Skip to content
Threat Feed
Subscribe

Tag

Sunburst

1 brief RSS
high threat

SUNBURST Command and Control Activity Detected

This rule detects post-exploitation command and control activity related to the SUNBURST backdoor, which targets SolarWind's Orion software, mimicking the Orion Improvement Program (OIP) protocol for covert communication.

SolarWinds Orion Platform APT29 +5 solarwinds sunburst supply-chain command-and-control
2r 2t