具

Wazuh Unusual Parent-Child Process Detection Generator

已上线

Generate a tuned Wazuh detection for unusual parent-child process with field mapping and false-positive guidance

打开工具

Sigma Impossible Travel Detection Generator

已上线

Generate a tuned Sigma detection for impossible travel with field mapping and false-positive guidance

打开工具

Sigma Account Lockout Spike Detection Generator

已上线

Generate a tuned Sigma detection for account lockout spike with field mapping and false-positive guidance

打开工具

Sigma MFA Fatigue Detection Generator

已上线

Generate a tuned Sigma detection for mfa fatigue with field mapping and false-positive guidance

打开工具

Sigma Login from Tor or Anonymizer Detection Generator

已上线

Generate a tuned Sigma detection for login from tor or anonymizer with field mapping and false-positive guidance

打开工具

Sigma Service Account Interactive Logon Detection Generator

已上线

Generate a tuned Sigma detection for service account interactive logon with field mapping and false-positive guidance

打开工具

Sigma New Scheduled Task Created Detection Generator

已上线

Generate a tuned Sigma detection for new scheduled task created with field mapping and false-positive guidance

打开工具

Sigma New Service Installed Detection Generator

已上线

Generate a tuned Sigma detection for new service installed with field mapping and false-positive guidance

打开工具

Sigma Office App Spawning Shell Detection Generator

已上线

Generate a tuned Sigma detection for office app spawning shell with field mapping and false-positive guidance

打开工具

Sigma Security Tool Disabled Detection Generator

已上线

Generate a tuned Sigma detection for security tool disabled with field mapping and false-positive guidance

打开工具

Sigma Kerberoasting Detection Generator

已上线

Generate a tuned Sigma detection for kerberoasting with field mapping and false-positive guidance

打开工具

Sigma RDP Exposed to Internet Detection Generator

已上线

Generate a tuned Sigma detection for rdp exposed to internet with field mapping and false-positive guidance

打开工具

Sigma Large Outbound Data Transfer Detection Generator

已上线

Generate a tuned Sigma detection for large outbound data transfer with field mapping and false-positive guidance

打开工具

Sigma DNS Tunneling Detection Generator

已上线

Generate a tuned Sigma detection for dns tunneling with field mapping and false-positive guidance

打开工具

Sigma Web Attack Patterns Detection Generator

已上线

Generate a tuned Sigma detection for web attack patterns with field mapping and false-positive guidance

打开工具