Vendor
medium
advisory
Multiple Vulnerabilities in Rapid7 Velociraptor
2 rules 2 TTPsMultiple vulnerabilities in Rapid7 Velociraptor could allow an attacker to perform a denial-of-service attack or disclose sensitive information.
Velociraptor
vulnerability
denial-of-service
information-disclosure
2r
2t
medium
advisory
Multiple Vulnerabilities in Rapid7 Velociraptor
2 rules 3 TTPsMultiple vulnerabilities in Rapid7 Velociraptor could allow an attacker to disclose information or cause a denial of service.
Velociraptor
vulnerability
denial-of-service
information-disclosure
2r
3t
medium
threat
Kerberos Traffic from Unusual Process
2 rules 2 TTPsDetects network connections to the standard Kerberos port from an unusual process other than lsass.exe, potentially indicating Kerberoasting or Pass-the-Ticket activity on Windows systems.
Elastic Defend +22
kerberoasting
credential-access
lateral-movement
windows
2r
2t
critical
advisory
Rapid7 Velociraptor Improper Input Validation Vulnerability
2 rules 1 TTP 1 CVERapid7 Velociraptor versions prior to 0.76.2 contain an improper input validation vulnerability allowing authenticated remote attackers to achieve remote code execution on the server.
Velociraptor
rce
input-validation
linux
2r
1t
1c