Event Tracing for Windows Part 1 :: Velociraptor - Digging deeper!
Tags
attack-pattern: | Data Dns - T1071.004 Dns - T1590.002 Server - T1583.004 Server - T1584.004 Software - T1592.002 |
Common Information
Type | Value |
---|---|
UUID | e8efbfe7-fe9d-41c2-8f43-cfabe55f5868 |
Fingerprint | fb3e9b4a21f82e16 |
Analysis status | DONE |
Considered CTI value | 0 |
Text language | |
Published | Sept. 2, 2021, midnight |
Added to db | Aug. 31, 2024, 2:05 a.m. |
Last updated | Nov. 17, 2024, 11:40 p.m. |
Headline | Event Tracing for Windows Part 1 |
Title | Event Tracing for Windows Part 1 :: Velociraptor - Digging deeper! |
Detected Hints/Tags/Attributes | 20/1/8 |
Source URLs
Redirection | Url | |
---|---|---|
Details | Source | https://docs.velociraptor.app/blog/2021/2021-08-18-velociraptor-and-etw/ |
URL Provider
RSS Feed
Details | Id | Enabled | Feed title | Url | Added to db |
---|---|---|---|---|---|
Details | 104 | ✔ | Velociraptor Blog | https://docs.velociraptor.app/blog/index.xml | 2024-08-30 22:08 |
Attributes
Details | Type | #Events | CTI | Value |
---|---|---|---|---|
Details | Domain | 4128 | github.com |
|
Details | Domain | 3 | system.id |
|
Details | Domain | 37 | googlegroups.com |
|
Details | Domain | 35 | www.velocidex.com |
|
Details | 31 | velociraptor-discuss@googlegroups.com |
||
Details | Github username | 2 | repnz |
|
Details | Url | 1 | https://github.com/repnz/etw-providers-docs |
|
Details | Url | 28 | https://www.velocidex.com/discord |