https://fibratus.io/ weekly 1.0 https://fibratus.io/es weekly 1.0 https://fibratus.io/product/overview monthly 0.9 https://fibratus.io/es/product/overview monthly 0.9 https://fibratus.io/how-it-works monthly 0.9 https://fibratus.io/es/how-it-works monthly 0.9 https://fibratus.io/product/extensibility monthly 0.8 https://fibratus.io/es/product/extensibility monthly 0.8 https://fibratus.io/solutions/blue-team monthly 0.8 https://fibratus.io/es/solutions/blue-team monthly 0.8 https://fibratus.io/solutions/red-team monthly 0.8 https://fibratus.io/es/solutions/red-team monthly 0.8 https://fibratus.io/solutions/purple-team monthly 0.8 https://fibratus.io/es/solutions/purple-team monthly 0.8 https://fibratus.io/solutions/detection-engineers monthly 0.8 https://fibratus.io/es/solutions/detection-engineers monthly 0.8 https://fibratus.io/solutions/soc-analysts monthly 0.8 https://fibratus.io/es/solutions/soc-analysts monthly 0.8 https://fibratus.io/solutions/threat-hunters monthly 0.8 https://fibratus.io/es/solutions/threat-hunters monthly 0.8 https://fibratus.io/kernel-runtime-security monthly 0.9 https://fibratus.io/es/kernel-runtime-security monthly 0.9 https://fibratus.io/behavioral-detection monthly 0.9 https://fibratus.io/es/behavioral-detection monthly 0.9 https://fibratus.io/detection-engineering monthly 0.9 https://fibratus.io/es/detection-engineering monthly 0.9 https://fibratus.io/open-source-edr monthly 0.9 https://fibratus.io/es/open-source-edr monthly 0.9 https://fibratus.io/resources/compare monthly 0.8 https://fibratus.io/es/resources/compare monthly 0.8 https://fibratus.io/resources/alternatives monthly 0.8 https://fibratus.io/es/resources/alternatives monthly 0.8 https://fibratus.io/resources/compare/fibratus-vs-wazuh monthly 0.85 https://fibratus.io/es/resources/compare/fibratus-vs-wazuh monthly 0.85 https://fibratus.io/resources/compare/fibratus-vs-sysmon monthly 0.85 https://fibratus.io/es/resources/compare/fibratus-vs-sysmon monthly 0.85 https://fibratus.io/resources/compare/edr-vs-xdr-vs-mdr monthly 0.8 https://fibratus.io/es/resources/compare/edr-vs-xdr-vs-mdr monthly 0.8 https://fibratus.io/resources/alternatives/crowdstrike monthly 0.85 https://fibratus.io/es/resources/alternatives/crowdstrike monthly 0.85 https://fibratus.io/resources/alternatives/microsoft-defender-for-endpoint monthly 0.85 https://fibratus.io/es/resources/alternatives/microsoft-defender-for-endpoint monthly 0.85 https://fibratus.io/downloads weekly 0.9 https://fibratus.io/es/downloads weekly 0.9 https://fibratus.io/about/mission monthly 0.7 https://fibratus.io/es/about/mission monthly 0.7 https://fibratus.io/about/open-source monthly 0.7 https://fibratus.io/es/about/open-source monthly 0.7 https://fibratus.io/about/team monthly 0.7 https://fibratus.io/es/about/team monthly 0.7 https://fibratus.io/contact monthly 0.6 https://fibratus.io/es/contact monthly 0.6 https://fibratus.io/blog weekly 0.9 https://fibratus.io/es/blog weekly 0.9 https://fibratus.io/blog/how-fibratus-complements-crowdstrike 2026-03-23 monthly 0.8 https://fibratus.io/es/blog/how-fibratus-complements-crowdstrike 2026-03-23 monthly 0.8 https://fibratus.io/blog/how-fibratus-complements-microsoft-defender 2026-03-20 monthly 0.8 https://fibratus.io/es/blog/how-fibratus-complements-microsoft-defender 2026-03-20 monthly 0.8 https://fibratus.io/blog/how-fibratus-complements-sysmon 2026-03-17 monthly 0.8 https://fibratus.io/es/blog/how-fibratus-complements-sysmon 2026-03-17 monthly 0.8 https://fibratus.io/blog/how-fibratus-complements-elastic 2026-03-23 monthly 0.8 https://fibratus.io/es/blog/how-fibratus-complements-elastic 2026-03-23 monthly 0.8 https://fibratus.io/blog/how-fibratus-complements-splunk-enterprise-security 2026-03-23 monthly 0.8 https://fibratus.io/es/blog/how-fibratus-complements-splunk-enterprise-security 2026-03-23 monthly 0.8 https://fibratus.io/glossary monthly 0.8 https://fibratus.io/es/glossary monthly 0.8 https://fibratus.io/rules weekly 0.9 https://fibratus.io/es/rules weekly 0.9 https://fibratus.io/roadmap monthly 0.7 https://fibratus.io/es/roadmap monthly 0.7 https://fibratus.io/changelog weekly 0.6 https://fibratus.io/blog/uac-bypass-detection-comprehensive-guide 2026-04-09 monthly 0.9 https://fibratus.io/blog/lsass-credential-dumping-detection-windows 2026-04-09 monthly 0.9 https://fibratus.io/blog/office-macro-initial-access-detection-windows 2026-04-09 monthly 0.9 https://fibratus.io/blog/dll-sideloading-hijacking-detection-windows 2026-04-09 monthly 0.8 https://fibratus.io/blog/registry-persistence-detection-windows 2026-04-09 monthly 0.8 https://fibratus.io/blog/lolbin-abuse-detection-windows 2026-04-09 monthly 0.8 https://fibratus.io/blog/dotnet-clr-abuse-detection-windows 2026-04-09 monthly 0.8 https://fibratus.io/blog/detection-engineering-not-writing-rules 2026-03-12 monthly 0.8 https://fibratus.io/blog/telemetry-ceiling-hard-limit 2026-03-11 monthly 0.8 https://fibratus.io/blog/attack-to-primitives-mapping 2026-03-10 monthly 0.8 https://fibratus.io/blog/state-modeling-missing-layer 2026-03-04 monthly 0.8 https://fibratus.io/blog/valid-accounts-living-off-the-land-detection 2026-03-03 monthly 0.8 https://fibratus.io/blog/adversarial-mimicry-behavioral-model-evasion 2026-02-26 monthly 0.8 https://fibratus.io/blog/technique-first-detection-attack-invariants 2026-02-25 monthly 0.8 https://fibratus.io/blog/why-signature-detection-keeps-losing 2026-02-24 monthly 0.8 https://fibratus.io/blog/what-is-an-edr-crowdstrike-telemetry 2026-02-19 monthly 0.8 https://fibratus.io/blog/detecting-process-injection-kernel-level-windows 