P4T12ICK 68543a8dc1 merged with develop

2022-03-03 13:11:56 +01:00

..

active_directory_discovery.md

docgen ready

2022-02-23 14:46:39 +01:00

active_directory_lateral_movement.md

docgen ready

2022-02-23 14:46:39 +01:00

active_directory_password_spraying.md

docgen ready

2022-02-23 14:46:39 +01:00

apache_struts_vulnerability.md

docgen ready

2022-02-23 14:46:39 +01:00

asset_tracking.md

docgen ready

2022-02-23 14:46:39 +01:00

aws_cross_account_activity.md

docgen ready

2022-02-23 14:46:39 +01:00

aws_cryptomining.md

docgen ready

2022-02-23 14:46:39 +01:00

aws_iam_privilege_escalation.md

docgen ready

2022-02-23 14:46:39 +01:00

aws_network_acl_activity.md

docgen ready

2022-02-23 14:46:39 +01:00

aws_privilege_escalation.md

added analytic stories, cleaned up view a bit

2021-09-12 20:39:15 -04:00

aws_security_hub_alerts.md

docgen ready

2022-02-23 14:46:39 +01:00

aws_suspicious_provisioning_activities.md

docgen ready

2022-02-23 14:46:39 +01:00

aws_user_monitoring.md

docgen ready

2022-02-23 14:46:39 +01:00

baron_samedit_cve-2021-3156.md

docgen ready

2022-02-23 14:46:39 +01:00

bits_jobs.md

docgen ready

2022-02-23 14:46:39 +01:00

blackmatter_ransomware.md

docgen ready

2022-02-23 14:46:39 +01:00

brand_monitoring.md

docgen ready

2022-02-23 14:46:39 +01:00

clop_ransomware.md

docgen ready

2022-02-23 14:46:39 +01:00

cloud_cryptomining.md

docgen ready

2022-02-23 14:46:39 +01:00

cloud_federated_credential_abuse.md

docgen ready

2022-02-23 14:46:39 +01:00

cobalt_strike.md

docgen ready

2022-02-23 14:46:39 +01:00

coldroot_macos_rat.md

docgen ready

2022-02-23 14:46:39 +01:00

collection_and_staging.md

docgen ready

2022-02-23 14:46:39 +01:00

command_and_control.md

docgen ready

2022-02-23 14:46:39 +01:00

common_phishing_frameworks.md

docgen ready

2022-02-23 14:46:39 +01:00

container_implantation_monitoring_and_investigation.md

docgen ready

2022-02-23 14:46:39 +01:00

credential_dumping.md

merged with develop

2022-03-03 13:11:56 +01:00

darkside_ransomware.md

docgen ready

2022-02-23 14:46:39 +01:00

data_exfiltration.md

docgen ready

2022-02-23 14:46:39 +01:00

data_protection.md

docgen ready

2022-02-23 14:46:39 +01:00

deobfuscate-decode_files_or_information.md

docgen ready

2022-02-23 14:46:39 +01:00

detect_zerologon_attack.md

docgen ready

2022-02-23 14:46:39 +01:00

dev_sec_ops.md

docgen ready

2022-02-23 14:46:39 +01:00

dhs_report_ta18-074a.md

docgen ready

2022-02-23 14:46:39 +01:00

disabling_security_tools.md

docgen ready

2022-02-23 14:46:39 +01:00

dns_amplification_attacks.md

docgen ready

2022-02-23 14:46:39 +01:00

dns_hijacking.md

docgen ready

2022-02-23 14:46:39 +01:00

domain_trust_discovery.md

docgen ready

2022-02-23 14:46:39 +01:00

dynamic_dns.md

docgen ready

2022-02-23 14:46:39 +01:00

emotet_malware__dhs_report_ta18-201a_.md

docgen ready

2022-02-23 14:46:39 +01:00

f5_tmui_rce_cve-2020-5902.md

docgen ready

2022-02-23 14:46:39 +01:00

fin7.md

docgen ready

2022-02-23 14:46:39 +01:00

gcp_cross_account_activity.md

docgen ready

2022-02-23 14:46:39 +01:00

hafnium_group.md

merged with develop

2022-03-03 13:11:56 +01:00

hidden_cobra_malware.md

docgen ready

2022-02-23 14:46:39 +01:00

host_redirection.md

docgen ready

2022-02-23 14:46:39 +01:00

icedid.md

docgen ready

2022-02-23 14:46:39 +01:00

information_sabotage.md

docgen ready

2022-02-23 14:46:39 +01:00

ingress_tool_transfer.md

merged with develop

2022-03-03 13:11:56 +01:00

jboss_vulnerability.md

docgen ready

2022-02-23 14:46:39 +01:00

kubernetes_scanning_activity.md

docgen ready

2022-02-23 14:46:39 +01:00

kubernetes_sensitive_object_access_activity.md

docgen ready

2022-02-23 14:46:39 +01:00

kubernetes_sensitive_role_activity.md

docgen ready

2022-02-23 14:46:39 +01:00

lateral_movement.md

updating docs and package bits [ci skip]

2021-12-02 18:50:01 +00:00

linux_persistence_techniques.md

docgen ready

2022-02-23 14:46:39 +01:00

linux_post-exploitation.md

updating docs and package bits [ci skip]

