Detecting Vulnerability Scanning Traffic From Underground Tools Using Machine Learning
Tags
country: Japan Romania
attack-pattern: Data Model Models Code Repositories - T1213.003 Code Repositories - T1593.003 Ip Addresses - T1590.005 Screen Capture - T1513 Search Engines - T1593.002 Server - T1583.004 Server - T1584.004 Software - T1592.002 Web Services - T1583.006 Web Services - T1584.006 Tool - T1588.002 Vulnerabilities - T1588.006 Vulnerability Scanning - T1595.002 Connection Proxy - T1090 Screen Capture - T1113 Screen Capture
Show in Graph
Common Information
Type Value
UUID b3d5ce1e-305d-47ea-8fb9-f98120098166
Fingerprint bf8019b981b3af02
Analysis status DONE
Considered CTI value 2
Text language
Published Oct. 1, 2024, 10 a.m.
Added to db Oct. 1, 2024, 12:20 p.m.
Last updated Oct. 2, 2024, 11:58 a.m.
Headline Detecting Vulnerability Scanning Traffic From Underground Tools Using Machine Learning
Title Detecting Vulnerability Scanning Traffic From Underground Tools Using Machine Learning
Detected Hints/Tags/Attributes 60/2/9
Source URLs
Redirection Url
Details Source https://unit42.paloaltonetworks.com/machine-learning-new-swiss-army-suite-tool/
URL Provider
Details Provider Source level domain
Details paloaltonetworks.com unit42.paloaltonetworks.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 256 ✔ Unit 42 https://unit42.paloaltonetworks.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 3 
mysql.txt
Details sha256 2 
32e875834f7b1990680e666266fffd4dd8782b0621e57d1b07a99bf5bf810ded
Details sha256 2 
58136c339506f4e701ddead6740f72d6cd9091f308bdc64c0c29dd716d9febdd
Details sha256 2 
7b314d68cf60c8d6a13c339a8758e60010499907b84328f238df6fc518023805
Details sha256 2 
c8d4aba7e681ca4172c2ec297786e32cc5cf35265aec0912fd2fdd6143f0c6ad
Details sha256 2 
434d165748455d5e09020ab74c9d33d75a77741cae966e60977185956f663c58
Details sha256 2 
abc1c1c17694fcad7f7882cc62fa87c9774b807526ed09c8087bf70b1a8c5c18
Details sha256 2 
dcf18b02008762072a330fcf07be885f7c7fc8d4473cb3da41de565959a6da08
Details sha256 2 
e57c2d7f779a36cb5abc9316f4c21f391901f7e07ba2d27ff1c2dd1217dbd536