2026-02-18 monthly 0.8 https://fibratus.io/blog/userland-hooks-vs-kernel-telemetry 2026-02-17 monthly 0.8 https://fibratus.io/blog/memory-scanning-at-runtime 2026-02-12 monthly 0.8 https://fibratus.io/blog/detect-object-symbolic-link-abuse-windows 2026-02-11 monthly 0.8 https://fibratus.io/blog/ntlm-hash-leak-ms-photos-uri-behavioral-detection 2026-02-10 monthly 0.8 https://fibratus.io/blog/thread-pool-telemetry-sleeping-beacon-detection 2026-02-05 monthly 0.8 https://fibratus.io/blog/how-to-write-behavioral-detection-rules 2026-02-04 monthly 0.8 https://fibratus.io/blog/windows-kernel-event-monitoring-explained 2026-02-03 monthly 0.8 https://fibratus.io/blog/fibratus-rsigma-backend-sigma-rules 2026-07-05 monthly 0.8 https://fibratus.io/blog/kernel-call-stack-subsystem-context-detection-engineering 2026-08-14 monthly 0.8 https://fibratus.io/glossary/windows-kernel monthly 0.6 https://fibratus.io/es/glossary/windows-kernel monthly 0.6 https://fibratus.io/glossary/kernel-telemetry monthly 0.6 https://fibratus.io/es/glossary/kernel-telemetry monthly 0.6 https://fibratus.io/glossary/etw monthly 0.6 https://fibratus.io/es/glossary/etw monthly 0.6 https://fibratus.io/glossary/system-calls monthly 0.6 https://fibratus.io/es/glossary/system-calls monthly 0.6 https://fibratus.io/glossary/process-injection monthly 0.6 https://fibratus.io/es/glossary/process-injection monthly 0.6 https://fibratus.io/glossary/memory-allocation monthly 0.6 https://fibratus.io/es/glossary/memory-allocation monthly 0.6 https://fibratus.io/glossary/thread-creation monthly 0.6 https://fibratus.io/es/glossary/thread-creation monthly 0.6 https://fibratus.io/glossary/registry-operations monthly 0.6 https://fibratus.io/es/glossary/registry-operations monthly 0.6 https://fibratus.io/glossary/handle monthly 0.6 https://fibratus.io/es/glossary/handle monthly 0.6 https://fibratus.io/glossary/pe-portable-executable monthly 0.6 https://fibratus.io/es/glossary/pe-portable-executable monthly 0.6 https://fibratus.io/glossary/edr monthly 0.6 https://fibratus.io/es/glossary/edr monthly 0.6 https://fibratus.io/glossary/xdr monthly 0.6 https://fibratus.io/es/glossary/xdr monthly 0.6 https://fibratus.io/glossary/behavioral-detection monthly 0.6 https://fibratus.io/es/glossary/behavioral-detection monthly 0.6 https://fibratus.io/glossary/signature-detection monthly 0.6 https://fibratus.io/es/glossary/signature-detection monthly 0.6 https://fibratus.io/glossary/ioc monthly 0.6 https://fibratus.io/es/glossary/ioc monthly 0.6 https://fibratus.io/glossary/runtime-detection monthly 0.6 https://fibratus.io/es/glossary/runtime-detection monthly 0.6 https://fibratus.io/glossary/defense-evasion monthly 0.6 https://fibratus.io/es/glossary/defense-evasion monthly 0.6 https://fibratus.io/glossary/adversary-tradecraft monthly 0.6 https://fibratus.io/es/glossary/adversary-tradecraft monthly 0.6 https://fibratus.io/glossary/endpoint-security monthly 0.6 https://fibratus.io/es/glossary/endpoint-security monthly 0.6 https://fibratus.io/glossary/threat-hunting monthly 0.6 https://fibratus.io/es/glossary/threat-hunting monthly 0.6 https://fibratus.io/glossary/persistence monthly 0.6 https://fibratus.io/es/glossary/persistence monthly 0.6 https://fibratus.io/glossary/credential-access monthly 0.6 https://fibratus.io/es/glossary/credential-access monthly 0.6 https://fibratus.io/glossary/ntlm monthly 0.6 https://fibratus.io/es/glossary/ntlm monthly 0.6 https://fibratus.io/glossary/userland-hooks monthly 0.6 https://fibratus.io/es/glossary/userland-hooks monthly 0.6 https://fibratus.io/glossary/detection-rule monthly 0.6 https://fibratus.io/es/glossary/detection-rule monthly 0.6 https://fibratus.io/glossary/rule-engine monthly 0.6 https://fibratus.io/es/glossary/rule-engine monthly 0.6 https://fibratus.io/glossary/filter-expressions monthly 0.6 https://fibratus.io/es/glossary/filter-expressions monthly 0.6 https://fibratus.io/glossary/event-correlation monthly 0.6 https://fibratus.io/es/glossary/event-correlation monthly 0.6 https://fibratus.io/glossary/false-positives monthly 0.6 https://fibratus.io/es/glossary/false-positives monthly 0.6 https://fibratus.io/glossary/detection-coverage monthly 0.6 https://fibratus.io/es/glossary/detection-coverage monthly 0.6 https://fibratus.io/glossary/mitre-attack monthly 0.6 https://fibratus.io/es/glossary/mitre-attack monthly 0.6 https://fibratus.io/glossary/ttps monthly 0.6 https://fibratus.io/es/glossary/ttps monthly 0.6 https://fibratus.io/glossary/yara monthly 0.6 https://fibratus.io/es/glossary/yara monthly 0.6 https://fibratus.io/glossary/sigma monthly 0.6 https://fibratus.io/es/glossary/sigma monthly 0.6 https://fibratus.io/glossary/filaments monthly 0.6 https://fibratus.io/es/glossary/filaments monthly 0.6 https://fibratus.io/glossary/kernel-event-pipeline monthly 0.6 https://fibratus.io/es/glossary/kernel-event-pipeline monthly 0.6 https://fibratus.io/glossary/execution-context monthly 0.6 https://fibratus.io/es/glossary/execution-context monthly 0.6 https://fibratus.io/glossary/process-tree monthly 0.6 https://fibratus.io/es/glossary/process-tree monthly 0.6 https://fibratus.io/glossary/process-state monthly 0.6 https://fibratus.io/es/glossary/process-state monthly 0.6 https://fibratus.io/glossary/sequence-rules monthly 0.6 https://fibratus.io/es/glossary/sequence-rules monthly 0.6 https://fibratus.io/glossary/macros monthly 0.6 https://fibratus.io/es/glossary/macros monthly 0.6 https://fibratus.io/glossary/outputs monthly 0.6 https://fibratus.io/es/glossary/outputs monthly 0.6 