How to Achieve Eternal Persistence Part 3: How to access and recover replicated secrets
Tags
| attack-pattern: | Data Credentials - T1589.001 Ntds - T1003.003 Server - T1583.004 Server - T1584.004 Hypervisor - T1062 |
Common Information
| Type | Value |
|---|---|
| UUID | 0dc95cbf-eb8d-4ea3-abb1-439e014ddc91 |
| Fingerprint | bc9000110ce012c5 |
| Analysis status | DONE |
| Considered CTI value | -2 |
| Text language | |
| Published | June 6, 2024, 8:12 a.m. |
| Added to db | Aug. 31, 2024, 10:48 a.m. |
| Last updated | Nov. 18, 2024, 3:30 p.m. |
| Headline | How to Achieve Eternal Persistence Part 3: How to access and recover replicated secrets |
| Title | How to Achieve Eternal Persistence Part 3: How to access and recover replicated secrets |
| Detected Hints/Tags/Attributes | 48/1/18 |
Source URLs
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 412 | ✔ | Hunt & Hackett Blog | https://www.huntandhackett.com/blog/rss.xml | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 4134 | github.com |
|
| Details | Domain | 2 | huntandhackett.com |
|
| Details | 1 | jobs@huntandhackett.com |
||
| Details | Github username | 3 | huntandhackett |
|
| Details | Github username | 1 | b4rtik |
|
| Details | Github username | 5 | parrotsec |
|
| Details | Github username | 9 | fortra |
|
| Details | Github username | 48 | microsoft |
|
| Details | Github username | 8 | googleprojectzero |
|
| Details | Url | 1 | https://github.com/huntandhackett/passiveaggression. |
|
| Details | Url | 1 | https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-drsr/4304bb4a-e9b5-4c8a-8731-df4d6f9ab567 |
|
| Details | Url | 1 | https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-drsr/1317a654-5dd6-45ff-af73-919cbc7fbb45 |
|
| Details | Url | 1 | https://github.com/b4rtik/sharpkatz |
|
| Details | Url | 4 | https://github.com/parrotsec/mimikatz |
|
| Details | Url | 5 | https://github.com/fortra/impacket |
|
| Details | Url | 1 | https://github.com/microsoft/windowsprotocoltestsuites |
|
| Details | Url | 1 | https://github.com/googleprojectzero/sandbox-attacksurface-analysis-tools |
|
| Details | Url | 1 | https://github.com/googleprojectzero/sandbox-attacksurface-analysis-tools/pull/74 |