attack.s0111 | Detection.FYI

OilRig APT Registry Persistence
Mar 9, 2023 · attack.persistence attack.g0049 attack.t1053.005 attack.s0111 attack.t1543.003 attack.defense_evasion attack.t1112 attack.command_and_control attack.t1071.004 ·
Share on:
Detects OilRig registry persistence as reported by Nyotron in their March 2018 report

Read More
HackTool - Default PowerSploit/Empire Scheduled Task Creation
Mar 7, 2023 · attack.execution attack.persistence attack.privilege_escalation attack.s0111 attack.g0022 attack.g0060 car.2013-08-001 attack.t1053.005 attack.t1059.001 ·
Share on:
Detects the creation of a schtask via PowerSploit or Empire Default Configuration.

Read More
Scheduled Task Creation
Feb 21, 2023 · attack.execution attack.persistence attack.privilege_escalation attack.t1053.005 attack.s0111 car.2013-08-001 ·
Share on:
Detects the creation of scheduled tasks in user session

Read More