Nasreddine Bencherchali
906797e3d1
new: Potentially Suspicious File Download From File Sharing Domain Via PowerShell.EXE new: Remote Access Tool - ScreenConnect Backstage Mode Anomaly 2 new: Remote Access Tool - ScreenConnect Remote Execution new: Remote Access Tool - Simple Help Execution new: ScreenConnect - SlashAndGrab Exploitation Indicators new: Suspicious File Download From IP Via Wget.EXE - Paths new: User Added To Highly Privileged Group update: Suspicious PowerShell IEX Execution Patterns - Enhance coverage by adding new "IEX" variant update: Weak or Abused Passwords In CLI - Add additional password seen abused in the wild
TBD