Server Software Component
Adversaries may abuse legitimate extensible development features of servers to establish persistent access to systems. Enterprise server applications may include features that allow developers to write and install software or scripts to extend the functionality of the main application. Adversaries may install malicious components to extend and abuse server applications.(Citation: volexity_0day_sophos_FW)
BY SOURCE
PROCEDURES (25)
Auto-extracted: 2 detections for remote
Auto-extracted: 2 detections for service
Auto-extracted: 2 detections for http
Auto-extracted: 2 detections for process creation monitoring
Auto-extracted: 2 detections for bypass
Auto-extracted: 2 detections for inject
Auto-extracted: 2 detections for suspicious
Auto-extracted: 1 detections for parent process
Auto-extracted: 1 detections for unusual
Auto-extracted: 1 detections for suspicious
Auto-extracted: 1 detections for aws
Auto-extracted: 1 detections for persist
Auto-extracted: 1 detections for privilege
Auto-extracted: 1 detections for command line monitoring
Auto-extracted: 1 detections for suspicious
Auto-extracted: 1 detections for remote
Auto-extracted: 1 detections for http
Auto-extracted: 1 detections for service
Auto-extracted: 1 detections for remote
Auto-extracted: 1 detections for aws
Auto-extracted: 1 detections for api
Auto-extracted: 1 detections for privilege
Auto-extracted: 1 detections for child process
Auto-extracted: 1 detections for privilege
Auto-extracted: 1 detections for child process