Skip to content

Latest commit

 

History

History
14 lines (12 loc) · 650 Bytes

r_m_attivo_botsink_Ransomware.md

File metadata and controls

14 lines (12 loc) · 650 Bytes

Rules by Product and UseCase

Vendor: Attivo

Product: BOTsink

Use-Case: Ransomware

Rules Models MITRE ATT&CK® TTPs Activity Types Parsers
1 0 1 1 0
Event Type Rules Models
network-connection-successful TA0011 - TA0011
A-NET-Ransomware-IP: Asset attempted to connect to an IP address which is associated to Ransomware