Skip to content

v3.17.0
Compare
Choose a tag to compare
@josehelps josehelps released this 12 Mar 17:32
v3.17.0
34c8adb
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

New Analytic Stories

  • Windows Discovery Techniques

New Detections

  • Detect Exchange Webshell

Updated Analytic Stories

  • Sunburst Malware ( now called NOBELIUM Group)

Updated Detections

  • Ryuk Wake On Lan Command
  • Any Powershell DownloadFile
  • Cobalt Strike Named Pipes
  • Suspicious Curl Network Connection
  • Detect Mimikatz Using Loaded Images
  • W3wp Spawning Shell
Assets 3
Loading