https://fibratus.io/glossary/alert-sinks monthly 0.6 https://fibratus.io/es/glossary/alert-sinks monthly 0.6 https://fibratus.io/glossary/captures monthly 0.6 https://fibratus.io/es/glossary/captures monthly 0.6 https://fibratus.io/glossary/transformers monthly 0.6 https://fibratus.io/es/glossary/transformers monthly 0.6 https://fibratus.io/glossary/beaconing monthly 0.6 https://fibratus.io/es/glossary/beaconing monthly 0.6 https://fibratus.io/glossary/sleep-obfuscation monthly 0.6 https://fibratus.io/es/glossary/sleep-obfuscation monthly 0.6 https://fibratus.io/glossary/object-symbolic-link monthly 0.6 https://fibratus.io/es/glossary/object-symbolic-link monthly 0.6 https://fibratus.io/glossary/kernel-events monthly 0.6 https://fibratus.io/es/glossary/kernel-events monthly 0.6 https://fibratus.io/glossary/endpoint-telemetry monthly 0.6 https://fibratus.io/es/glossary/endpoint-telemetry monthly 0.6 https://fibratus.io/glossary/threat-intelligence monthly 0.6 https://fibratus.io/es/glossary/threat-intelligence monthly 0.6 https://fibratus.io/glossary/soc monthly 0.6 https://fibratus.io/es/glossary/soc monthly 0.6 https://fibratus.io/glossary/forensic-telemetry monthly 0.6 https://fibratus.io/es/glossary/forensic-telemetry monthly 0.6 https://fibratus.io/glossary/detection-engineering monthly 0.6 https://fibratus.io/es/glossary/detection-engineering monthly 0.6 https://fibratus.io/glossary/runtime-security monthly 0.6 https://fibratus.io/es/glossary/runtime-security monthly 0.6 https://fibratus.io/glossary/valid-accounts monthly 0.6 https://fibratus.io/es/glossary/valid-accounts monthly 0.6 https://fibratus.io/glossary/dwell-time monthly 0.6 https://fibratus.io/es/glossary/dwell-time monthly 0.6 https://fibratus.io/glossary/invariant monthly 0.6 https://fibratus.io/es/glossary/invariant monthly 0.6 https://fibratus.io/glossary/token-manipulation monthly 0.6 https://fibratus.io/es/glossary/token-manipulation monthly 0.6 https://fibratus.io/glossary/living-off-the-land monthly 0.6 https://fibratus.io/es/glossary/living-off-the-land monthly 0.6 https://fibratus.io/glossary/adversarial-machine-learning monthly 0.6 https://fibratus.io/es/glossary/adversarial-machine-learning monthly 0.6 https://fibratus.io/glossary/memory-scanning monthly 0.6 https://fibratus.io/es/glossary/memory-scanning monthly 0.6 https://fibratus.io/glossary/detection-pipeline monthly 0.6 https://fibratus.io/es/glossary/detection-pipeline monthly 0.6 https://fibratus.io/glossary/state-modeling monthly 0.6 https://fibratus.io/es/glossary/state-modeling monthly 0.6 https://fibratus.io/glossary/response-semantics monthly 0.6 https://fibratus.io/es/glossary/response-semantics monthly 0.6 https://fibratus.io/glossary/triage monthly 0.6 https://fibratus.io/es/glossary/triage monthly 0.6 https://fibratus.io/glossary/hypothesis-driven-hunting monthly 0.6 https://fibratus.io/es/glossary/hypothesis-driven-hunting monthly 0.6 https://fibratus.io/glossary/hunt-pack monthly 0.6 https://fibratus.io/es/glossary/hunt-pack monthly 0.6 https://fibratus.io/glossary/execution-truth monthly 0.6 https://fibratus.io/es/glossary/execution-truth monthly 0.6 https://fibratus.io/glossary/detection-as-code monthly 0.6 https://fibratus.io/es/glossary/detection-as-code monthly 0.6 https://fibratus.io/glossary/uac-bypass monthly 0.6 https://fibratus.io/es/glossary/uac-bypass monthly 0.6 https://fibratus.io/glossary/dll-sideloading monthly 0.6 https://fibratus.io/es/glossary/dll-sideloading monthly 0.6 https://fibratus.io/glossary/lolbin monthly 0.6 https://fibratus.io/es/glossary/lolbin monthly 0.6 https://fibratus.io/glossary/privilege-escalation monthly 0.6 https://fibratus.io/es/glossary/privilege-escalation monthly 0.6 https://fibratus.io/rules/File access to SAM database monthly 0.6 https://fibratus.io/es/rules/File access to SAM database monthly 0.6 https://fibratus.io/rules/Credential Manager access via known tools monthly 0.6 https://fibratus.io/es/rules/Credential Manager access via known tools monthly 0.6 https://fibratus.io/rules/LSASS access from unsigned executable monthly 0.6 https://fibratus.io/es/rules/LSASS access from unsigned executable monthly 0.6 https://fibratus.io/rules/LSASS handle leak via Seclogon monthly 0.6 https://fibratus.io/es/rules/LSASS handle leak via Seclogon monthly 0.6 https://fibratus.io/rules/LSASS memory dump preparation via SilentProcessExit monthly 0.6 https://fibratus.io/es/rules/LSASS memory dump preparation via SilentProcessExit monthly 0.6 https://fibratus.io/rules/LSASS memory dump via MiniDumpWriteDump monthly 0.6 https://fibratus.io/es/rules/LSASS memory dump via MiniDumpWriteDump monthly 0.6 https://fibratus.io/rules/LSASS memory dump via Windows Error Reporting monthly 0.6 https://fibratus.io/es/rules/LSASS memory dump via Windows Error Reporting monthly 0.6 https://fibratus.io/rules/LSASS process clone creation via reflection monthly 0.6 https://fibratus.io/es/rules/LSASS process clone creation via reflection monthly 0.6 https://fibratus.io/rules/Potential LSASS memory dump monthly 0.6 https://fibratus.io/es/rules/Potential LSASS memory dump monthly 0.6 https://fibratus.io/rules/Potential NTLM hash leak via MS Photos monthly 0.6 https://fibratus.io/es/rules/Potential NTLM hash leak via MS Photos monthly 0.6 https://fibratus.io/rules/Potential NTLM hash leak via shortcut file monthly 0.6 https://fibratus.io/es/rules/Potential NTLM hash leak via shortcut file monthly 0.6 https://fibratus.io/rules/Registry access to SAM database monthly 0.6 https://fibratus.io/es/rules/Registry access to SAM database monthly 0.6 