Log source category

ps_classic_provider_start log source Sigma rules

1 Sigma detection rule in the library use the ps_classic_provider_start log source, mostly on windows. The ps_classic_provider_start category groups related telemetry so you can find detections that consume the same events. Open a rule to read its detection logic, MITRE ATT&CK mapping and original YAML.