SolarWinds-Supply-Chain | Detection.FYI

UNC2452 Process Creation Patterns

Sep 13, 2024 · attack.execution attack.t1059.001 detection.emerging-threats ·
Share on:

Detects a specific process creation patterns as seen used by UNC2452 and provided by Microsoft as Microsoft Defender ATP queries

Read More
Solarwinds SUPERNOVA Webshell Access

Aug 12, 2024 · attack.persistence attack.t1505.003 detection.emerging-threats ·
Share on:

Detects access to SUPERNOVA webshell as described in Guidepoint report

Read More
Suspicious VBScript UN2452 Pattern

Aug 12, 2024 · attack.persistence attack.t1547.001 detection.emerging-threats ·
Share on:

Detects suspicious inline VBScript keywords as used by UNC2452

Read More
UNC2452 PowerShell Pattern

Aug 12, 2024 · attack.execution attack.t1059.001 attack.t1047 detection.emerging-threats ·
Share on:

Detects a specific PowerShell command line pattern used by the UNC2452 actors as mentioned in Microsoft and Symantec reports

Read More