New tool: immutable.py - SANS Internet Storm Center
Tags
attack-pattern: | Data Python - T1059.006 Tool - T1588.002 Rootkit - T1014 Rootkit |
Common Information
Type | Value |
---|---|
UUID | 77e181f5-c4ca-4b8c-b784-84e248ef153a |
Fingerprint | 2ac4943227dd8846 |
Analysis status | DONE |
Considered CTI value | 0 |
Text language | |
Published | Jan. 18, 2025, midnight |
Added to db | Jan. 18, 2025, 7:39 a.m. |
Last updated | Feb. 12, 2025, 3:30 p.m. |
Headline | Internet Storm Center |
Title | New tool: immutable.py - SANS Internet Storm Center |
Detected Hints/Tags/Attributes | 13/1/10 |
Source URLs
Redirection | Url | |
---|---|---|
Details | Source | https://isc.sans.edu/diary/rss/31598 |
URL Provider
RSS Feed
Details | Id | Enabled | Feed title | Url | Added to db |
---|---|---|---|---|---|
Details | 142 | ✔ | SANS Internet Storm Center, InfoCON: green | https://isc.sans.edu/rssfeed_full.xml | 2024-08-30 22:08 |
Attributes
Details | Type | #Events | CTI | Value |
---|---|---|---|---|
Details | Domain | 2 | immutable.py |
|
Details | Domain | 139 | ld.so |
|
Details | Domain | 199 | www.sans.org |
|
Details | Domain | 351 | raw.githubusercontent.com |
|
Details | Domain | 5417 | github.com |
|
Details | File | 2 | immutable.py |
|
Details | Github username | 2 | clausing |
|
Details | Url | 1 | https://www.sans.org/cyber-security-courses/linux-threat-hunting-incident-response |
|
Details | Url | 1 | https://raw.githubusercontent.com/clausing/scripts/refs/heads/master/immutable.py |
|
Details | Url | 1 | https://github.com/clausing/scripts |