Sunturai
Tool

gist.github.com/GlebSukhodolskiy/0fc5fa5f482903064b448890db1eaf9d

https://gist.github.com/GlebSukhodolskiy/0fc5fa5f482903064b448890db1eaf9d
Published on
gist.github.com

ATT&CK techniques those detections carry

  • T1547.001Registry Run Keys / Startup Folder
  • T1546.009AppCert DLLs
Open the original

13 published detections cite this

Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.

Detections citing this reference
DetectionSeverity
Office Autorun Keys ModificationMedium
Wow6432Node Windows NT CurrentVersion Autorun Keys ModificationMedium
Session Manager Autorun Keys ModificationMedium
CurrentVersion NT Autorun Keys ModificationMedium
CurrentVersion Autorun Keys ModificationMedium
CurrentControlSet Autorun Keys ModificationMedium
Wow6432Node Classes Autorun Keys ModificationMedium
Wow6432Node CurrentVersion Autorun Keys ModificationMedium
WinSock2 Autorun Keys ModificationMedium
System Scripts Autorun Keys ModificationMedium
Internet Explorer Autorun Keys ModificationMedium
Common Autorun Keys ModificationMedium
Classes Autorun Keys ModificationMedium

Showing 13 of 13

Filter in the catalogue

Detections can measure how the public catalogue is used — which detections people look for, and which pages bring them here. It sets a cookie that recognises this browser for 180 days. It is never linked to an account and never follows you to other sites. Privacy notice