Here’s How I Used Azure Cloud to Build a Honeynet, Detect Live Threats, and Respond to SOC…
Tags
country: China United States Of America
attack-pattern: Data Model Credentials - T1589.001 Hardware - T1592.001 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Multi-Factor Authentication - T1556.006 Powershell - T1059.001 Remote Desktop Protocol - T1021.001 Server - T1583.004 Server - T1584.004 Ssh - T1021.004 Trap - T1546.005 Tool - T1588.002 Vulnerabilities - T1588.006 Brute Force - T1110 Powershell - T1086 Remote Desktop Protocol - T1076 Trap - T1154
Show in Graph
Common Information
Type Value
UUID b3623d26-523a-4cc3-b6e3-d101a3f98c5b
Fingerprint 34180951bd3676c3
Analysis status DONE
Considered CTI value 0
Text language
Published Sept. 4, 2024, 1:09 a.m.
Added to db Sept. 4, 2024, 3:40 a.m.
Last updated Dec. 24, 2024, 11:52 a.m.
Headline Here’s How I Used Azure Cloud to Build a Honeynet, Detect Live Threats, and Respond to SOC Incidents
Title Here’s How I Used Azure Cloud to Build a Honeynet, Detect Live Threats, and Respond to SOC…
Detected Hints/Tags/Attributes 91/2/4
Source URLs
Redirection Url
Details Source https://coltonhicks.medium.com/heres-how-i-used-azure-cloud-to-build-a-honeynet-detect-live-threats-and-respond-to-soc-9c4eec7c05d5?source=rss------cybersecurity-5
URL Provider
Details Provider Source level domain
Details medium.com coltonhicks.medium.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 167 ✔ Cybersecurity on Medium https://medium.com/feed/tag/cybersecurity 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 134 
auth.log
Details File 7 
microsoft.key
Details IPv4 3 
8.3.0.0
Details Windows Registry Key 1 
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Security