FIRP — First Incident Response Framework
Tags
cmtmf-attack-pattern: Process Injection
attack-pattern: Dns - T1071.004 Dns - T1590.002 Local Account - T1087.001 Local Account - T1136.001 Malware - T1587.001 Malware - T1588.001 Pass The Hash - T1550.002 Powershell - T1059.001 Process Injection - T1631 Brute Force - T1110 Pass The Hash - T1075 Powershell - T1086 Process Injection - T1055
Show in Graph
Common Information
Type Value
UUID be051592-dfa6-46d8-88ad-b13e7cc3b60a
Fingerprint 859ca530a73a0311
Analysis status DONE
Considered CTI value 0
Text language
Published Feb. 24, 2023, 12:51 p.m.
Added to db Feb. 24, 2023, 2:53 p.m.
Last updated Sept. 1, 2024, 10:20 p.m.
Headline FIRP — First Incident Response Powershell
Title FIRP — First Incident Response Framework
Detected Hints/Tags/Attributes 21/2/2
Source URLs
Redirection Url
Details Source https://medium.com/@andreabocchetti88/firp-first-incident-response-framework-a18b2c86a369?source=rss------cybersecurity-5
URL Provider
Details Provider Source level domain
Details medium.com medium.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 167 ✔ Cybersecurity on Medium https://medium.com/feed/tag/cybersecurity 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 1 
firp.ps1
Details File 4 
keywords.txt