Simulating Traffic With Scapy - SANS Internet Storm Center
Tags
| attack-pattern: | Data Dns - T1071.004 Dns - T1590.002 Dns Server - T1583.002 Dns Server - T1584.002 Powershell - T1059.001 Python - T1059.006 Powershell - T1086 |
Common Information
| Type | Value |
|---|---|
| UUID | a19156f7-0c14-4641-af69-a36fa9e95179 |
| Fingerprint | a431ef05690248f1 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Aug. 30, 2024, midnight |
| Added to db | Aug. 31, 2024, 5:55 a.m. |
| Last updated | Nov. 17, 2024, 1:57 a.m. |
| Headline | Internet Storm Center |
| Title | Simulating Traffic With Scapy - SANS Internet Storm Center |
| Detected Hints/Tags/Attributes | 19/1/16 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://isc.sans.edu/diary/rss/31216 |
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 142 | ✔ | SANS Internet Storm Center, InfoCON: green | https://isc.sans.edu/rssfeed_full.xml | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 23 | logging.info |
|
| Details | Domain | 110 | www.reddit.com |
|
| Details | Domain | 4 | scapy.net |
|
| Details | Domain | 6 | scapy.readthedocs.io |
|
| Details | Domain | 4 | zeek.org |
|
| Details | File | 23 | logging.inf |
|
| Details | File | 2 | dns_requests.py |
|
| Details | File | 2 | dns_requests_count.py |
|
| Details | File | 2 | dns_request_threaded.py |
|
| Details | File | 3 | usage.html |
|
| Details | IPv4 | 3 | 192.168.68.1 |
|
| Details | IPv4 | 295 | 8.8.8.8 |
|
| Details | Url | 2 | https://www.reddit.com/r/networking/comments/k8tdj7/dns_traffic_generator |
|
| Details | Url | 4 | https://scapy.net |
|
| Details | Url | 2 | https://scapy.readthedocs.io/en/latest/usage.html |
|
| Details | Url | 4 | https://zeek.org |