T1595.002 Vulnerability Scanning
Subtécnica de T1595 Active Scanning
Adversaries may scan victims for vulnerabilities that can be used during targeting. Vulnerability scans typically check if the configuration of a target host/application (ex: software and version) potentially aligns with the target of a specific exploit the adversary may seek to use. These scans may also include more broad attempts to [Gather Victim Host…
Quién la usa · con noticias en Jábega
Reglas Sigma para cazarla
- DNS Query to External Service Interaction Domainshightest · dns
Reglas de SigmaHQ · Detection Rule License 1.1. Técnica de MITRE ATT&CK®.