Potentially Suspicious EventLog Recon Activity Using Log Query Utilities

심각도 보통 Sigma 탐지 룰. Detects execution of different log query utilities and commands to search and dump the content of specific event logs or look for specific e…

작성자: Nasreddine Bencherchali (Nextron Systems), X__Junior (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본