attack.t1090.001 | Detection.FYI

HackTool - SharpChisel Execution
Feb 13, 2023 · attack.command_and_control attack.t1090.001 ·
Share on:
Detects usage of the Sharp Chisel via the commandline arguments

Read More
PUA - Chisel Tunneling Tool Execution
Feb 13, 2023 · attack.command_and_control attack.t1090.001 ·
Share on:
Detects usage of the Chisel tunneling tool via the commandline arguments

Read More
RDP over Reverse SSH Tunnel WFP
Oct 14, 2022 · attack.defense_evasion attack.command_and_control attack.lateral_movement attack.t1090.001 attack.t1090.002 attack.t1021.001 car.2013-07-002 ·
Share on:
Detects svchost hosting RDP termsvcs communicating with the loopback address

Read More