Active Cyber Defence - Taking back control | JUMPSEC LABS
Tags
attack-pattern: Data Credentials - T1589.001 Kerberoasting - T1558.003 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Ssh - T1021.004 Vnc - T1021.005 Trap - T1546.005 Tool - T1588.002 Kerberoasting - T1208 Powershell - T1086 Trap - T1154
Show in Graph
Common Information
Type Value
UUID 2bd68982-d872-4bc1-a560-e11886f1591d
Fingerprint a5b10bcab59244c7
Analysis status DONE
Considered CTI value 0
Text language
Published Oct. 15, 2024, 10:05 a.m.
Added to db Oct. 15, 2024, 12:46 p.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline Active Cyber Defence – Taking back control
Title Active Cyber Defence - Taking back control | JUMPSEC LABS
Detected Hints/Tags/Attributes 69/1/11
Source URLs
Redirection Url
Details Source https://labs.jumpsec.com/active-cyber-defence-taking-back-control/
URL Provider
Details Provider Source level domain
Details jumpsec.com labs.jumpsec.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 149 ✔ JUMPSEC LABS https://labs.jumpsec.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 26 
posts.specterops.io
Details Domain 360 
attack.mitre.org
Details Domain 1 
users.now
Details Domain 1 
10.xxx.xxx
Details Domain 207 
learn.microsoft.com
Details Domain 14 
canarytokens.org
Details File 816 
index.html
Details File 62 
whoami.exe
Details Url 3 
https://posts.specterops.io/certified-pre-owned-d95910965cd2
Details Url 2 
https://attack.mitre.org/resources
Details Url 1 
https://learn.microsoft.com/en-us/defender-for-identity/entity-tags