1200KM / tag
attack.impact — sigma-tag tag
114 related reference pages for sigma-tag: attack.impact.
Meaning and evidence boundary
Navigation membership is based on explicit metadata in this pinned module, not a claim of detection effectiveness or live validation.
Related pages
- All Backups Deleted Via Wbadmin.EXE · sigma-rule
- Antivirus Ransomware Detection · sigma-rule
- Apache Segmentation Fault · sigma-rule
- Application Uninstalled · sigma-rule
- Audit CVE Event · sigma-rule
- AWS EC2 Disable EBS Encryption · sigma-rule
- AWS EFS Fileshare Mount Modified or Deleted · sigma-rule
- AWS EKS Cluster Created or Deleted · sigma-rule
- AWS ElastiCache Security Group Modified or Deleted · sigma-rule
- AWS KMS Imported Key Material Usage · sigma-rule
- AWS S3 Bucket Versioning Disable · sigma-rule
- AWS SAML Provider Deletion Activity · sigma-rule
- Azure Application Deleted · sigma-rule
- Azure Container Registry Created or Deleted · sigma-rule
- Azure Device or Configuration Modified or Deleted · sigma-rule
- Azure DNS Zone Modified or Deleted · sigma-rule
- Azure Firewall Modified or Deleted · sigma-rule
- Azure Firewall Rule Collection Modified or Deleted · sigma-rule
- Azure Key Vault Modified or Deleted · sigma-rule
- Azure Keyvault Key Modified or Deleted · sigma-rule
- Azure Keyvault Secrets Modified or Deleted · sigma-rule
- Azure Kubernetes Cluster Created or Deleted · sigma-rule
- Azure Kubernetes Network Policy Change · sigma-rule
- Azure Kubernetes RoleBinding/ClusterRoleBinding Modified and Deleted · sigma-rule
- Azure Kubernetes Secret or Config Object Access · sigma-rule
- Azure Kubernetes Sensitive Role Access · sigma-rule
- Azure Kubernetes Service Account Modified or Deleted · sigma-rule
- Azure Network Firewall Policy Modified or Deleted · sigma-rule
- Backup Files Deleted · sigma-rule
- Boot Configuration Tampering Via Bcdedit.EXE · sigma-rule
- Cisco Denial of Service · sigma-rule
- Cisco File Deletion · sigma-rule
- Cisco Modify Configuration · sigma-rule
- Commands to Clear or Remove the Syslog - Builtin · sigma-rule
- Copy From VolumeShadowCopy Via Cmd.EXE · sigma-rule
- DD File Overwrite · sigma-rule
- Delete All Scheduled Tasks · sigma-rule
- Delete Important Scheduled Task · sigma-rule
- Delete Volume Shadow Copies Via WMI With PowerShell · sigma-rule
- Deleted Data Overwritten Via Cipher.EXE · sigma-rule
- Deletion of Volume Shadow Copies via WMI with PowerShell · sigma-rule
- Deletion of Volume Shadow Copies via WMI with PowerShell - PS Script · sigma-rule
- Deployment Deleted From Kubernetes Cluster · sigma-rule
- Disable Important Scheduled Task · sigma-rule
- Disable Or Stop Services · sigma-rule
- DNS Events Related To Mining Pools · sigma-rule
- ESXi VM Kill Via ESXCLI · sigma-rule
- File Recovery From Backup Via Wbadmin.EXE · sigma-rule
- Fsutil Suspicious Invocation · sigma-rule
- Github Delete Action Invoked · sigma-rule
- Github Self Hosted Runner Changes Detected · sigma-rule
- Google Cloud Re-identifies Sensitive Information · sigma-rule
- Google Cloud Service Account Disabled or Deleted · sigma-rule
- Google Workspace Government Attack Warning · sigma-rule
- Group Has Been Deleted Via Groupdel · sigma-rule
- History File Deletion · sigma-rule
- Important Scheduled Task Deleted or Disabled · sigma-rule
- ISATAP Router Address Was Set · sigma-rule
