FR
Florian Roth
Nextron Systems
@Neo23x0@cyb3rops
First rule: Wed Jun 27 2012 02:00:00 GMT+0200 (Central European Summer Time)
Commits on SigmaHQPull Requests0rules authored
392sole author
246co-authored
By Severity
critical
97
high
397
medium
131
low
13
informational
0
By Status
stable
30
test
603
experimental
5
deprecated
0
unsupported
0
0
Total Rules
0
Stable Rules
0
High / Critical
0
Log Source Types
Recent RulesAll rules →
PowerShell Download Via Net.WebClient - PowerShell Classic
Sun Mar 05 2017 01:00:00 GMT+0100 (Central European Standard Time)
lowDetection
Dynamic .NET Compilation Via Csc.EXE
Sat Aug 24 2019 02:00:00 GMT+0200 (Central European Summer Time)
mediumDetection
Csc.EXE Execution Form Potentially Suspicious Parent
Mon Feb 11 2019 01:00:00 GMT+0100 (Central European Standard Time)
highDetection
Potential File Extension Spoofing Using Right-to-Left Override
Sun Nov 17 2024 01:00:00 GMT+0100 (Central European Standard Time)
highDetection
Suspicious Copy From or To System Directory
Fri Jul 03 2020 02:00:00 GMT+0200 (Central European Summer Time)
mediumDetection
Obfuscated IP Download Activity
Wed Aug 03 2022 02:00:00 GMT+0200 (Central European Summer Time)
mediumDetection
Browse all 638 rules by Florian Roth
Filter the full rule library to see only their contributions