2023_WebDAV_SearchMS | Detection.FYI

Suspicious WebDAV LNK Execution

Aug 5, 2023 · attack.execution attack.t1059.001 attack.t1204 ·
Share on:

Detects possible execution via LNK file accessed on a WebDAV server.

Read More
Search-ms and WebDAV Indicators in URL

Aug 5, 2023 · attack.initial_access attack.t1584 attack.t1566 ·
Share on:

Detects URL pattern used by search(-ms)/WebDAV initial access campaign.

Read More
WebDAV Temporary Local File Creation

Aug 5, 2023 · attack.initial_access attack.t1584 attack.t1566 ·
Share on:

Detects the creation of WebDAV temporary files with suspicious extensions

Read More