2022-01-25 02:37:48 +00:00

linux_privilege_escalation.md

docgen ready

2022-02-23 14:46:39 +01:00

log4shell_cve-2021-44228.md

merged with develop

2022-03-03 13:11:56 +01:00

malicious_powershell.md

docgen ready

2022-02-23 14:46:39 +01:00

masquerading_-_rename_system_utilities.md

docgen ready

2022-02-23 14:46:39 +01:00

meterpreter.md

docgen ready

2022-02-23 14:46:39 +01:00

microsoft_mshtml_remote_code_execution_cve-2021-40444.md

docgen ready

2022-02-23 14:46:39 +01:00

monitor_backup_solution.md

docgen ready

2022-02-23 14:46:39 +01:00

monitor_for_unauthorized_software.md

docgen ready

2022-02-23 14:46:39 +01:00

monitor_for_updates.md

docgen ready

2022-02-23 14:46:39 +01:00

netsh_abuse.md

docgen ready

2022-02-23 14:46:39 +01:00

nobelium_group.md

docgen ready

2022-02-23 14:46:39 +01:00

office_365_detections.md

docgen ready

2022-02-23 14:46:39 +01:00

orangeworm_attack_group.md

docgen ready

2022-02-23 14:46:39 +01:00

petitpotam_ntlm_relay_on_active_directory_certificate_services.md

docgen ready

2022-02-23 14:46:39 +01:00

possible_backdoor_activity_associated_with_mudcarp_espionage_campaigns.md

docgen ready

2022-02-23 14:46:39 +01:00

printnightmare_cve-2021-34527.md

docgen ready

2022-02-23 14:46:39 +01:00

prohibited_traffic_allowed_or_protocol_mismatch.md

docgen ready

2022-02-23 14:46:39 +01:00

proxyshell.md

docgen ready

2022-02-23 14:46:39 +01:00

ransomware_cloud.md

docgen ready

2022-02-23 14:46:39 +01:00

ransomware.md

docgen ready

2022-02-23 14:46:39 +01:00

remcos.md

docgen ready

2022-02-23 14:46:39 +01:00

revil_ransomware.md

docgen ready

2022-02-23 14:46:39 +01:00

router_and_infrastructure_security.md

docgen ready

2022-02-23 14:46:39 +01:00

ryuk_ransomware.md

docgen ready

2022-02-23 14:46:39 +01:00

samaccountname_spoofing_and_domain_controller_impersonation.md

docgen ready

2022-02-23 14:46:39 +01:00

samsam_ransomware.md

docgen ready

2022-02-23 14:46:39 +01:00

signed_binary_proxy_execution_installutil.md

docgen ready

2022-02-23 14:46:39 +01:00

silver_sparrow.md

docgen ready

2022-02-23 14:46:39 +01:00

spearphishing_attachments.md

docgen ready

2022-02-23 14:46:39 +01:00

spectre_and_meltdown_vulnerabilities.md

docgen ready

2022-02-23 14:46:39 +01:00

splunk_enterprise_vulnerability_cve-2018-11409.md

docgen ready

2022-02-23 14:46:39 +01:00

splunk_enterprise_vulnerability.md

docgen ready

2022-02-23 14:46:39 +01:00

sql_injection.md

docgen ready

2022-02-23 14:46:39 +01:00

suspicious_aws_ec2_activities.md

docgen ready

2022-02-23 14:46:39 +01:00

suspicious_aws_login_activities.md

docgen ready

2022-02-23 14:46:39 +01:00

suspicious_aws_s3_activities.md

