List view

persistence_accessibility_features_osk_sysmon1.evtx

OSW#1 Task

Status: Open.

#177 In Security-Experts-Community/open-xp-rules;

· aw350m33d opened on May 28, 2023

persistence_pendingGPO_sysmon_13.evtx

OSW#1 Task

Status: Open.

#179 In Security-Experts-Community/open-xp-rules;

· aw350m33d opened on May 28, 2023

Persistence_Shime_Microsoft-Windows-Application-Experience_Program-Telemetry_500.evtx

OSW#1 Task

Status: Open.

#181 In Security-Experts-Community/open-xp-rules;

· aw350m33d opened on May 28, 2023

persistence_startup_UserShellStartup_Folder_Changed_sysmon_13.evtx

OSW#1 Task

Status: Open.

#183 In Security-Experts-Community/open-xp-rules;

· aw350m33d opened on May 28, 2023

Persistence_Winsock_Catalog Change EventId_1.evtx

OSW#1 Task

Status: Open.

#185 In Security-Experts-Community/open-xp-rules;

· aw350m33d opened on May 28, 2023

persist_bitsadmin_Microsoft-Windows-Bits-Client-Operational.evtx

OSW#1 Task

Status: Open.

#186 In Security-Experts-Community/open-xp-rules;

· aw350m33d opened on May 28, 2023

persist_firefox_comhijack_sysmon_11_13_7_1.evtx

OSW#1 Task

Status: Open.

#187 In Security-Experts-Community/open-xp-rules;

· aw350m33d opened on May 28, 2023

persist_turla_outlook_backdoor_comhijack.evtx

OSW#1 Task

Status: Open.

#188 In Security-Experts-Community/open-xp-rules;

· aw350m33d opened on May 28, 2023

persist_valid_account_guest_rid_hijack.evtx

OSW#1 Task

Status: Open.

#189 In Security-Experts-Community/open-xp-rules;

· aw350m33d opened on May 28, 2023

sysmon_1_persist_bitsjob_SetNotifyCmdLine.evtx

OSW#1 Task

Status: Open.

#191 In Security-Experts-Community/open-xp-rules;

· aw350m33d opened on May 28, 2023

sysmon_1_smss_child_proc_bootexecute_setupexecute.evtx

OSW#1 Task

Status: Open.

#192 In Security-Experts-Community/open-xp-rules;

· aw350m33d opened on May 28, 2023