Skip to content
Threat Feed
Subscribe

Tag

Hacktool

3 briefs RSS
high advisory

HackTool - SysmonEnte Execution for Sysmon Evasion

This brief details the SysmonEnte hacktool, an open-source utility developed by codewhitesec, designed to attack the integrity of Microsoft Sysmon processes to impair endpoint detection and bypass security monitoring on Windows systems.

Microsoft Sysmon defense-evasion endpoint windows hacktool
1r
high advisory

Antivirus Alert for Hacktools or Attack Tools

This brief describes the detection of highly relevant antivirus alerts specifically flagging hacktools or other attack tools via distinct signatures, indicating the presence of offensive security utilities or malicious software on endpoints, which requires immediate investigation despite the AV's block action.

antivirus hacktool post-exploitation detection incident-response malware
1r 1t
high advisory

NetExec File Creation Detection

This brief covers the detection of NetExec, a post-exploitation and lateral movement tool, through monitoring for unique file creation patterns associated with its execution and file extraction in Windows environments.

Windows +1 netexec crackmapexec lateral-movement post-exploitation hacktool
2r 3t