attack.t1048 | Detection.FYI

Tap Driver Installation
Apr 14, 2023 · attack.exfiltration attack.t1048 ·
Share on:
Well-known TAP software installation. Possible preparation for data exfiltration using tunnelling techniques

Read More
Tap Installer Execution
Mar 5, 2023 · attack.exfiltration attack.t1048 ·
Share on:
Well-known TAP software installation. Possible preparation for data exfiltration using tunneling techniques

Read More
Copy from Admin Share
Feb 4, 2023 · attack.lateral_movement attack.collection attack.exfiltration attack.t1039 attack.t1048 attack.t1021.002 ·
Share on:
Detects a suspicious copy command to or from an Admin share or remote

Read More
Powershell DNSExfiltration
Jan 27, 2023 · attack.exfiltration attack.t1048 ·
Share on:
DNSExfiltrator allows for transferring (exfiltrate) a file over a DNS request covert channel

Read More
DNS TOR Proxies
Jan 12, 2023 · attack.exfiltration attack.t1048 ·
Share on:
Identifies IPs performing DNS lookups associated with common Tor proxies.

Read More
Dnscat Execution
Jan 4, 2023 · attack.exfiltration attack.t1048 attack.execution attack.t1059.001 ·
Share on:
Dnscat exfiltration tool execution

Read More
Tap Driver Installation - Security
Nov 30, 2022 · attack.exfiltration attack.t1048 ·
Share on:
Well-known TAP software installation. Possible preparation for data exfiltration using tunnelling techniques

Read More