docgen ready

2022-02-23 14:46:39 +01:00

suspicious_aws_traffic.md

docgen ready

2022-02-23 14:46:39 +01:00

suspicious_cloud_authentication_activities.md

docgen ready

2022-02-23 14:46:39 +01:00

suspicious_cloud_instance_activities.md

docgen ready

2022-02-23 14:46:39 +01:00

suspicious_cloud_provisioning_activities.md

docgen ready

2022-02-23 14:46:39 +01:00

suspicious_cloud_user_activities.md

docgen ready

2022-02-23 14:46:39 +01:00

suspicious_command-line_executions.md

docgen ready

2022-02-23 14:46:39 +01:00

suspicious_compiled_html_activity.md

docgen ready

2022-02-23 14:46:39 +01:00

suspicious_dns_traffic.md

docgen ready

2022-02-23 14:46:39 +01:00

suspicious_emails.md

docgen ready

2022-02-23 14:46:39 +01:00

suspicious_gcp_storage_activities.md

docgen ready

2022-02-23 14:46:39 +01:00

suspicious_mshta_activity.md

docgen ready

2022-02-23 14:46:39 +01:00

suspicious_okta_activity.md

docgen ready

2022-02-23 14:46:39 +01:00

suspicious_regsvcs_regasm_activity.md

docgen ready

2022-02-23 14:46:39 +01:00

suspicious_regsvr32_activity.md

docgen ready

2022-02-23 14:46:39 +01:00

suspicious_rundll32_activity.md

merged with develop

2022-03-03 13:11:56 +01:00

suspicious_windows_registry_activities.md

docgen ready

2022-02-23 14:46:39 +01:00

suspicious_wmi_use.md

docgen ready

2022-02-23 14:46:39 +01:00

suspicious_zoom_child_processes.md

docgen ready

2022-02-23 14:46:39 +01:00

trickbot.md

docgen ready

2022-02-23 14:46:39 +01:00

trusted_developer_utilities_proxy_execution_msbuild.md

docgen ready

2022-02-23 14:46:39 +01:00

trusted_developer_utilities_proxy_execution.md

docgen ready

2022-02-23 14:46:39 +01:00

unusual_aws_ec2_modifications.md

docgen ready

2022-02-23 14:46:39 +01:00

unusual_processes.md

merged with develop

2022-03-03 13:11:56 +01:00

use_of_cleartext_protocols.md

docgen ready

2022-02-23 14:46:39 +01:00

web_fraud_detection.md

docgen ready

2022-02-23 14:46:39 +01:00

whispergate.md

docgen ready

2022-02-23 14:46:39 +01:00

windows_defense_evasion_tactics.md

merged with develop

2022-03-03 13:11:56 +01:00

windows_discovery_techniques.md

docgen ready

2022-02-23 14:46:39 +01:00

windows_dns_sigred_cve-2020-1350.md

docgen ready

2022-02-23 14:46:39 +01:00

windows_file_extension_and_association_abuse.md

docgen ready

2022-02-23 14:46:39 +01:00

windows_log_manipulation.md

docgen ready

2022-02-23 14:46:39 +01:00

windows_persistence_techniques.md

merged with develop

2022-03-03 13:11:56 +01:00

windows_privilege_escalation.md

docgen ready

2022-02-23 14:46:39 +01:00

windows_service_abuse.md

docgen ready

2022-02-23 14:46:39 +01:00

xmrig.md

docgen ready

2022-02-23 14:46:39 +01:00