Dragonfly | Detection.FYI

Ps.exe Renamed SysInternals Tool

Aug 12, 2024 · attack.defense-evasion attack.g0035 attack.t1036.003 car.2013-05-009 detection.emerging-threats ·
Share on:

Detects renamed SysInternals tool execution with a binary named ps.exe as used by Dragonfly APT group and documented in TA17-293A report

Read More