SEC
安全桌
哈希、编码、头字段，以及你更愿意亲自运行的检查。这里不会要求账户。
73–96 / 915
Microsoft Sentinel Security Group Change Detection Generator
已上线Generate a tuned Microsoft Sentinel detection for security group change with field mapping and false-positive guidance
打开工具Microsoft Sentinel Mailbox Forwarding Rule Created Detection Generator
已上线Generate a tuned Microsoft Sentinel detection for mailbox forwarding rule created with field mapping and false-positive guidance
打开工具Microsoft Sentinel Lateral Movement via PsExec Detection Generator
已上线Generate a tuned Microsoft Sentinel detection for lateral movement via psexec with field mapping and false-positive guidance
打开工具Microsoft Sentinel Pass-the-Hash Detection Generator
已上线Generate a tuned Microsoft Sentinel detection for pass-the-hash with field mapping and false-positive guidance
打开工具Microsoft Sentinel Credential Dumping (LSASS Access) Detection Generator
已上线Generate a tuned Microsoft Sentinel detection for credential dumping (lsass access) with field mapping and false-positive guidance
打开工具Microsoft Sentinel Registry Run Key Persistence Detection Generator
已上线Generate a tuned Microsoft Sentinel detection for registry run key persistence with field mapping and false-positive guidance
打开工具Microsoft Sentinel Unusual Parent-Child Process Detection Generator
已上线Generate a tuned Microsoft Sentinel detection for unusual parent-child process with field mapping and false-positive guidance
打开工具Elastic Security Brute Force Login Detection Generator
已上线Generate a tuned Elastic Security detection for brute force login with field mapping and false-positive guidance
打开工具Elastic Security Password Spray Detection Generator
已上线Generate a tuned Elastic Security detection for password spray with field mapping and false-positive guidance
打开工具Elastic Security New Admin Account Created Detection Generator
已上线Generate a tuned Elastic Security detection for new admin account created with field mapping and false-positive guidance
打开工具Elastic Security Privileged Group Membership Change Detection Generator
已上线Generate a tuned Elastic Security detection for privileged group membership change with field mapping and false-positive guidance
打开工具Elastic Security Security Log Cleared Detection Generator
已上线Generate a tuned Elastic Security detection for security log cleared with field mapping and false-positive guidance
打开工具Elastic Security Suspicious PowerShell Execution Detection Generator
已上线Generate a tuned Elastic Security detection for suspicious powershell execution with field mapping and false-positive guidance
打开工具Elastic Security Ransomware File Activity Detection Generator
已上线Generate a tuned Elastic Security detection for ransomware file activity with field mapping and false-positive guidance
打开工具Elastic Security Cloud Admin Login Without MFA Detection Generator
已上线Generate a tuned Elastic Security detection for cloud admin login without mfa with field mapping and false-positive guidance
打开工具Elastic Security Mailbox Forwarding Rule Created Detection Generator
已上线Generate a tuned Elastic Security detection for mailbox forwarding rule created with field mapping and false-positive guidance
打开工具Elastic Security Credential Dumping (LSASS Access) Detection Generator
已上线Generate a tuned Elastic Security detection for credential dumping (lsass access) with field mapping and false-positive guidance
打开工具Wazuh Brute Force Login Detection Generator
已上线Generate a tuned Wazuh detection for brute force login with field mapping and false-positive guidance
打开工具Wazuh Password Spray Detection Generator
已上线Generate a tuned Wazuh detection for password spray with field mapping and false-positive guidance
打开工具Wazuh New Admin Account Created Detection Generator
已上线Generate a tuned Wazuh detection for new admin account created with field mapping and false-positive guidance
打开工具Wazuh Privileged Group Membership Change Detection Generator
已上线Generate a tuned Wazuh detection for privileged group membership change with field mapping and false-positive guidance
打开工具Wazuh Security Log Cleared Detection Generator
已上线Generate a tuned Wazuh detection for security log cleared with field mapping and false-positive guidance
打开工具Wazuh Suspicious PowerShell Execution Detection Generator
已上线Generate a tuned Wazuh detection for suspicious powershell execution with field mapping and false-positive guidance
打开工具Wazuh Ransomware File Activity Detection Generator
已上线Generate a tuned Wazuh detection for ransomware file activity with field mapping and false-positive guidance
打开工具