attack.t1135

Net.exe Execution
Feb 21, 2023 · attack.discovery attack.t1007 attack.t1049 attack.t1018 attack.t1135 attack.t1201 attack.t1069.001 attack.t1069.002 attack.t1087.001 attack.t1087.002 attack.lateral_movement attack.t1021.002 attack.s0039 ·
Share on:
Detects execution of Net.exe, whether suspicious or benign.

Read More
HackTool - SharpView Execution
Feb 13, 2023 · attack.discovery attack.t1049 attack.t1069.002 attack.t1482 attack.t1135 attack.t1033 ·
Share on:
Adversaries may look for details about the network configuration and settings of systems they access or through information discovery of remote systems

Read More
PUA - Advanced IP Scanner Execution
Feb 13, 2023 · attack.discovery attack.t1046 attack.t1135 ·
Share on:
Detects the use of Advanced IP Scanner. Seems to be a popular tool for ransomware groups.

Read More
PUA - Advanced Port Scanner Execution
Feb 13, 2023 · attack.discovery attack.t1046 attack.t1135 ·
Share on:
Detects the use of Advanced Port Scanner.

Read More
Invoke-ShareFinder Discovery Activity
Jan 23, 2023 · attack.discovery attack.t1135 ·
Share on:
Use of Invoke-ShareFinder detected via PowerShell Script Block logging

Read More
Invoke-ShareFinder Discovery Activity
Jan 23, 2023 · attack.discovery attack.t1135 ·
Share on:
Use of Invoke-ShareFinder detected via PowerShell logging

Read More
Windows Builtin Invoke-ShareFinder Discovery
Jan 23, 2023 · attack.discovery attack.t1135 ·
Share on:
Indicates potential use of Invoke-ShareFinder via windows logging

Read More
Zeek Invoke-ShareFinder SMB Mapping
Jan 23, 2023 · attack.discovery attack.t1135 ·
Share on:
Indicates potential use of Invoke-ShareFinder via zeek smb logging

Read More