attack.t1595 | Detection.FYI

PUA - PingCastle Execution

Aug 12, 2024 · attack.reconnaissance attack.t1595 ·
Share on:

Detects the execution of PingCastle, a tool designed to quickly assess the Active Directory security level.

Read More
PUA - PingCastle Execution From Potentially Suspicious Parent

Aug 12, 2024 · attack.reconnaissance attack.t1595 ·
Share on:

Detects the execution of PingCastle, a tool designed to quickly assess the Active Directory security level via a script located in a potentially suspicious or uncommon location.

Read More