Diamond-Sleet | Detection.FYI

Diamond Sleet APT DLL Sideloading Indicators

Oct 28, 2023 · attack.defense_evasion attack.t1574.002 detection.emerging_threats ·
Share on:

Detects DLL sideloading activity seen used by Diamond Sleet APT

Read More
Diamond Sleet APT DNS Communication Indicators

Oct 28, 2023 · attack.command_and_control detection.emerging_threats ·
Share on:

Detects DNS queries related to Diamond Sleet APT activity

Read More
Diamond Sleet APT File Creation Indicators

Oct 28, 2023 · attack.execution detection.emerging_threats ·
Share on:

Detects file creation activity that is related to Diamond Sleet APT activity

Read More
Diamond Sleet APT Process Activity Indicators

Oct 28, 2023 · attack.execution detection.emerging_threats ·
Share on:

Detects process creation activity indicators related to Diamond Sleet APT

Read More
Diamond Sleet APT Scheduled Task Creation

Oct 28, 2023 · attack.execution attack.privilege_escalation attack.persistence attack.t1053.005 detection.emerging_threats ·
Share on:

Detects registry event related to the creation of a scheduled task used by Diamond Sleet APT during exploitation of Team City CVE-2023-42793 vulnerability

Read More
Diamond Sleet APT Scheduled Task Creation - Registry

Oct 28, 2023 · attack.defense_evasion attack.t1562 detection.emerging_threats ·
Share on:

Detects registry event related to the creation of a scheduled task used by Diamond Sleet APT during exploitation of Team City CVE-2023-42793 vulnerability

Read More