Sign in Get started

Tool

github.com/topotam/PetitPotam

https://github.com/topotam/PetitPotam

Published on: github.com
Sources in this catalogue: 2

ATT&CK techniques those detections carry

T1187Forced Authentication
T1212Exploitation for Credential Access
T1218System Binary Proxy Execution
T1218.011Rundll32
T1557Adversary-in-the-Middle
T1564.004NTFS File Attributes

Open the original

4 published detections cite this

Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.

Detections citing this reference
Detection	Severity	Source	Published	Licence
Potential Local NTLM Relay via HTTP	High	Elastic detection rules	Sep 20, 2026	Elastic License 2.0
HackTool Named File Stream Created	High	SigmaHQ	Aug 26, 2026	Detection Rule License 1.1
PetitPotam Suspicious Kerberos TGT Request	High	SigmaHQ	Aug 26, 2026	Detection Rule License 1.1
Possible PetitPotam Coerce Authentication Attempt	High	SigmaHQ	Aug 26, 2026	Detection Rule License 1.1

Showing 4 of 4

Filter in the catalogue

Detections can measure how the public catalogue is used — which detections people look for, and which pages bring them here. It sets a cookie that recognises this browser for 180 days. It is never linked to an account and never follows you to other sites. Privacy notice