smbserver | Detection.FYI

connectivity

Oct 23, 2025 ·
Share on:

Read More

Recent Posts

Kerberoasting Activity - Initial Query
Mint Sandstorm - AsperaFaspex Suspicious Process Execution
Mint Sandstorm - ManageEngine Suspicious Process Execution
Potential Data Exfiltration Activity Via CommandLine Tools
Potential Devil Bait Malware Reconnaissance
Potential Dtrack RAT Activity
Potential Snatch Ransomware Activity
Suspicious Network Command

Language

SIGMA 3975 ELASTIC 1502 MQL 747

Tags

ATTACK.DEFENSE-EVASION 1483 RESOURCES-INVESTIGATION-GUIDE 1428 USE-CASE-THREAT-DETECTION 1064 DOMAIN-ENDPOINT 920 ATTACK.EXECUTION 915 ATTACK.PERSISTENCE 836 DATA-SOURCE-ELASTIC-DEFEND 753 ATTACK.PRIVILEGE-ESCALATION 712 OS-WINDOWS 497 DATA-SOURCE-ELASTIC-ENDGAME 431 DETECTION.EMERGING-THREATS 407 TACTIC-DEFENSE-EVASION 383 OS-LINUX 382 DATA-SOURCE-SENTINELONE 370