Top 10 Ways to Identify and Detect Privileged Users by Randy Franklin Smith
Tags
cmtmf-attack-pattern: Compromise Accounts
maec-delivery-vectors: Watering Hole
attack-pattern: Data Direct Indirect Compromise Accounts - T1586 Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Local Account - T1087.001 Local Account - T1136.001 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Vulnerabilities - T1588.006 Connection Proxy - T1090 Powershell - T1086 Scripting - T1064 Scripting
Show in Graph
Common Information
Type Value
UUID 62ca5501-9c1e-4e82-8c8b-e187b7f46838
Fingerprint ac31ddd014a66745
Analysis status DONE
Considered CTI value -2
Text language
Published May 10, 2017, 8 a.m.
Added to db Jan. 18, 2023, 8:53 p.m.
Last updated Nov. 18, 2024, 6:28 a.m.
Headline Top 10 Ways to Identify and Detect Privileged Users by Randy Franklin Smith
Title Top 10 Ways to Identify and Detect Privileged Users by Randy Franklin Smith
Detected Hints/Tags/Attributes 63/3/7
Source URLs
Redirection Url
Details Source https://blog.stealthbits.com/top-10-ways-to-identify-and-detect-privileged-users
URL Provider
Details Provider Source level domain
Details stealthbits.com blog.stealthbits.com
Attributes
Details Type #Events CTI Value
Details Domain 2 
properties.name
Details Domain 1 
apppool.net
Details Domain 318 
bit.ly
Details Domain 1 
prod.net
Details Domain 6 
www.ultimatewindowssecurity.com
Details File 2 
properties.obj
Details File 1 
getnestedmembers.ps1