Sign in Get started

Vendor advisory

cert.gov.ua/article/39518

https://cert.gov.ua/article/39518

Published on: cert.gov.ua

ATT&CK techniques those detections carry

T1485Data Destruction
T1489Service Stop
T1053.003Cron
T1053Scheduled Task/Job
T1070.004File Deletion

Open the original

10 published detections cite this

Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.

Detections citing this reference
Detection	Severity	Source	Published	Licence
Linux Auditd Stop Services	Medium	Splunk security content	Oct 13, 2026	Apache License 2.0
Linux Crontab Enumeration	Medium	Splunk security content	Sep 5, 2026	Apache License 2.0
Linux Adding Crontab Using List Parameter	Medium	—	Sep 5, 2026	Apache License 2.0
Windows Hidden Schedule Task Settings	Medium	Splunk security content	Aug 26, 2026	Apache License 2.0
Linux Stop Services	Medium	Splunk security content	Aug 26, 2026	Apache License 2.0
Linux Shred Overwrite Command	Medium	Splunk security content	Aug 26, 2026	Apache License 2.0
Linux High Frequency Of File Deletion In Boot Folder	Medium	Splunk security content	Aug 26, 2026	Apache License 2.0
Linux Disable Services	Medium	Splunk security content	Aug 26, 2026	Apache License 2.0
Linux Deleting Critical Directory Using RM Command	Medium	Splunk security content	Aug 26, 2026	Apache License 2.0
Linux Auditd Shred Overwrite Command	Medium	Splunk security content	Aug 26, 2026	Apache License 2.0

Showing 10 of 10

Filter in the catalogue

Detections can measure how the public catalogue is used — which detections people look for, and which pages bring them here. It sets a cookie that recognises this browser for 180 days. It is never linked to an account and never follows you to other sites. Privacy notice