Tag
medium
advisory
Detection of Service Termination via Linux Auditd
1 TTPAdversaries leverage service termination techniques on Linux systems to disable security controls and disrupt operations, as documented in the Industroyer2 malware campaign.
linux
auditd
defensive-evasion
impact
1t
high
advisory
Detection of Shell Application File Write Operations to Suspicious Directories
1 rule 1 TTPDetection of Windows shell and scripting applications writing files to common staging directories used by threat actors for persistence and lateral movement.
persistence
execution
defensive-evasion
file-system
1r
1t