Haaglumination - Githubissues

splunk / security_content

Splunk Security Content

https://research.splunk.com

Apache License 2.0

1.3k stars 362 forks source link

Haaglumination #3203

Open MHaggis opened 4 days ago

MHaggis commented 4 days ago

New Analytic Story

Lumma Stealer

New Analytics

Windows RunMRU Command Execution
Windows BitLockerToGo Process Execution
Windows BitLockerToGo with Network Activity

Tagged content

Malicious PowerShell Process - Encoded Command
PowerShell 4104 Hunting
Suspicious mshta child process

mvelazc0 commented 4 days ago

love it