T1595.002 Vulnerability Scanning
Sub-technique of T1595 Active Scanning
Adversaries may scan victims for vulnerabilities that can be used during targeting. Vulnerability scans typically check if the configuration of a target host/application (ex: software and version) potentially aligns with the target of a specific exploit the adversary may seek to use. These scans may also include more broad attempts to [Gather Victim Host…
Who uses it · with stories on Jábega
Sigma rules to hunt it
- DNS Query to External Service Interaction Domainshightest · dns
Rules from SigmaHQ · Detection Rule License 1.1. Technique from MITRE ATT&CK®.