Umar Hussain
@Rapture23760 followers1 download6 copies1 like202 views
2 detections
Filters
Last updated
All Time
Detection languages
2
Categories
1
1
Platforms
1
Products / Services
1
MITRE Techniques
1
1
1
1
search for hits on my.microsoftpersonalcontent.com through zscaler
prioritize phishing victims by sorting >> " network.http.referral_url "
prioritize phishing victims by sorting >> " network.http.referral_url "
Detects potential adversary-in-the-middle (AiTM) session hijacking by identifying a single session ID being used in successful sign-ins from multiple distinct IP addresses and with different User-Agent strings within a short timeframe. This behavior is indicative of an attacker stealing a session cookie and replaying it from their own machine, a technique commonly used by phishing kits like Tycoon2FA.