Subhankar H
@Andrewsec57RemoteTrusted contributorCompletionist
0 followers2,502 downloads174 copies3 likes1,967 views
222 detections
Filters
Last updated
All Time
Detection languages
221
1
Categories
93
47
32
22
21
Platforms
178
8
6
3
1
Products / Services
142
64
24
7
7
MITRE Techniques
75
54
44
43
24
No description available.
No description available.
No description available.
Detects a Python process command line or captured script content referencing pickle.loads() deserialization of a network-received buffer, consistent with the pyCodeV3 loader's insecure deserialization of C2-delivered data followed by exec() of attacker-supplied code.
No description available.
No description available.
No description available.
No description available.
Detects script-driven use of the Task Scheduler COM API (ITaskService/ITaskDefinition/ITaskSettings3) to create a scheduled task and explicitly set its Hidden property to True, as observed in the NetSupport RAT 'Stereo' campaign for redundant persistence of the audio.exe payload.
No description available.
Page 11 of 23