Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

Infrastructure Vulnerability Exposure to Volt Typhoon

Steven Lim@KQLWizard

•updated Jul 1, 2025•3•1•68

KQL Query

Microsoft Sentinel (KQL)

Tags

T1082 - System Information Discovery T1592 - Gather Victim Host Information T1518 - Software Discovery T1046 - Network Service Discovery TA0007 - Discovery TA0043 - Reconnaissance G1017 - Volt Typhoon G1045 - Salt Typhoon S1144 - FRP M1016 - Vulnerability Scanning T1595.002 - Vulnerability Scanning T1212 - Exploitation for Credential Access C0045 - ShadowRay S0129 - AutoIt backdoor C0048 - Operation MidnightEclipse T1190 - Exploit Public-Facing Application TA0006 - Credential Access TA0001 - Initial Access Vulnerability Scan Detected System Monitoring Status Windows Network Generic Firmware Windows Defender Atpkql

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?