Carles C
@Kradma1 follower3 downloads0 copies1 like43 views
1 detection
Filters
Last updated
All Time
Detection languages
1
Categories
1
1
1
1
Platforms
1
Products / Services
1
1
MITRE Techniques
1
1
1
1
1
This query detects multiple behaviors associated with the ApolloShadow malware, used by the Secret Blizzard threat actor. It looks for the creation of a specific administrator account, installation of root certificates using certutil, modification of Firefox settings to trust new certificates, and changes to network profiles to relax firewall rules.
