CVE-2022-26134 | Detection.FYI

Confluence Exploit Activity on Webserver Logs

Jul 13, 2022 · attack.t1190 ·
Share on:

Detection for Confluence server activity found on webserver logs

Read More

Recent Posts

Capabilities Discovery - Linux
Capture Credentials with Rpcping.exe
Certificate Exported Via Certutil.EXE
Changing Existing Service ImagePath Value Via Reg.EXE
Console CodePage Lookup Via CHCP
Copying Sensitive Files with Credential Data
Curl Download And Execute Combination
Diskshadow Script Mode - Execution From Potential Suspicious Location

Language

SIGMA 3914 ELASTIC 1484 MQL 699

Tags

RESOURCES-INVESTIGATION-GUIDE 1410 ATTACK.DEFENSE-EVASION 1309 USE-CASE-THREAT-DETECTION 1047 DOMAIN-ENDPOINT 911 ATTACK.EXECUTION 862 DATA-SOURCE-ELASTIC-DEFEND 745 ATTACK.PERSISTENCE 585 OS-WINDOWS 495 DATA-SOURCE-ELASTIC-ENDGAME 429 ATTACK.PRIVILEGE-ESCALATION 390 DETECTION.EMERGING-THREATS 390 TACTIC-DEFENSE-EVASION 376 OS-LINUX 374 DATA-SOURCE-SENTINELONE 365