attack.t1134.002 | Detection.FYI

Meterpreter or Cobalt Strike Getsystem Service Installation - System
Apr 14, 2023 · attack.privilege_escalation attack.t1134.001 attack.t1134.002 ·
Share on:
Detects the use of getsystem Meterpreter/Cobalt Strike command by detecting a specific service installation

Read More
Potential Meterpreter/CobaltStrike Activity
Mar 5, 2023 · attack.privilege_escalation attack.t1134.001 attack.t1134.002 ·
Share on:
Detects the use of getsystem Meterpreter/Cobalt Strike command by detecting a specific service starting

Read More
Suspicious Child Process Created as System
Mar 5, 2023 · attack.privilege_escalation attack.t1134.002 ·
Share on:
Detection of child processes spawned with SYSTEM privileges by parents with LOCAL SERVICE or NETWORK SERVICE accounts

Read More
Meterpreter or Cobalt Strike Getsystem Service Installation - Security
Nov 30, 2022 · attack.privilege_escalation attack.t1134.001 attack.t1134.002 ·
Share on:
Detects the use of getsystem Meterpreter/Cobalt Strike command by detecting a specific service installation

Read More