ClrMD Part 1 - Going beyond SOS - Criteo Engineering
Tags
| attack-pattern: | Data Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002 |
Common Information
| Type | Value |
|---|---|
| UUID | aa199028-3cf2-4a48-bb6b-756b16bb6625 |
| Fingerprint | bfda9a104e7086a9 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Feb. 21, 2017, 3:50 p.m. |
| Added to db | Jan. 18, 2023, 7:56 p.m. |
| Last updated | Nov. 12, 2024, 11:50 a.m. |
| Headline | ClrMD Part 1 – Going beyond SOS |
| Title | ClrMD Part 1 - Going beyond SOS - Criteo Engineering |
| Detected Hints/Tags/Attributes | 26/1/8 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | http://labs.criteo.com/2017/02/going-beyond-sos-clrmd-part-1/ |
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 285 | microsoft.net |
|
| Details | Domain | 29 | msdl.microsoft.com |
|
| Details | Domain | 2 | referencesource.microsoft.com |
|
| Details | File | 1 | mscordacwks.dll |
|
| Details | File | 3 | sos.dll |
|
| Details | File | 1 | 00.dll |
|
| Details | Url | 6 | http://msdl.microsoft.com/download/symbols |
|
| Details | Url | 1 | http://msdl.microsoft.com/download/symbols;srv*http://referencesource.microsoft.com/symbols |