Blog Labs References

Detection rules › By event

Microsoft-Windows-Sysmon event 25

1 detection rule reference this event. View event page.

Sigma (1)

Potential Process Hollowing Activity severity medium T1055.012

Keyboard Shortcuts

j / k: Scroll down / up
d / u: Half-page down / up
h / l: Go back / forward
gg: Go to top
G: Go to bottom
f: Follow link (SHIFT = new tab)
/: Focus search
?: Toggle this help

See Navigation Reference for search modifiers and filters.