https://fibratus.io/rules/Remote thread creation into LSASS monthly 0.6 https://fibratus.io/es/rules/Remote thread creation into LSASS monthly 0.6 https://fibratus.io/rules/Sensitive registry hive dump monthly 0.6 https://fibratus.io/es/rules/Sensitive registry hive dump monthly 0.6 https://fibratus.io/rules/Suspicious access to Active Directory domain database monthly 0.6 https://fibratus.io/es/rules/Suspicious access to Active Directory domain database monthly 0.6 https://fibratus.io/rules/Suspicious access to Unattended Panther files monthly 0.6 https://fibratus.io/es/rules/Suspicious access to Unattended Panther files monthly 0.6 https://fibratus.io/rules/Suspicious access to Windows DPAPI Master Keys monthly 0.6 https://fibratus.io/es/rules/Suspicious access to Windows DPAPI Master Keys monthly 0.6 https://fibratus.io/rules/Suspicious access to Windows Credential Manager files monthly 0.6 https://fibratus.io/es/rules/Suspicious access to Windows Credential Manager files monthly 0.6 https://fibratus.io/rules/Suspicious access to Windows Vault files monthly 0.6 https://fibratus.io/es/rules/Suspicious access to Windows Vault files monthly 0.6 https://fibratus.io/rules/Suspicious LSA secrets registry access monthly 0.6 https://fibratus.io/es/rules/Suspicious LSA secrets registry access monthly 0.6 https://fibratus.io/rules/Suspicious LSASS process access monthly 0.6 https://fibratus.io/es/rules/Suspicious LSASS process access monthly 0.6 https://fibratus.io/rules/Suspicious security package DLL loaded monthly 0.6 https://fibratus.io/es/rules/Suspicious security package DLL loaded monthly 0.6 https://fibratus.io/rules/Suspicious Vault client DLL load monthly 0.6 https://fibratus.io/es/rules/Suspicious Vault client DLL load monthly 0.6 https://fibratus.io/rules/Unusual access to SSH keys monthly 0.6 https://fibratus.io/es/rules/Unusual access to SSH keys monthly 0.6 https://fibratus.io/rules/Unusual access to Web Browser Credential stores monthly 0.6 https://fibratus.io/es/rules/Unusual access to Web Browser Credential stores monthly 0.6 https://fibratus.io/rules/Unusual access to Windows Credential history files monthly 0.6 https://fibratus.io/es/rules/Unusual access to Windows Credential history files monthly 0.6 https://fibratus.io/rules/Activation Context memory section hijacking monthly 0.6 https://fibratus.io/es/rules/Activation Context memory section hijacking monthly 0.6 https://fibratus.io/rules/Activity from unhooked NTDLL module monthly 0.6 https://fibratus.io/es/rules/Activity from unhooked NTDLL module monthly 0.6 https://fibratus.io/rules/AppDomain Manager injection via CLR search order hijacking monthly 0.6 https://fibratus.io/es/rules/AppDomain Manager injection via CLR search order hijacking monthly 0.6 https://fibratus.io/rules/BindFlt DLL loaded by an unusual process monthly 0.6 https://fibratus.io/es/rules/BindFlt DLL loaded by an unusual process monthly 0.6 https://fibratus.io/rules/CldApi DLL loaded by an unusual process monthly 0.6 https://fibratus.io/es/rules/CldApi DLL loaded by an unusual process monthly 0.6 https://fibratus.io/rules/Clear Eventlog monthly 0.6 https://fibratus.io/es/rules/Clear Eventlog monthly 0.6 https://fibratus.io/rules/Direct disk device access monthly 0.6 https://fibratus.io/es/rules/Direct disk device access monthly 0.6 https://fibratus.io/rules/DLL loaded via APC queue monthly 0.6 https://fibratus.io/es/rules/DLL loaded via APC queue monthly 0.6 https://fibratus.io/rules/DLL loaded via a callback function monthly 0.6 https://fibratus.io/es/rules/DLL loaded via a callback function monthly 0.6 https://fibratus.io/rules/DLL loaded via LdrpKernel32 overwrite monthly 0.6 https://fibratus.io/es/rules/DLL loaded via LdrpKernel32 overwrite monthly 0.6 https://fibratus.io/rules/DLL Side-Loading via a copied binary monthly 0.6 https://fibratus.io/es/rules/DLL Side-Loading via a copied binary monthly 0.6 https://fibratus.io/rules/DLL Side-Loading via Microsoft Office dropped file monthly 0.6 https://fibratus.io/es/rules/DLL Side-Loading via Microsoft Office dropped file monthly 0.6 https://fibratus.io/rules/.NET assembly loaded by unmanaged process monthly 0.6 https://fibratus.io/es/rules/.NET assembly loaded by unmanaged process monthly 0.6 https://fibratus.io/rules/Hidden registry key creation monthly 0.6 https://fibratus.io/es/rules/Hidden registry key creation monthly 0.6 https://fibratus.io/rules/Image load via NTFS transaction monthly 0.6 https://fibratus.io/es/rules/Image load via NTFS transaction monthly 0.6 https://fibratus.io/rules/Potential injection via .NET debugging monthly 0.6 https://fibratus.io/es/rules/Potential injection via .NET debugging monthly 0.6 https://fibratus.io/rules/Potential NTDLL unhooking via file mapping monthly 0.6 https://fibratus.io/es/rules/Potential NTDLL unhooking via file mapping monthly 0.6 https://fibratus.io/rules/Potential operation evasion via direct syscall monthly 0.6 https://fibratus.io/es/rules/Potential operation evasion via direct syscall monthly 0.6 https://fibratus.io/rules/Potential process creation via shellcode monthly 0.6 https://fibratus.io/es/rules/Potential process creation via shellcode monthly 0.6 https://fibratus.io/rules/Potential process injection via tainted memory section monthly 0.6 https://fibratus.io/es/rules/Potential process injection via tainted memory section monthly 0.6 https://fibratus.io/rules/Potential shellcode execution via ETW logger thread monthly 0.6 https://fibratus.io/es/rules/Potential shellcode execution via ETW logger thread monthly 0.6 https://fibratus.io/rules/Potential