APT28 Covenant Grunt Stager Detection
Detects Covenant Grunt Stager modules used by APT28 in the Phantom Net Voxel campaign based on known file hashes. This rule specifically looks for the MD5 hashes of these stager modules in file event logs.
Sigma
Detects Covenant Grunt Stager modules used by APT28 in the Phantom Net Voxel campaign based on known file hashes. This rule specifically looks for the MD5 hashes of these stager modules in file event logs.
Already have an account?