Executable from Webdav

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•1

Detects executable access via webdav6. Can be seen in APT 29 such as from the emulated APT 29 hackathon https://github.com/OTRF/detection-hackathon-apt29/