8 published detections cite this
Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.
| Detection | Severity |
|---|---|
| Windows Time Based Evasion | Medium |
| Windows Abused Web Services | Informational |
| Windows Njrat Fileless Storage via Registry | Medium |
| Windows Modify Registry With MD5 Reg Key Name | Medium |
| Windows Executable in Loaded Modules | Medium |
| Windows Disable or Modify Tools Via Taskkill | Informational |
| Windows Delete or Modify System Firewall | Medium |
| Windows Admin Permission Discovery | Informational |
Showing 8 of 8