Stopping Attacks Early: The Power of Endpoint Telemetry in Cybersecurity
Tags
cmtmf-attack-pattern: Masquerading
attack-pattern: Data Create Or Modify System Process - T1543 Hardware - T1592.001 Impair Defenses - T1562 Impair Defenses - T1629 System Network Configuration Discovery - T1422 Malware - T1587.001 Malware - T1588.001 Masquerading - T1655 Process Discovery - T1424 System Information Discovery - T1426 Powershell - T1059.001 Process Hollowing - T1055.012 Rundll32 - T1218.011 Software - T1592.002 Tool - T1588.002 Masquerading - T1036 New Service - T1050 Powershell - T1086 Process Discovery - T1057 Process Hollowing - T1093 Rundll32 - T1085 System Information Discovery - T1082 System Network Configuration Discovery - T1016 Windows Management Instrumentation - T1047 Masquerading
Show in Graph
Common Information
Type Value
UUID c165e713-7bdb-432e-ab51-b7bfc73f4ddd
Fingerprint e73001890153fe04
Analysis status DONE
Considered CTI value 0
Text language
Published Oct. 2, 2024, noon
Added to db Oct. 2, 2024, 2:52 p.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline Stopping Attacks Early: The Power of Endpoint Telemetry in Cybersecurity
Title Stopping Attacks Early: The Power of Endpoint Telemetry in Cybersecurity
Detected Hints/Tags/Attributes 61/2/3
Source URLs
Redirection Url
Details Redirection https://feedpress.me/link/23532/16831547/stopping-attacks-early-the-power-of-endpoint-telemetry-in-cybersecurity
Details Redirection https://tracking.feedpress.com/link/23532/16831547/stopping-attacks-early-the-power-of-endpoint-telemetry-in-cybersecurity
Details Source https://blogs.cisco.com/security/stopping-attacks-early-the-power-of-endpoint-telemetry-in-cybersecurity?utm_medium=feed&utm_source=feedpress.me&utm_campaign=Feed%3A+CiscoBlogs
URL Provider
Details Provider Source level domain
Details cisco.com blogs.cisco.com
Details feedpress.com tracking.feedpress.com
Details feedpress.me feedpress.me
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 57 ✔ Cisco Blogs https://blogs.cisco.com/security/talos/feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 6 
sdiagnhost.exe
Details File 56 
tasklist.exe
Details File 1018 
rundll32.exe