shellcode injection via Windows Debugging API monthly 0.6 https://fibratus.io/es/rules/Potential shellcode injection via Windows Debugging API monthly 0.6 https://fibratus.io/rules/Potential thread execution hijacking monthly 0.6 https://fibratus.io/es/rules/Potential thread execution hijacking monthly 0.6 https://fibratus.io/rules/Process creation from a stomped module monthly 0.6 https://fibratus.io/es/rules/Process creation from a stomped module monthly 0.6 https://fibratus.io/rules/Process creation via direct syscall monthly 0.6 https://fibratus.io/es/rules/Process creation via direct syscall monthly 0.6 https://fibratus.io/rules/Process creation via NTFS transaction monthly 0.6 https://fibratus.io/es/rules/Process creation via NTFS transaction monthly 0.6 https://fibratus.io/rules/Process execution from hollowed memory section monthly 0.6 https://fibratus.io/es/rules/Process execution from hollowed memory section monthly 0.6 https://fibratus.io/rules/Process execution from remote memory section monthly 0.6 https://fibratus.io/es/rules/Process execution from remote memory section monthly 0.6 https://fibratus.io/rules/Process execution from a self-deleting binary monthly 0.6 https://fibratus.io/es/rules/Process execution from a self-deleting binary monthly 0.6 https://fibratus.io/rules/Process spawned from unusual directory monthly 0.6 https://fibratus.io/es/rules/Process spawned from unusual directory monthly 0.6 https://fibratus.io/rules/Process spawned via remote thread monthly 0.6 https://fibratus.io/es/rules/Process spawned via remote thread monthly 0.6 https://fibratus.io/rules/Regsvr32 scriptlet execution monthly 0.6 https://fibratus.io/es/rules/Regsvr32 scriptlet execution monthly 0.6 https://fibratus.io/rules/Suspicious access to the hosts file monthly 0.6 https://fibratus.io/es/rules/Suspicious access to the hosts file monthly 0.6 https://fibratus.io/rules/Suspicious activity from a reflected process monthly 0.6 https://fibratus.io/es/rules/Suspicious activity from a reflected process monthly 0.6 https://fibratus.io/rules/Suspicious child spawned via reflected process monthly 0.6 https://fibratus.io/es/rules/Suspicious child spawned via reflected process monthly 0.6 https://fibratus.io/rules/Suspicious DLL loaded via memory section mapping monthly 0.6 https://fibratus.io/es/rules/Suspicious DLL loaded via memory section mapping monthly 0.6 https://fibratus.io/rules/Suspicious HTML Application script execution monthly 0.6 https://fibratus.io/es/rules/Suspicious HTML Application script execution monthly 0.6 https://fibratus.io/rules/Suspicious object symbolic link creation monthly 0.6 https://fibratus.io/es/rules/Suspicious object symbolic link creation monthly 0.6 https://fibratus.io/rules/Suspicious protected process execution monthly 0.6 https://fibratus.io/es/rules/Suspicious protected process execution monthly 0.6 https://fibratus.io/rules/Suspicious virtual path redirection via bind filter monthly 0.6 https://fibratus.io/es/rules/Suspicious virtual path redirection via bind filter monthly 0.6 https://fibratus.io/rules/Suspicious Windows Defender exclusions registry modification monthly 0.6 https://fibratus.io/es/rules/Suspicious Windows Defender exclusions registry modification monthly 0.6 https://fibratus.io/rules/Suspicious XSL script execution monthly 0.6 https://fibratus.io/es/rules/Suspicious XSL script execution monthly 0.6 https://fibratus.io/rules/System Binary Proxy Execution via Rundll32 monthly 0.6 https://fibratus.io/es/rules/System Binary Proxy Execution via Rundll32 monthly 0.6 https://fibratus.io/rules/Thread context manipulation from exception handler monthly 0.6 https://fibratus.io/es/rules/Thread context manipulation from exception handler monthly 0.6 https://fibratus.io/rules/Thread context set from unbacked memory monthly 0.6 https://fibratus.io/es/rules/Thread context set from unbacked memory monthly 0.6 https://fibratus.io/rules/Unsigned DLL injection via remote thread monthly 0.6 https://fibratus.io/es/rules/Unsigned DLL injection via remote thread monthly 0.6 https://fibratus.io/rules/Untrusted DLL loaded from unusual directory monthly 0.6 https://fibratus.io/es/rules/Untrusted DLL loaded from unusual directory monthly 0.6 https://fibratus.io/rules/Windows Defender driver unloading monthly 0.6 https://fibratus.io/es/rules/Windows Defender driver unloading monthly 0.6 https://fibratus.io/rules/Windows Defender protection tampering via registry monthly 0.6 https://fibratus.io/es/rules/Windows Defender protection tampering via registry monthly 0.6 https://fibratus.io/rules/Embedded executable file run via shortcut monthly 0.6 https://fibratus.io/es/rules/Embedded executable file run via shortcut monthly 0.6 https://fibratus.io/rules/Embedded script execution via shortcut file monthly 0.6 https://fibratus.io/es/rules/Embedded script execution via shortcut file monthly 0.6 https://fibratus.io/rules/Process execution from compressed file via Explorer monthly 0.6 https://fibratus.io/es/rules/Process execution from compressed file via Explorer monthly 0.6 https://fibratus.io/rules/Suspicious MSHTA execution via HTML smuggling monthly 0.6 https://fibratus.io/es/rules/Suspicious MSHTA execution via HTML smuggling monthly 0.6 https://fibratus.io/rules/Suspicious process execution from archive via shortcut file monthly 0.6 https://fibratus.io/es/rules/Suspicious process execution from archive via shortcut file monthly 0.6 https://fibratus.io/rules/Clickfix phishing via browser dialog box monthly 0.6 https://fibratus.io/es/rules/Clickfix