- Linux Crypto Mining Indicators · sigma-rule
- Linux Crypto Mining Pool Connections · sigma-rule
- Load Of RstrtMgr.DLL By A Suspicious Process · sigma-rule
- Load Of RstrtMgr.DLL By An Uncommon Process · sigma-rule
- Mask System Power Settings Via Systemctl · sigma-rule
- Microsoft 365 - Potential Ransomware Activity · sigma-rule
- Microsoft 365 - Unusual Volume of File Deletion · sigma-rule
- Monero Crypto Coin Mining Pool Lookup · sigma-rule
- MSSQL Destructive Query · sigma-rule
- Network Communication With Crypto Mining Pool · sigma-rule
- New File Exclusion Added To Time Machine Via Tmutil - MacOS · sigma-rule
- New Root or CA or AuthRoot Certificate to Store · sigma-rule
- Nginx Core Dump · sigma-rule
- NTFS Vulnerability Exploitation · sigma-rule
- Okta User Account Locked Out · sigma-rule
- OpenCanary - NTP Monlist Request · sigma-rule
- Overwriting the File with Dev Zero or Null · sigma-rule
- Portable Gpg.EXE Execution · sigma-rule
- Potential Abuse of Linux Magic System Request Key · sigma-rule
- Potential Crypto Mining Activity · sigma-rule
- Potential File Overwrite Via Sysinternals SDelete · sigma-rule
- Potential Ransomware Activity Using LegalNotice Message · sigma-rule
- Potential Secure Deletion with SDelete · sigma-rule
- Potential Suspicious Change To Sensitive/Critical Files · sigma-rule
- Potentially Suspicious Desktop Background Change Using Reg.EXE · sigma-rule
- Potentially Suspicious Desktop Background Change Via Registry · sigma-rule
- Potentially Suspicious Volume Shadow Copy Vsstrace.dll Load · sigma-rule
- Powershell Add Name Resolution Policy Table Rule · sigma-rule
- Registry Disable System Restore · sigma-rule
- Remove Account From Domain Admin Group · sigma-rule
- Renamed Gpg.EXE Execution · sigma-rule
- Renamed Sysinternals Sdelete Execution · sigma-rule
- Replace Desktop Wallpaper by Powershell · sigma-rule
- Sensitive File Access Via Volume Shadow Copy Backup · sigma-rule
- Shadow Copies Deletion Using Operating Systems Utilities · sigma-rule
- Silence.EDA Detection · sigma-rule
- Stop Windows Service Via Net.EXE · sigma-rule
- Stop Windows Service Via PowerShell Stop-Service · sigma-rule
- Stop Windows Service Via Sc.EXE · sigma-rule
- Suspicious Appended Extension · sigma-rule
- Suspicious Execution of Shutdown · sigma-rule
- Suspicious Execution of Shutdown to Log Out · sigma-rule
- Suspicious Reg Add BitLocker · sigma-rule
- Suspicious Volume Shadow Copy VSS_PS.dll Load · sigma-rule
- Suspicious Volume Shadow Copy Vssapi.dll Load · sigma-rule
- Suspicious Windows Service Tampering · sigma-rule
- System Restore Registry Modification via CommandLine · sigma-rule
- System Shutdown/Reboot - Linux · sigma-rule
- System Shutdown/Reboot - MacOs · sigma-rule
- Time Machine Backup Deletion Attempt Via Tmutil - MacOS · sigma-rule
- Time Machine Backup Disabled Via Tmutil - MacOS · sigma-rule
- User Has Been Deleted Via Userdel · sigma-rule
- User Logoff Event · sigma-rule
- Windows Backup Deleted Via Wbadmin.EXE · sigma-rule
- Windows Recovery Environment Disabled Via Reagentc · sigma-rule
- Windows Update Error · sigma-rule
Connected ecosystem references
Pinned research references. No browser attack runner, live simulation result or validated detector is asserted. Source mappings and validation limits are preserved. ATT&CK / Atomic provenance · Detection provenance.