Shmoocon 2019 - BECS and beyond: Investigating and Defending Office 3…
Tags
country: Netherlands
maec-delivery-vectors: Watering Hole
attack-pattern: Data Model Conditional Access Policies - T1556.009 Impersonation - T1656 Ip Addresses - T1590.005 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Sharepoint - T1213.002 Connection Proxy - T1090 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID 4b86266f-4a85-4362-9adf-bdaec8d3439e
Fingerprint 521961f80bb28746
Analysis status DONE
Considered CTI value 1
Text language
Published Jan. 22, 2019, midnight
Added to db Sept. 26, 2022, 9:31 a.m.
Last updated Nov. 17, 2024, 5:56 p.m.
Headline Shmoocon 2019 - BECS and beyond: Investigating and Defending Office 365
Title Shmoocon 2019 - BECS and beyond: Investigating and Defending Office 3…
Detected Hints/Tags/Attributes 64/3/11
Source URLs
Redirection Url
Details Source https://www.slideshare.net/DouglasBienstock/shmoocon-2019-becs-and-beyond-investigating-and-defending-office-365
URL Provider
Details Provider Source level domain
Details slideshare.net www.slideshare.net
Attributes
Details Type #Events CTI Value
Details Domain 1 
victim.org
Details Domain 4 
mple.com
Details Domain 1 
mple.co
Details Domain 2 
ple.com
Details Domain 3 
portal.office.com
Details Domain 831 
example.com
Details Email 1 
joe@victim.org
Details Email 3 
john.doe@example.com
Details IPv4 198 
1.1.1.1
Details IPv4 619 
0.0.0.0
Details Threat Actor Identifier - APT 194 
APT35