Skip to content

Latest commit

 

History

History
15 lines (13 loc) · 820 Bytes

r_m_watchguard_watchguard_Cryptomining.md

File metadata and controls

15 lines (13 loc) · 820 Bytes

Rules by Product and UseCase

Vendor: Watchguard

Product: Watchguard

Use-Case: Cryptomining

Rules Models MITRE ATT&CK® TTPs Activity Types Parsers
1 0 3 2 4
Event Type Rules Models
web-activity-allowed T1496 - Resource Hijacking
A-WEB-Shadow-Mining: Host has browsed to a known coinmining/shadowmining domain
web-activity-denied T1496 - Resource Hijacking
A-WEB-Shadow-Mining: Host has browsed to a known coinmining/shadowmining domain