opencanary

OpenCanary - FTP Login Attempt

Aug 12, 2024 · attack.initial-access attack.exfiltration attack.t1190 attack.t1021 ·

Share on:

Detects instances where an FTP service on an OpenCanary node has had a login attempt.

OpenCanary - GIT Clone Request

Aug 12, 2024 · attack.collection attack.t1213 ·

Share on:

Detects instances where a GIT service on an OpenCanary node has had Git Clone request.

OpenCanary - HTTP GET Request

Aug 12, 2024 · attack.initial-access attack.t1190 ·

Share on:

Detects instances where an HTTP service on an OpenCanary node has received a GET request.

OpenCanary - HTTP POST Login Attempt

Aug 12, 2024 · attack.initial-access attack.t1190 ·

Share on:

Detects instances where an HTTP service on an OpenCanary node has had login attempt via Form POST.

OpenCanary - HTTPPROXY Login Attempt

Aug 12, 2024 · attack.initial-access attack.defense-evasion attack.t1090 ·

Share on:

Detects instances where an HTTPPROXY service on an OpenCanary node has had an attempt to proxy another page.

OpenCanary - MSSQL Login Attempt Via SQLAuth

Aug 12, 2024 · attack.credential-access attack.collection attack.t1003 attack.t1213 ·

Share on:

Detects instances where an MSSQL service on an OpenCanary node has had a login attempt using SQLAuth.

OpenCanary - MSSQL Login Attempt Via Windows Authentication

Aug 12, 2024 · attack.credential-access attack.collection attack.t1003 attack.t1213 ·

Share on:

Detects instances where an MSSQL service on an OpenCanary node has had a login attempt using Windows Authentication.

OpenCanary - MySQL Login Attempt

Aug 12, 2024 · attack.credential-access attack.collection attack.t1003 attack.t1213 ·

Share on:

Detects instances where a MySQL service on an OpenCanary node has had a login attempt.

OpenCanary - NTP Monlist Request

Aug 12, 2024 · attack.impact attack.t1498 ·

Share on:

Detects instances where an NTP service on an OpenCanary node has had a NTP monlist request.

OpenCanary - REDIS Action Command Attempt

Aug 12, 2024 · attack.credential-access attack.collection attack.t1003 attack.t1213 ·

Share on:

Detects instances where a REDIS service on an OpenCanary node has had an action command attempted.

OpenCanary - SIP Request

Aug 12, 2024 · attack.collection attack.t1123 ·

Share on:

Detects instances where an SIP service on an OpenCanary node has had a SIP request.

OpenCanary - SMB File Open Request

Aug 12, 2024 · attack.lateral-movement attack.collection attack.t1021 attack.t1005 ·

Share on:

Detects instances where an SMB service on an OpenCanary node has had a file open request.

OpenCanary - SNMP OID Request

Aug 12, 2024 · attack.discovery attack.lateral-movement attack.t1016 attack.t1021 ·

Share on:

Detects instances where an SNMP service on an OpenCanary node has had an OID request.

OpenCanary - SSH Login Attempt

Aug 12, 2024 · attack.initial-access attack.lateral-movement attack.persistence attack.t1133 attack.t1021 attack.t1078 ·

Share on:

Detects instances where an SSH service on an OpenCanary node has had a login attempt.

OpenCanary - SSH New Connection Attempt

Aug 12, 2024 · attack.initial-access attack.lateral-movement attack.persistence attack.t1133 attack.t1021 attack.t1078 ·

Share on:

Detects instances where an SSH service on an OpenCanary node has had a connection attempt.

OpenCanary - Telnet Login Attempt

Aug 12, 2024 · attack.initial-access attack.command-and-control attack.t1133 attack.t1078 ·

Share on:

Detects instances where a Telnet service on an OpenCanary node has had a login attempt.

OpenCanary - TFTP Request

Aug 12, 2024 · attack.exfiltration attack.t1041 ·

Share on:

Detects instances where a TFTP service on an OpenCanary node has had a request.

OpenCanary - VNC Connection Attempt

Aug 12, 2024 · attack.lateral-movement attack.t1021 ·

Share on:

Detects instances where a VNC service on an OpenCanary node has had a connection attempt.