avatar

Kanan Hatamov

@hatamovkanan
Completionist
0 followers0 downloads1 copy0 likes17 views

1 detection

Detects the abuse of Windows Background Intelligent Transfer Service (BITS) using either bitsadmin.exe or PowerShell's Start-BitsTransfer cmdlet to download files to suspicious directories such as AppData, Temp, or ProgramData, excluding common trusted domains.
avatar
Kanan Hatamov@hatamovkanan
avatar
Detections.ai Community
7 hours ago
1017