Rule Info
Name
New Module Module Added To IIS Server
Author
frack113
Description
Detects the addition of a new module to an IIS server.
Reference
Date
2024-10-06 00:00:00
Modified
None
Id
dd857d3e-0c6e-457b-9b48-e82ae7f86bd7
Tags
attack.defense-evasion attack.persistence attack.t1562.002 attack.t1505.004
Type
Community Rule
Link to Public Repo
Rule History
Author
Title
Date
Commit
frack113
Merge PR #4935 from @frack113 - Add new IIS logsource and related rules
2024-10-06
Scan your endpoints, forensic images or collected files with our portable scanner THOR