Security research

www.crowdstrike.com/blog/falcon-overwatch-report-finds-increase-in-ecrime

https://www.crowdstrike.com/blog/falcon-overwatch-report-finds-increase-in-ecrime/
Published on
www.crowdstrike.com

ATT&CK techniques those detections carry

  • T1007System Service Discovery
  • T1012Query Registry
  • T1057Process Discovery
  • T1082System Information Discovery
  • T1083File and Directory Discovery
  • T1543Create or Modify System Process
  • T1564Hide Artifacts
  • T1622Debugger Evasion
Open the original

2 published detections cite this

Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.

Detections citing this reference
DetectionSeverity
PUA - Process Hacker ExecutionMedium
HackTool - PCHunter ExecutionHigh

Detections can measure how the public catalogue is used — which detections people look for, and which pages bring them here. It sets a cookie that recognises this browser for 180 days. It is never linked to an account and never follows you to other sites. Privacy notice