How Host-Based Firewalls Work: Architecture, Rules, and Alerts | Apriorit
Tags
attack-pattern: Data Model Inter-Process Communication - T1559 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Software - T1592.002 Ssh - T1021.004 Windows Service - T1543.003 Tool - T1588.002
Show in Graph
Common Information
Type Value
UUID 9bf2fc47-04f1-4689-b0a5-3edad6a884d9
Fingerprint a5bac945f530b842
Analysis status DONE
Considered CTI value 0
Text language
Published June 26, 2018, 11:39 a.m.
Added to db Jan. 18, 2023, 10:47 p.m.
Last updated Nov. 12, 2024, 11:49 a.m.
Headline How Host-Based Firewalls Work: Architecture, Rules, and Alerts
Title How Host-Based Firewalls Work: Architecture, Rules, and Alerts | Apriorit
Detected Hints/Tags/Attributes 36/1/9
Source URLs
Redirection Url
Details Source https://www.apriorit.com/dev-blog/543-how-host-based-firewall-works
URL Provider
Details Provider Source level domain
Details apriorit.com www.apriorit.com
Attributes
Details Type #Events CTI Value
Details File 1 
windowssystem32driversndis.sys
Details File 1 
systemrootsystem32driversvsdatant.sys
Details File 2 
vsdatant.sys
Details File 3 
zatray.exe
Details File 2 
cmdguard.sys
Details File 1 
cmdhlp.sys
Details File 1 
inspect.sys
Details File 1 
systemrootsystem32driverscmdguard.sys
Details File 11 
cis.exe