phishing via browser dialog box monthly 0.6 https://fibratus.io/rules/Executable file creation from a macro-enabled Microsoft Office document monthly 0.6 https://fibratus.io/es/rules/Executable file creation from a macro-enabled Microsoft Office document monthly 0.6 https://fibratus.io/rules/Execution via Microsoft Office process monthly 0.6 https://fibratus.io/es/rules/Execution via Microsoft Office process monthly 0.6 https://fibratus.io/rules/Macro execution via script interpreter monthly 0.6 https://fibratus.io/es/rules/Macro execution via script interpreter monthly 0.6 https://fibratus.io/rules/Microsoft Office file execution via script interpreter monthly 0.6 https://fibratus.io/es/rules/Microsoft Office file execution via script interpreter monthly 0.6 https://fibratus.io/rules/Microsoft Office file execution via WMI monthly 0.6 https://fibratus.io/es/rules/Microsoft Office file execution via WMI monthly 0.6 https://fibratus.io/rules/Potential ClickFix infection chain monthly 0.6 https://fibratus.io/es/rules/Potential ClickFix infection chain monthly 0.6 https://fibratus.io/rules/Process spawned from macro-enabled Microsoft Office document monthly 0.6 https://fibratus.io/es/rules/Process spawned from macro-enabled Microsoft Office document monthly 0.6 https://fibratus.io/rules/Suspicious DLL loaded by Microsoft Office process monthly 0.6 https://fibratus.io/es/rules/Suspicious DLL loaded by Microsoft Office process monthly 0.6 https://fibratus.io/rules/Suspicious execution via WMI from a Microsoft Office process monthly 0.6 https://fibratus.io/es/rules/Suspicious execution via WMI from a Microsoft Office process monthly 0.6 https://fibratus.io/rules/Suspicious file delivery via HTML smuggling monthly 0.6 https://fibratus.io/es/rules/Suspicious file delivery via HTML smuggling monthly 0.6 https://fibratus.io/rules/Suspicious Microsoft Office embedded object monthly 0.6 https://fibratus.io/es/rules/Suspicious Microsoft Office embedded object monthly 0.6 https://fibratus.io/rules/DLL loading of a file transferred over SMB monthly 0.6 https://fibratus.io/es/rules/DLL loading of a file transferred over SMB monthly 0.6 https://fibratus.io/rules/Execution of a file transferred over SMB monthly 0.6 https://fibratus.io/es/rules/Execution of a file transferred over SMB monthly 0.6 https://fibratus.io/rules/Executable file dropped by an unsigned service DLL monthly 0.6 https://fibratus.io/es/rules/Executable file dropped by an unsigned service DLL monthly 0.6 https://fibratus.io/rules/Hidden local account creation monthly 0.6 https://fibratus.io/es/rules/Hidden local account creation monthly 0.6 https://fibratus.io/rules/Network connection via startup folder executable or script monthly 0.6 https://fibratus.io/es/rules/Network connection via startup folder executable or script monthly 0.6 https://fibratus.io/rules/Potential mandatory profile registry persistence monthly 0.6 https://fibratus.io/es/rules/Potential mandatory profile registry persistence monthly 0.6 https://fibratus.io/rules/Potential port monitor or print processor persistence via registry modification monthly 0.6 https://fibratus.io/es/rules/Potential port monitor or print processor persistence via registry modification monthly 0.6 https://fibratus.io/rules/RID Hijacking monthly 0.6 https://fibratus.io/es/rules/RID Hijacking monthly 0.6 https://fibratus.io/rules/Script interpreter host or untrusted process persistence monthly 0.6 https://fibratus.io/es/rules/Script interpreter host or untrusted process persistence monthly 0.6 https://fibratus.io/rules/Suspicious Microsoft Office add-in loaded monthly 0.6 https://fibratus.io/es/rules/Suspicious Microsoft Office add-in loaded monthly 0.6 https://fibratus.io/rules/Suspicious Microsoft Office template monthly 0.6 https://fibratus.io/es/rules/Suspicious Microsoft Office template monthly 0.6 https://fibratus.io/rules/Suspicious Netsh Helper DLL execution monthly 0.6 https://fibratus.io/es/rules/Suspicious Netsh Helper DLL execution monthly 0.6 https://fibratus.io/rules/Suspicious persistence via registry modification monthly 0.6 https://fibratus.io/es/rules/Suspicious persistence via registry modification monthly 0.6 https://fibratus.io/rules/Suspicious port monitor loaded monthly 0.6 https://fibratus.io/es/rules/Suspicious port monitor loaded monthly 0.6 https://fibratus.io/rules/Suspicious print processor loaded monthly 0.6 https://fibratus.io/es/rules/Suspicious print processor loaded monthly 0.6 https://fibratus.io/rules/Suspicious Startup shell folder modification monthly 0.6 https://fibratus.io/es/rules/Suspicious Startup shell folder modification monthly 0.6 https://fibratus.io/rules/Unusual file written in Startup folder monthly 0.6 https://fibratus.io/es/rules/Unusual file written in Startup folder monthly 0.6 https://fibratus.io/rules/Unusual process modified registry run key monthly 0.6 https://fibratus.io/es/rules/Unusual process modified registry run key monthly 0.6 https://fibratus.io/rules/Exploitation via Common Log File System monthly 0.6 https://fibratus.io/es/rules/Exploitation via Common Log File System monthly 0.6 https://fibratus.io/rules/Fake system root directory creation monthly 0.6 https://fibratus.io/es/rules/Fake system root directory creation monthly 0.6 https://fibratus.io/rules/Fake system root environment variable manipulation monthly 0.6 https://fibratus.io/es/rules/Fake system root environment variable manipulation monthly 0.6 https://fibratus.io/rules/Potential privilege elevation via arbitrary section creation monthly 0.6 https://fibratus.io/es/rules/Potential