detect-cyzfc-activity

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


These queries was originally published in the threat analytics report, Attacks on gov't, think tanks, NGOs. As described further in Analysis of cyberattack on U.S. think tanks, non-profits, public sector by unidentified attackers, there was a very large spear-phishing campaign launched in November 2019. The attackers would gain access to a target by having the user click on a link to a compromised website and download a .zip archive. Once established on a target's device, the attackers used a ma

Attribute Value
Type Hunting Query
Solution GitHub Only
ID 43ca7ed8-a655-4e64-8a2a-ef7a56975560
Tactics Execution
Required Connectors MicrosoftThreatProtection
Source View on GitHub

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Hunting Queries