Windows Remote System Discovery - adidnsdump (T1018)
Based off of Atomic Red Team T1018 test "Remote System Discovery - adidnsdump" (Remote System Discovery) using command-line and process indicators derived from executor behavior.
Sigma

Based off of Atomic Red Team T1018 test "Remote System Discovery - adidnsdump" (Remote System Discovery) using command-line and process indicators derived from executor behavior.

Already have an account?