attack.g0010 | Detection.FYI

ComRAT Network Communication

Aug 12, 2024 · attack.defense-evasion attack.command-and-control attack.t1071.001 attack.g0010 ·
Share on:

Detects Turla ComRAT network communication.

Read More
Turla Group Commands May 2020

Aug 12, 2024 · attack.g0010 attack.execution attack.t1059.001 attack.t1053.005 attack.t1027 detection.emerging-threats ·
Share on:

Detects commands used by Turla group as reported by ESET in May 2020

Read More
Turla Group Lateral Movement

Aug 12, 2024 · attack.g0010 attack.execution attack.t1059 attack.lateral-movement attack.t1021.002 attack.discovery attack.t1083 attack.t1135 detection.emerging-threats ·
Share on:

Detects automated lateral movement by Turla group

Read More
Turla Group Named Pipes

Aug 12, 2024 · attack.g0010 attack.execution attack.t1106 detection.emerging-threats ·
Share on:

Detects a named pipe used by Turla group samples

Read More
Turla PNG Dropper Service

Aug 12, 2024 · attack.persistence attack.g0010 attack.t1543.003 detection.emerging-threats ·
Share on:

This method detects malicious services mentioned in Turla PNG dropper report by NCC Group in November 2018

Read More
Turla Service Install

Aug 12, 2024 · attack.persistence attack.g0010 attack.t1543.003 detection.emerging-threats ·
Share on:

This method detects a service install of malicious services mentioned in Carbon Paper - Turla report by ESET

Read More