win:bits
BITS client log
Channel: Microsoft-Windows-Bits-Client/Operational
- Host type
- Windows (workstation, member server, domain controller)
- Techniques
- 0
- Rules listed
- 7
- Events
- 2
Techniques
No ATT&CK analytic names this source.
Rules
Sigma 7
- BITS Transfer Job Download From Direct IP by Nasreddine Bencherchali (Nextron Systems)
- BITS Transfer Job Download From File Sharing Domains by Florian Roth (Nextron Systems)
- BITS Transfer Job Download To Potential Suspicious Folder by Florian Roth (Nextron Systems)
- BITS Transfer Job Downloading File Potential Suspicious Extension by frack113
- BITS Transfer Job With Uncommon Or Suspicious Remote TLD by Florian Roth (Nextron Systems)
- New BITS Job Created Via Bitsadmin by frack113
- New BITS Job Created Via PowerShell by frack113