Conti | Detection.FYI

Conti NTDS Exfiltration Command

Aug 12, 2024 · attack.collection attack.t1560 detection.emerging-threats ·
Share on:

Detects a command used by conti to exfiltrate NTDS

Read More
Conti Volume Shadow Listing

Aug 12, 2024 · attack.t1587.001 attack.resource-development detection.emerging-threats ·
Share on:

Detects a command used by conti to find volume shadow backups

Read More
Potential Conti Ransomware Activity

Aug 12, 2024 · attack.impact attack.s0575 attack.t1486 detection.emerging-threats ·
Share on:

Detects a specific command used by the Conti ransomware group

Read More
Potential Conti Ransomware Database Dumping Activity Via SQLCmd

Aug 12, 2024 · attack.collection attack.t1005 detection.emerging-threats ·
Share on:

Detects a command used by conti to dump database

Read More