attack.t1608 | Detection.FYI

Suspicious Download from Office Domain

Jun 4, 2025 · attack.command-and-control attack.resource-development attack.t1105 attack.t1608 ·
Share on:

Detects suspicious ways to download files from Microsoft domains that are used to store attachments in Emails or OneNote documents

Read More
HybridConnectionManager Service Installation - Registry

Aug 12, 2024 · attack.resource-development attack.t1608 ·
Share on:

Detects the installation of the Azure Hybrid Connection Manager service to allow remote code execution from Azure function.

Read More