IIS modules: The evolution of web shells and how to detect them  - Microsoft Security Blog
Tags
Common Information
Type Value
UUID 87ffeb6f-0ed0-4451-8f87-83a2c48d9bbb
Fingerprint f2111bc209f425a2
Analysis status DONE
Considered CTI value 0
Text language
Published Dec. 12, 2022, 9 a.m.
Added to db Dec. 12, 2022, 7:10 p.m.
Last updated Nov. 15, 2024, 9:31 p.m.
Headline IIS modules: The evolution of web shells and how to detect them
Title IIS modules: The evolution of web shells and how to detect them  - Microsoft Security Blog
Detected Hints/Tags/Attributes 0/0/9
Attributes
Details Type #Events CTI Value
Details Domain 6
app.name
Details Domain 397
asp.net
Details File 128
w3wp.exe
Details File 3
%windir%\system32\inetsrv\appcmd.exe
Details File 70
web.config
Details File 10
appcmd.exe
Details File 2
gacutil.exe
Details File 8
'w3wp.exe
Details File 1
'httpd.exe