attack.s0139 | Detection.FYI

Suspicious File Download From File Sharing Websites
May 18, 2023 · attack.defense_evasion attack.s0139 attack.t1564.004 ·
Share on:
Detects the download of suspicious file type from a well-known file and paste sharing domain

Read More
Unusual File Download From File Sharing Websites
May 18, 2023 · attack.defense_evasion attack.s0139 attack.t1564.004 ·
Share on:
Detects the download of suspicious file type from a well-known file and paste sharing domain

Read More
Hidden Executable In NTFS Alternate Data Stream
May 15, 2023 · attack.defense_evasion attack.s0139 attack.t1564.004 ·
Share on:
Detects the creation of an ADS (Alternate Data Stream) that contains an executable by looking at a non-empty Imphash

Read More
Hacktool Download
May 5, 2023 · attack.defense_evasion attack.s0139 attack.t1564.004 ·
Share on:
Detects the creation of a file on disk that has an imphash of a well-known hack tool

Read More