attack.g0010 | Detection.FYI

Turla Group Named Pipes

Aug 7, 2023 · attack.g0010 attack.execution attack.t1106 ·
Share on:

Detects a named pipe used by Turla group samples

Read More
Turla Group Commands May 2020

Jun 20, 2023 · attack.g0010 attack.execution attack.t1059.001 attack.t1053.005 attack.t1027 detection.emerging_threats ·
Share on:

Detects commands used by Turla group as reported by ESET in May 2020

Read More
Turla Group Lateral Movement

Jun 20, 2023 · attack.g0010 attack.execution attack.t1059 attack.lateral_movement attack.t1021.002 attack.discovery attack.t1083 attack.t1135 detection.emerging_threats ·
Share on:

Detects automated lateral movement by Turla group

Read More
Turla PNG Dropper Service

Apr 14, 2023 · attack.persistence attack.g0010 attack.t1543.003 ·
Share on:

This method detects malicious services mentioned in Turla PNG dropper report by NCC Group in November 2018

Read More
Turla Service Install

Apr 14, 2023 · attack.persistence attack.g0010 attack.t1543.003 ·
Share on:

This method detects a service install of malicious services mentioned in Carbon Paper - Turla report by ESET

Read More
Turla ComRAT

Feb 1, 2023 · attack.defense_evasion attack.command_and_control attack.t1071.001 attack.g0010 ·
Share on:

Detects Turla ComRAT patterns

Read More