privilege elevation via arbitrary section creation monthly 0.6 https://fibratus.io/rules/Potential privilege escalation via DeadPotato exploit monthly 0.6 https://fibratus.io/es/rules/Potential privilege escalation via DeadPotato exploit monthly 0.6 https://fibratus.io/rules/Potential privilege escalation via elevated IFileOperation COM interface monthly 0.6 https://fibratus.io/es/rules/Potential privilege escalation via elevated IFileOperation COM interface monthly 0.6 https://fibratus.io/rules/Potential privilege escalation via phantom DLL hijacking monthly 0.6 https://fibratus.io/es/rules/Potential privilege escalation via phantom DLL hijacking monthly 0.6 https://fibratus.io/rules/Suspicious child process integrity level monthly 0.6 https://fibratus.io/es/rules/Suspicious child process integrity level monthly 0.6 https://fibratus.io/rules/Suspicious registry symbolic link creation monthly 0.6 https://fibratus.io/es/rules/Suspicious registry symbolic link creation monthly 0.6 https://fibratus.io/rules/UAC bypass via assembly Native Image Cache hijack monthly 0.6 https://fibratus.io/es/rules/UAC bypass via assembly Native Image Cache hijack monthly 0.6 https://fibratus.io/rules/UAC bypass via CDSSync scheduled task hijack monthly 0.6 https://fibratus.io/es/rules/UAC bypass via CDSSync scheduled task hijack monthly 0.6 https://fibratus.io/rules/UAC bypass via command handler hijacking monthly 0.6 https://fibratus.io/es/rules/UAC bypass via command handler hijacking monthly 0.6 https://fibratus.io/rules/UAC bypass via Control Panel applet execution hijack monthly 0.6 https://fibratus.io/es/rules/UAC bypass via Control Panel applet execution hijack monthly 0.6 https://fibratus.io/rules/UAC bypass via DiskCleanup scheduled task hijack monthly 0.6 https://fibratus.io/es/rules/UAC bypass via DiskCleanup scheduled task hijack monthly 0.6 https://fibratus.io/rules/UAC bypass via DLL hijack from Windows Media player directory monthly 0.6 https://fibratus.io/es/rules/UAC bypass via DLL hijack from Windows Media player directory monthly 0.6 https://fibratus.io/rules/UAC bypass via .NET Code Profiler DLL Hijack monthly 0.6 https://fibratus.io/es/rules/UAC bypass via .NET Code Profiler DLL Hijack monthly 0.6 https://fibratus.io/rules/UAC bypass via elevated Internet Explorer add-on installer COM interface monthly 0.6 https://fibratus.io/es/rules/UAC bypass via elevated Internet Explorer add-on installer COM interface monthly 0.6 https://fibratus.io/rules/UAC bypass via ICMLuaUtil COM interface monthly 0.6 https://fibratus.io/es/rules/UAC bypass via ICMLuaUtil COM interface monthly 0.6 https://fibratus.io/rules/UAC bypass via NTFS junction DLL hijacking monthly 0.6 https://fibratus.io/es/rules/UAC bypass via NTFS junction DLL hijacking monthly 0.6 https://fibratus.io/rules/UAC bypass via Program Compatibility Assistant scheduled task hijack monthly 0.6 https://fibratus.io/es/rules/UAC bypass via Program Compatibility Assistant scheduled task hijack monthly 0.6 https://fibratus.io/rules/UAC bypass via RequestTrace scheduled task hijack monthly 0.6 https://fibratus.io/es/rules/UAC bypass via RequestTrace scheduled task hijack monthly 0.6 https://fibratus.io/rules/UAC bypass via rouge MMC snap-in monthly 0.6 https://fibratus.io/es/rules/UAC bypass via rouge MMC snap-in monthly 0.6 https://fibratus.io/rules/UAC bypass via trusted Windows directory masquerading monthly 0.6 https://fibratus.io/es/rules/UAC bypass via trusted Windows directory masquerading monthly 0.6 https://fibratus.io/rules/Untrusted DLL loaded from masqueraded Windows directory monthly 0.6 https://fibratus.io/es/rules/Untrusted DLL loaded from masqueraded Windows directory monthly 0.6 https://fibratus.io/rules/tactic/credential-access monthly 0.7 https://fibratus.io/es/rules/tactic/credential-access monthly 0.7 https://fibratus.io/rules/tactic/defense-evasion monthly 0.7 https://fibratus.io/es/rules/tactic/defense-evasion monthly 0.7 https://fibratus.io/rules/tactic/execution monthly 0.7 https://fibratus.io/es/rules/tactic/execution monthly 0.7 https://fibratus.io/rules/tactic/initial-access monthly 0.7 https://fibratus.io/es/rules/tactic/initial-access monthly 0.7 https://fibratus.io/rules/tactic/lateral-movement monthly 0.7 https://fibratus.io/es/rules/tactic/lateral-movement monthly 0.7 https://fibratus.io/rules/tactic/persistence monthly 0.7 https://fibratus.io/es/rules/tactic/persistence monthly 0.7 https://fibratus.io/rules/tactic/privilege-escalation monthly 0.7 https://fibratus.io/es/rules/tactic/privilege-escalation monthly 0.7 https://fibratus.io/rules/technique/T1003 monthly 0.7 https://fibratus.io/es/rules/technique/T1003 monthly 0.7 https://fibratus.io/rules/technique/T1003.002 monthly 0.7 https://fibratus.io/es/rules/technique/T1003.002 monthly 0.7 https://fibratus.io/rules/technique/T1003.001 monthly 0.7 https://fibratus.io/es/rules/technique/T1003.001 monthly 0.7 https://fibratus.io/rules/technique/T1187 monthly 0.7 https://fibratus.io/es/rules/technique/T1187 monthly 0.7 https://fibratus.io/rules/technique/T1003.003 monthly 0.7 https://fibratus.io/es/rules/technique/T1003.003 monthly 0.7 https://fibratus.io/rules/technique/T1552 monthly 0.7 https://fibratus.io/es/rules/technique/T1552 monthly 0.7 https://fibratus.io/rules/technique/T1552.001 monthly 0.7 https://fibratus.io/es/rules/technique/T1552.001 monthly 0.7 https://fibratus.io/rules/technique/T1555 monthly 0.7 https://fibratus.io/es/rules/technique/T1555 monthly 0.7 https://fibratus.io/rules/technique/T1555.004 monthly 0.7 