Finding Running RPC Server Information with NtObjectManager
Tags
| attack-pattern: | Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Connection Proxy - T1090 Powershell - T1086 |
Common Information
| Type | Value |
|---|---|
| UUID | df1f3ae4-5008-4550-a531-275b9542178e |
| Fingerprint | 87b885ff6c43a61b |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | June 26, 2022, 2:56 p.m. |
| Added to db | Jan. 18, 2023, 11:50 p.m. |
| Last updated | Nov. 7, 2024, 10:44 p.m. |
| Headline | Tyranid's Lair |
| Title | Finding Running RPC Server Information with NtObjectManager |
| Detected Hints/Tags/Attributes | 15/1/4 |
Source URLs
URL Provider