Sunturai
Vendor advisory

www.cisa.gov/uscert/ncas/alerts/aa22-321a

https://www.cisa.gov/uscert/ncas/alerts/aa22-321a
Published on
www.cisa.gov
Sources in this catalogue
2

ATT&CK techniques those detections carry

  • T1105Ingress Tool Transfer
  • T1197BITS Jobs
  • T1564.004NTFS File Attributes
  • T1036.003Rename Legitimate Utilities
  • T1486Data Encrypted for Impact
Open the original

6 published detections cite this

Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.

Detections citing this reference
DetectionSeverity
Cisco NVM - Suspicious Download From File Sharing WebsiteInformational
Windows .Key File Creation in Root DirectoryInformational
Suspicious Download From File-Sharing Website Via BitsadminHigh
Network Communication Initiated To File Sharing Domains From Process Located In Suspicious FolderHigh
Unusual File Download From File Sharing Websites - File StreamMedium
Suspicious File Download From File Sharing Websites - File StreamHigh

Showing 6 of 6

Filter in the catalogue

Detections can measure how the public catalogue is used — which detections people look for, and which pages bring them here. It sets a cookie that recognises this browser for 180 days. It is never linked to an account and never follows you to other sites. Privacy notice