Самые интересные киберинциденты в 2023 году: внутренние угрозы и многое другое
Tags
attack-pattern: Additional Email Delegate Permissions - T1098.002 Bypass User Account Control - T1548.002 Clear Windows Event Logs - T1070.001 Data Manipulation - T1565 Device Registration - T1098.005 Disable Or Modify System Firewall - T1562.004 Disable Windows Event Logging - T1562.002 Dll Side-Loading - T1574.002 Domain Accounts - T1078.002 Email Forwarding Rule - T1114.003 Exploits - T1587.004 File Deletion - T1070.004 Impair Command History Logging - T1562.003 Local Accounts - T1078.003 Lsass Memory - T1003.001 Malicious File - T1204.002 Malware - T1587.001 Match Legitimate Name Or Location - T1036.005 Ntds - T1003.003 Password Guessing - T1110.001 Password Spraying - T1110.003 Protocol Tunneling - T1572 Remote Desktop Protocol - T1021.001 Security Account Manager - T1003.002 Server - T1583.004 Server - T1584.004 Service Execution - T1569.002 Smb/Windows Admin Shares - T1021.002 Software - T1592.002 Spearphishing Link - T1566.002 Steal Web Session Cookie - T1539 Web Shell - T1505.003 Windows Service - T1543.003 File System Logical Offsets - T1006 Exploit Public-Facing Application - T1190 Exploitation For Client Execution - T1203 External Remote Services - T1133 Remote File Copy - T1105 Modify Registry - T1112 Standard Non-Application Layer Protocol - T1095 Valid Accounts - T1078
Show in Graph
Common Information
Type Value
UUID 33d468b1-d132-4bcf-acc4-370ab8a44eb8
Fingerprint f21cefa21b271957
Analysis status DONE
Considered CTI value 2
Text language
Published Sept. 6, 2024, 1 p.m.
Added to db Sept. 6, 2024, 12:32 p.m.
Last updated Nov. 17, 2024, 6:56 p.m.
Headline Самые интересные киберинциденты 2023 года
Title Самые интересные киберинциденты в 2023 году: внутренние угрозы и многое другое
Detected Hints/Tags/Attributes 53/1/46
Source URLs
Redirection Url
Details Source https://securelist.ru/incident-response-interesting-cases-2023/110492/
URL Provider
Details Provider Source level domain
Details securelist.ru securelist.ru
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 224 ✔ Securelist https://securelist.ru/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 184 
cve-2021-26855
Details Domain 285 
microsoft.net
Details File 137 
conhost.exe
Details File 226 
certutil.exe
Details File 3 
wshelper.dll
Details File 28 
wlbsctrl.dll
Details File 3 
ikeext.dll
Details File 172 
dllhost.exe
Details IPv4 619 
0.0.0.0
Details MITRE ATT&CK Techniques 306 
T1078
Details MITRE ATT&CK Techniques 191 
T1133
Details MITRE ATT&CK Techniques 99 
T1539
Details MITRE ATT&CK Techniques 33 
T1565
Details MITRE ATT&CK Techniques 542 
T1190
Details MITRE ATT&CK Techniques 96 
T1587.001
Details MITRE ATT&CK Techniques 173 
T1003.001
Details MITRE ATT&CK Techniques 43 
T1003.002
Details MITRE ATT&CK Techniques 95 
T1572
Details MITRE ATT&CK Techniques 492 
T1105
Details MITRE ATT&CK Techniques 49 
T1110.003
Details MITRE ATT&CK Techniques 245 
T1203
Details MITRE ATT&CK Techniques 160 
T1021.001
Details MITRE ATT&CK Techniques 139 
T1021.002
Details MITRE ATT&CK Techniques 183 
T1036.005
Details MITRE ATT&CK Techniques 183 
T1566.002
Details MITRE ATT&CK Techniques 11 
T1098.005
Details MITRE ATT&CK Techniques 44 
T1110.001
Details MITRE ATT&CK Techniques 14 
T1098.002
Details MITRE ATT&CK Techniques 14 
T1114.003
Details MITRE ATT&CK Techniques 11 
T1587.004
Details MITRE ATT&CK Techniques 71 
T1078.002
Details MITRE ATT&CK Techniques 43 
T1078.003
Details MITRE ATT&CK Techniques 174 
T1569.002
Details MITRE ATT&CK Techniques 365 
T1204.002
Details MITRE ATT&CK Techniques 180 
T1543.003
Details MITRE ATT&CK Techniques 227 
T1574.002
Details MITRE ATT&CK Techniques 104 
T1505.003
Details MITRE ATT&CK Techniques 86 
T1548.002
Details MITRE ATT&CK Techniques 12 
T1006
Details MITRE ATT&CK Techniques 550 
T1112
Details MITRE ATT&CK Techniques 70 
T1562.004
Details MITRE ATT&CK Techniques 20 
T1562.002
Details MITRE ATT&CK Techniques 92 
T1070.001
Details MITRE ATT&CK Techniques 297 
T1070.004
Details MITRE ATT&CK Techniques 9 
T1562.003
Details MITRE ATT&CK Techniques 159 
T1095