attack.t1001.003 | Detection.FYI

Suspicious ADSI-Cache Usage By Unknown Tool
Jan 17, 2023 · attack.t1001.003 attack.command_and_control ·
Share on:
Detects the usage of ADSI (LDAP) operations by tools. This may also detect tools like LDAPFragger.

Read More
Suspicious LDAP-Attributes Used
Oct 25, 2022 · attack.t1001.003 attack.command_and_control ·
Share on:
Detects the usage of particular AttributeLDAPDisplayNames, which are known for data exchange via LDAP by the tool LDAPFragger and are additionally not commonly used in companies.

Read More