Product
medium
advisory
IIS HTTP Logging Evasion via AppCmd.exe
2 rules 2 TTPsAdversaries leverage the AppCmd.exe utility on Windows IIS servers to disable HTTP logging as a defense evasion technique to mask post-exploitation activity.
Internet Information Services +1
defense-evasion
iis
windows
persistence
webshell
2r
2t
low
advisory
Detection of Potential Remote File Inclusion (RFI) Activity
2 TTPsThis brief outlines the identification and response strategy for Remote File Inclusion (RFI) attacks, where adversaries exploit web server vulnerabilities to fetch remote payloads or disclose sensitive local files.
Nginx +4
2t