Skip to content

Latest commit

 

History

History
15 lines (13 loc) · 800 Bytes

r_m_dell_sonicwall_Cryptomining.md

File metadata and controls

15 lines (13 loc) · 800 Bytes

Rules by Product and UseCase

Vendor: Dell

Product: Sonicwall

Use-Case: Cryptomining

Rules Models MITRE ATT&CK® TTPs Activity Types Parsers
1 0 3 2 0
Event Type Rules Models
web-activity-allowed T1496 - Resource Hijacking
A-WEB-Shadow-Mining: Host has browsed to a known coinmining/shadowmining domain
web-activity-denied T1496 - Resource Hijacking
A-WEB-Shadow-Mining: Host has browsed to a known coinmining/shadowmining domain