admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Grammar fix

Browse Source
This commit is contained in:
Michael Hart
2021-07-12 10:32:36 -04:00
parent a799f8f1fe
commit 5cb979cd93
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
lookups/prohibited_processes.csv
+1 -1
View File
@@ -18,4 +18,4 @@ OutlookAddressBookView.exe,ESCU - This process was identified as malicious by DH
mailpv.exe,ESCU - This process was identified by DHS Alert TA18-201A and attackers use this tool is a password-recovery tool that reveals the passwords and other account details from various email clients.
NLBrute.exe,ESCU - This process was identified in the SamSam Ransomware Campaign and attackers use this tool to brute force RDP instances with a range of commonly used passwords.
selfdel.exe,ESCU - This executable was delivered in the SamSam Ransomware Campain and the attackers levereged this binary to delete its malicilous activities.
SilverBullet.exe, ESCU - This executable was discovered in our monitoring of honey pots that abuses an open source software for scanning and connecting to hosts all over the entire Internet.
SilverBullet.exe, ESCU - Malware was discovered in our monitoring of honey pots that abuses this open source software for scanning and connecting to hosts.
1 app note
18 mailpv.exe ESCU - This process was identified by DHS Alert TA18-201A and attackers use this tool is a password-recovery tool that reveals the passwords and other account details from various email clients.
19 NLBrute.exe ESCU - This process was identified in the SamSam Ransomware Campaign and attackers use this tool to brute force RDP instances with a range of commonly used passwords.
20 selfdel.exe ESCU - This executable was delivered in the SamSam Ransomware Campain and the attackers levereged this binary to delete its malicilous activities.
21 SilverBullet.exe ESCU - This executable was discovered in our monitoring of honey pots that abuses an open source software for scanning and connecting to hosts all over the entire Internet. ESCU - Malware was discovered in our monitoring of honey pots that abuses this open source software for scanning and connecting to hosts.