attack.t1505.001 | Detection.FYI

Suspicious SQL Query

Nov 2, 2023 · attack.exfiltration attack.initial_access attack.privilege_escalation attack.t1190 attack.t1505.001 ·
Share on:

Detects suspicious SQL query keywrods that are often used during recon, exfiltration or destructive activities. Such as dropping tables and selecting wildcard fields

Read More
Potential CVE-2023-27363 Exploitation - HTA File Creation By FoxitPDFReader

Oct 26, 2023 · attack.persistence attack.t1505.001 cve.2023.27363 detection.emerging_threats ·
Share on:

Detects suspicious ".hta" file creation in the startup folder by Foxit Reader. This can be an indication of CVE-2023-27363 exploitation.

Read More