Procedure for Detecting Malicious Activity Using System Administration Tools (Living off the Land)
Common Information
Type Value
UUID c08871cb-ae04-4383-b9ba-d2b4817f859a
Fingerprint a550a956b3a5ff4f
Analysis status DONE
Considered CTI value 0
Text language
Published Nov. 7, 2024, 11:28 a.m.
Added to db Nov. 7, 2024, 12:55 p.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline Procedure for Detecting Malicious Activity Using System Administration Tools (Living off the Land)
Title Procedure for Detecting Malicious Activity Using System Administration Tools (Living off the Land)
Detected Hints/Tags/Attributes 47/2/4
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 167 Cybersecurity on Medium https://medium.com/feed/tag/cybersecurity 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 249
schtasks.exe
Details File 76
netsh.exe
Details File 226
certutil.exe
Details File 1208
powershell.exe