01
detectionlint / library / sigma

Data Compressed

sigmaDRL-1.1from SigmaHQ/sigma

An adversary may compress data (e.g., sensitive documents) that is collected prior to exfiltration in order to make it portable and minimize the amount of data sent over the network.

02
quality76
fp risk—
forks0
views1

ATT&CK techniques

rule sourcelocked

Sign in to view the rule source

Free accounts can view the source for the top-ranked rules. Create one in seconds — no credit card required.

Sign in