CL-UNK-1068 Reconnaissance Batch Script Execution
Detects the execution of specific batch scripts (hp.bat, hpp.bat, a.bat) used by the CL-UNK-1068 actor for host reconnaissance and information gathering.
Sigma

Detects the execution of specific batch scripts (hp.bat, hpp.bat, a.bat) used by the CL-UNK-1068 actor for host reconnaissance and information gathering.

Already have an account?