medium
threat
Detection of EventLog Registry Security Descriptor Tampering
1 rule 1 TTPAttackers modify the 'ChannelAccess' registry value to restrict event log visibility and evade detection, a technique observed in ransomware campaigns like LockBit.
Windows
LockBit
+1
1r
1t
critical
threat
Active Exploitation of Apache ActiveMQ RCE Vulnerability (CVE-2023-46604)
2 rules 2 TTPsCVE-2023-46604 is a remote code execution vulnerability affecting Apache ActiveMQ that is actively exploited in the wild by ransomware operators, allowing remote attackers to execute arbitrary shell commands.
LockBit
+2
activemq
rce
cve-2023-46604
ransomware
2r
2t