attack.t1566.002 | Detection.FYI

Potential Malicious Usage of CloudTrail System Manager

Aug 12, 2024 · attack.privilege-escalation attack.t1566 attack.t1566.002 ·
Share on:

Detect when System Manager successfully executes commands against an instance.

Read More
Suspicious Execution via macOS Script Editor

Aug 12, 2024 · attack.t1566 attack.t1566.002 attack.initial-access attack.t1059 attack.t1059.002 attack.t1204 attack.t1204.001 attack.execution attack.persistence attack.t1553 attack.defense-evasion ·
Share on:

Detects when the macOS Script Editor utility spawns an unusual child process.

Read More