open-menu
closeme
Silence.EDA Detection
calendar
Apr 11, 2023
·
attack.execution
attack.t1059.001
attack.command_and_control
attack.t1071.004
attack.t1572
attack.impact
attack.t1529
attack.g0091
attack.s0363
·
Share on:
twitter
facebook
linkedin
copy
OilRig APT Registry Persistence
calendar
Mar 9, 2023
·
attack.persistence
attack.g0049
attack.t1053.005
attack.s0111
attack.t1543.003
attack.defense_evasion
attack.t1112
attack.command_and_control
attack.t1071.004
·
Share on:
twitter
facebook
linkedin
copy
DNS Exfiltration and Tunneling Tools Execution
calendar
Feb 21, 2023
·
attack.exfiltration
attack.t1048.001
attack.command_and_control
attack.t1071.004
attack.t1132.001
·
Share on:
twitter
facebook
linkedin
copy
Cobalt Strike DNS Beaconing
calendar
Feb 1, 2023
·
attack.command_and_control
attack.t1071.004
·
Share on:
twitter
facebook
linkedin
copy
Suspicious Cobalt Strike DNS Beaconing - DNS Client
calendar
Feb 1, 2023
·
attack.command_and_control
attack.t1071.004
·
Share on:
twitter
facebook
linkedin
copy
Suspicious Cobalt Strike DNS Beaconing - Sysmon
calendar
Feb 1, 2023
·
attack.command_and_control
attack.t1071.004
·
Share on:
twitter
facebook
linkedin
copy
Suspicious DNS Query with B64 Encoded String
calendar
Feb 1, 2023
·
attack.exfiltration
attack.t1048.003
attack.command_and_control
attack.t1071.004
·
Share on:
twitter
facebook
linkedin
copy
DNS TXT Answer with Possible Execution Strings
calendar
Oct 25, 2022
·
attack.command_and_control
attack.t1071.004
·
Share on:
twitter
facebook
linkedin
copy
to-top