MITRE ATT&CK technique
Search Open Websites/Domains detection rulesT1593
Search Open Websites/Domains (T1593) is a MITRE ATT&CK technique in the Reconnaissance tactic. This page lists the 2 community-maintained Sigma detection rules in the library mapped to T1593 and its sub-techniques. Each rule includes its detection logic, log source, false positives and original YAML. These rules mainly target windows, linux.
T1593 on attack.mitre.org2 rules
Tactic
Suspicious Git Clone
mediumDetects execution of "git" in order to clone a remote repository that contain suspicious keywords which might be suspicious
windows · process_creation
Suspicious Git Clone - Linux
mediumDetects execution of "git" in order to clone a remote repository that contain suspicious keywords which might be suspicious
linux · process_creation