attack.t1587 | Detection.FYI

HackTool - PurpleSharp Execution
Feb 5, 2023 · attack.t1587 attack.resource_development ·
Share on:
Detects the execution of the PurpleSharp adversary simulation tool

Read More
CVE-2021-1675 Print Spooler Exploitation Filename Pattern
Feb 1, 2023 · attack.execution attack.privilege_escalation attack.resource_development attack.t1587 cve.2021.1675 ·
Share on:
Detects the default filename used in PoC code against print spooler vulnerability CVE-2021-1675

Read More
Program Executions in Suspicious Folders
Feb 1, 2023 · attack.t1587 attack.t1584 attack.resource_development ·
Share on:
Detects program executions in suspicious non-program folders related to malware or hacking activity

Read More
Suspicious Word Cab File Write CVE-2021-40444
Feb 1, 2023 · attack.resource_development attack.t1587 ·
Share on:
Detects file creation patterns noticeable during the exploitation of CVE-2021-40444

Read More