https://fibratus.io/es/rules/technique/T1555.004 monthly 0.7 https://fibratus.io/rules/technique/T1003.004 monthly 0.7 https://fibratus.io/es/rules/technique/T1003.004 monthly 0.7 https://fibratus.io/rules/technique/T1555.003 monthly 0.7 https://fibratus.io/es/rules/technique/T1555.003 monthly 0.7 https://fibratus.io/rules/technique/T1055 monthly 0.7 https://fibratus.io/es/rules/technique/T1055 monthly 0.7 https://fibratus.io/rules/technique/T1574 monthly 0.7 https://fibratus.io/es/rules/technique/T1574 monthly 0.7 https://fibratus.io/rules/technique/T1574.014 monthly 0.7 https://fibratus.io/es/rules/technique/T1574.014 monthly 0.7 https://fibratus.io/rules/technique/T1070 monthly 0.7 https://fibratus.io/es/rules/technique/T1070 monthly 0.7 https://fibratus.io/rules/technique/T1070.001 monthly 0.7 https://fibratus.io/es/rules/technique/T1070.001 monthly 0.7 https://fibratus.io/rules/technique/T1006 monthly 0.7 https://fibratus.io/es/rules/technique/T1006 monthly 0.7 https://fibratus.io/rules/technique/T1574.001 monthly 0.7 https://fibratus.io/es/rules/technique/T1574.001 monthly 0.7 https://fibratus.io/rules/technique/T1574.002 monthly 0.7 https://fibratus.io/es/rules/technique/T1574.002 monthly 0.7 https://fibratus.io/rules/technique/T1112 monthly 0.7 https://fibratus.io/es/rules/technique/T1112 monthly 0.7 https://fibratus.io/rules/technique/T1055.003 monthly 0.7 https://fibratus.io/es/rules/technique/T1055.003 monthly 0.7 https://fibratus.io/rules/technique/T1055.013 monthly 0.7 https://fibratus.io/es/rules/technique/T1055.013 monthly 0.7 https://fibratus.io/rules/technique/T1055.012 monthly 0.7 https://fibratus.io/es/rules/technique/T1055.012 monthly 0.7 https://fibratus.io/rules/technique/T1218 monthly 0.7 https://fibratus.io/es/rules/technique/T1218 monthly 0.7 https://fibratus.io/rules/technique/T1218.010 monthly 0.7 https://fibratus.io/es/rules/technique/T1218.010 monthly 0.7 https://fibratus.io/rules/technique/T1562.001 monthly 0.7 https://fibratus.io/es/rules/technique/T1562.001 monthly 0.7 https://fibratus.io/rules/technique/T1055.001 monthly 0.7 https://fibratus.io/es/rules/technique/T1055.001 monthly 0.7 https://fibratus.io/rules/technique/T1218.005 monthly 0.7 https://fibratus.io/es/rules/technique/T1218.005 monthly 0.7 https://fibratus.io/rules/technique/T1211 monthly 0.7 https://fibratus.io/es/rules/technique/T1211 monthly 0.7 https://fibratus.io/rules/technique/T1562 monthly 0.7 https://fibratus.io/es/rules/technique/T1562 monthly 0.7 https://fibratus.io/rules/technique/T1220 monthly 0.7 https://fibratus.io/es/rules/technique/T1220 monthly 0.7 https://fibratus.io/rules/technique/T1218.011 monthly 0.7 https://fibratus.io/es/rules/technique/T1218.011 monthly 0.7 https://fibratus.io/rules/technique/T1204 monthly 0.7 https://fibratus.io/es/rules/technique/T1204 monthly 0.7 https://fibratus.io/rules/technique/T1204.002 monthly 0.7 https://fibratus.io/es/rules/technique/T1204.002 monthly 0.7 https://fibratus.io/rules/technique/T1204.001 monthly 0.7 https://fibratus.io/es/rules/technique/T1204.001 monthly 0.7 https://fibratus.io/rules/technique/T1566 monthly 0.7 https://fibratus.io/es/rules/technique/T1566 monthly 0.7 https://fibratus.io/rules/technique/T1566.001 monthly 0.7 https://fibratus.io/es/rules/technique/T1566.001 monthly 0.7 https://fibratus.io/rules/technique/T1021 monthly 0.7 https://fibratus.io/es/rules/technique/T1021 monthly 0.7 https://fibratus.io/rules/technique/T1021.002 monthly 0.7 https://fibratus.io/es/rules/technique/T1021.002 monthly 0.7 https://fibratus.io/rules/technique/T1543 monthly 0.7 https://fibratus.io/es/rules/technique/T1543 monthly 0.7 https://fibratus.io/rules/technique/T1543.003 monthly 0.7 https://fibratus.io/es/rules/technique/T1543.003 monthly 0.7 https://fibratus.io/rules/technique/T1136 monthly 0.7 https://fibratus.io/es/rules/technique/T1136 monthly 0.7 https://fibratus.io/rules/technique/T1136.001 monthly 0.7 https://fibratus.io/es/rules/technique/T1136.001 monthly 0.7 https://fibratus.io/rules/technique/T1547 monthly 0.7 https://fibratus.io/es/rules/technique/T1547 monthly 0.7 https://fibratus.io/rules/technique/T1547.001 monthly 0.7 https://fibratus.io/es/rules/technique/T1547.001 monthly 0.7 https://fibratus.io/rules/technique/T1547.010 monthly 0.7 https://fibratus.io/es/rules/technique/T1547.010 monthly 0.7 https://fibratus.io/rules/technique/T1137 monthly 0.7 https://fibratus.io/es/rules/technique/T1137 monthly 0.7 https://fibratus.io/rules/technique/T1137.001 monthly 0.7 https://fibratus.io/es/rules/technique/T1137.001 monthly 0.7 https://fibratus.io/rules/technique/T1546 monthly 0.7 https://fibratus.io/es/rules/technique/T1546 monthly 0.7 https://fibratus.io/rules/technique/T1546.007 monthly 0.7 https://fibratus.io/es/rules/technique/T1546.007 monthly 0.7 https://fibratus.io/rules/technique/T1547.012 monthly 0.7 https://fibratus.io/es/rules/technique/T1547.012 monthly 0.7 https://fibratus.io/rules/technique/T1068 monthly 0.7 https://fibratus.io/es/rules/technique/T1068 monthly 0.7 https://fibratus.io/rules/technique/T1548 monthly 0.7 https://fibratus.io/es/rules/technique/T1548 monthly 0.7 https://fibratus.io/rules/technique/T1548.002 monthly 0.7 https://fibratus.io/es/rules/technique/T1548.002 monthly 0.7 https://fibratus.io/rules/technique/T1134 monthly 0.7 https://fibratus.io/es/rules/technique/T1134 monthly 0.7 https://fibratus.io/rules/technique/T1134.002 monthly 0.7 https://fibratus.io/es/rules/technique/T1134.002 monthly 0.7 https://fibratus.io/rules/platform/windows monthly 0.7 https://fibratus.io/es/rules/platform/windows monthly 0.7