NinnesOtu
@NinnesOtu3 followers88 downloads25 copies15 likes279 views
2 detections
Filters
Last updated
All Time
Detection languages
2
Categories
1
1
1
1
Platforms
2
Products / Services
1
1
MITRE Techniques
2
1
1
1
1
This rule detects attempts to access the Windows share IPC with the specific target name "cert," which could indicate unauthorized certificate requests. This behavior has been linked to tools such as Certipy.
detects a possible IPv6 DNS takeover using ISATAP configuration events (Event ID 4100) new ISATAP router was set successfully