Vendor advisory

www.cisa.gov/news-events/cybersecurity-advisories/aa20-302a

https://www.cisa.gov/news-events/cybersecurity-advisories/aa20-302a
Published on
www.cisa.gov
Sources in this catalogue
2

ATT&CK techniques those detections carry

  • T1016System Network Configuration Discovery
  • T1590.005IP Addresses
Open the original

2 published detections cite this

Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.

Detections citing this reference
DetectionSeverity
Cisco NVM - Suspicious Network Connection to IP Lookup Service APIInformational
Suspicious Network Connection to IP Lookup Service APIsMedium

Detections can measure how the public catalogue is used — which detections people look for, and which pages bring them here. It sets a cookie that recognises this browser for 180 days. It is never linked to an account and never follows you to other sites. Privacy notice