Exploit Public-Facing Application
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network. The weakness in the system can be a software bug, a temporary glitch, or a misconfiguration. Exploited applications are often websites/web servers, but can also include databases (like SQL), standard services (like SMB or SSH), network device administration and management protocols (like SNMP and Smart Install), and any other system with Internet-accessible open sockets.(Citation: N...
BY SOURCE
PROCEDURES (88)
Auto-extracted: 19 detections for general monitoring
Auto-extracted: 11 detections for inject
Auto-extracted: 10 detections for remote
Auto-extracted: 7 detections for suspicious
Auto-extracted: 7 detections for network connection monitoring
Auto-extracted: 6 detections for http
Auto-extracted: 6 detections for api
Auto-extracted: 4 detections for privilege
Auto-extracted: 4 detections for inject
Auto-extracted: 4 detections for bypass
Auto-extracted: 4 detections for service
Auto-extracted: 4 detections for suspicious
Auto-extracted: 4 detections for service
Auto-extracted: 4 detections for http
Auto-extracted: 3 detections for exfiltrat
Auto-extracted: 3 detections for persist
Auto-extracted: 3 detections for event log
Auto-extracted: 3 detections for child process
Auto-extracted: 3 detections for api
Auto-extracted: 3 detections for attachment
Auto-extracted: 3 detections for phish
Auto-extracted: 3 detections for token
Auto-extracted: 3 detections for privilege
Auto-extracted: 2 detections for oauth
Auto-extracted: 2 detections for script execution monitoring
Auto-extracted: 2 detections for powershell
Auto-extracted: 2 detections for download
Auto-extracted: 2 detections for service
Auto-extracted: 2 detections for lateral
Auto-extracted: 2 detections for exfiltrat
Auto-extracted: 2 detections for exfiltrat
Auto-extracted: 2 detections for authentication monitoring
Auto-extracted: 2 detections for dns
Auto-extracted: 2 detections for cloud
Auto-extracted: 2 detections for remote
Auto-extracted: 2 detections for impersonat
Auto-extracted: 2 detections for service
Auto-extracted: 2 detections for azure
Auto-extracted: 2 detections for suspicious
Auto-extracted: 2 detections for remote
Auto-extracted: 2 detections for dns
Auto-extracted: 2 detections for suspicious
Auto-extracted: 2 detections for parent process
Auto-extracted: 2 detections for child process
Auto-extracted: 2 detections for parent process
Auto-extracted: 1 detections for saml
Auto-extracted: 1 detections for event log
Auto-extracted: 1 detections for unusual
Auto-extracted: 1 detections for http
Auto-extracted: 1 detections for credential
Auto-extracted: 1 detections for unusual
Auto-extracted: 1 detections for c2
Auto-extracted: 1 detections for bypass
Auto-extracted: 1 detections for suspicious
Auto-extracted: 1 detections for command and control
Auto-extracted: 1 detections for lateral
Auto-extracted: 1 detections for attachment
Auto-extracted: 1 detections for cloud
Auto-extracted: 1 detections for email
Auto-extracted: 1 detections for email security
Auto-extracted: 1 detections for lateral
Auto-extracted: 1 detections for impersonat
Auto-extracted: 1 detections for powershell
Auto-extracted: 1 detections for remote
Auto-extracted: 1 detections for process creation monitoring
Auto-extracted: 1 detections for child process
Auto-extracted: 1 detections for child process
Auto-extracted: 1 detections for brute force
Auto-extracted: 1 detections for brute force
Auto-extracted: 1 detections for email
Auto-extracted: 1 detections for credential
Auto-extracted: 1 detections for powershell
Auto-extracted: 1 detections for credential
Auto-extracted: 1 detections for unusual
Auto-extracted: 1 detections for dns
Auto-extracted: 1 detections for persist
Auto-extracted: 1 detections for inject
Auto-extracted: 1 detections for dns
Auto-extracted: 1 detections for http
Auto-extracted: 1 detections for powershell
Auto-extracted: 1 detections for command and control
Auto-extracted: 1 detections for c2
Auto-extracted: 1 detections for service
Auto-extracted: 1 detections for suspicious
Auto-extracted: 1 detections for api
Auto-extracted: 1 detections for oauth
Auto-extracted: 1 detections for http
Auto-extracted: 1 detections for saml