Spearphishing Attachment
Adversaries may send spearphishing emails with a malicious attachment in an attempt to gain access to victim systems. Spearphishing attachment is a specific variant of spearphishing. Spearphishing attachment is different from other forms of spearphishing in that it employs the use of malware attached to an email. All forms of spearphishing are electronically delivered social engineering targeted at a specific individual, company, or industry. In this scenario, adversaries attach a file to the sp...
BY SOURCE
PROCEDURES (143)
Auto-extracted: 95 detections for authentication monitoring
Auto-extracted: 43 detections for impersonat
Auto-extracted: 39 detections for credential
Auto-extracted: 39 detections for email security
Auto-extracted: 38 detections for general monitoring
Auto-extracted: 33 detections for impersonat
Auto-extracted: 32 detections for credential
Auto-extracted: 31 detections for attachment
Auto-extracted: 27 detections for email
Auto-extracted: 25 detections for service
Auto-extracted: 20 detections for service
Auto-extracted: 19 detections for phish
Auto-extracted: 18 detections for email
Auto-extracted: 17 detections for network connection monitoring
Auto-extracted: 16 detections for script execution monitoring
Auto-extracted: 15 detections for phish
Auto-extracted: 15 detections for attachment
Auto-extracted: 13 detections for credential
Auto-extracted: 13 detections for attachment
Auto-extracted: 11 detections for base64
Auto-extracted: 9 detections for phish
Auto-extracted: 9 detections for impersonat
Auto-extracted: 8 detections for macro
Auto-extracted: 8 detections for download
Auto-extracted: 8 detections for bypass
Auto-extracted: 7 detections for bypass
Auto-extracted: 7 detections for download
Auto-extracted: 7 detections for credential
Auto-extracted: 7 detections for suspicious
Auto-extracted: 6 detections for suspicious
Auto-extracted: 6 detections for obfuscat
Auto-extracted: 6 detections for office
Auto-extracted: 6 detections for encrypt
Auto-extracted: 6 detections for unusual
Auto-extracted: 6 detections for base64
Auto-extracted: 5 detections for cloud
Auto-extracted: 5 detections for credential
Auto-extracted: 4 detections for cloud
Auto-extracted: 4 detections for process creation monitoring
Auto-extracted: 4 detections for suspicious
Auto-extracted: 4 detections for suspicious
Auto-extracted: 3 detections for impersonat
Auto-extracted: 3 detections for http
Auto-extracted: 3 detections for suspicious
Auto-extracted: 3 detections for service
Auto-extracted: 3 detections for encrypt
Auto-extracted: 3 detections for encrypt
Auto-extracted: 3 detections for attachment
Auto-extracted: 3 detections for child process
Auto-extracted: 3 detections for child process
Auto-extracted: 3 detections for download
Auto-extracted: 3 detections for office
Auto-extracted: 3 detections for api
Auto-extracted: 3 detections for service
Auto-extracted: 3 detections for email
Auto-extracted: 3 detections for obfuscat
Auto-extracted: 3 detections for download
Auto-extracted: 3 detections for service
Auto-extracted: 2 detections for phish
Auto-extracted: 2 detections for phish
Auto-extracted: 2 detections for remote
Auto-extracted: 2 detections for macro
Auto-extracted: 2 detections for obfuscat
Auto-extracted: 2 detections for obfuscat
Auto-extracted: 2 detections for email
Auto-extracted: 2 detections for unusual
Auto-extracted: 2 detections for office
Auto-extracted: 2 detections for office
Auto-extracted: 2 detections for suspicious
Auto-extracted: 2 detections for powershell
Auto-extracted: 2 detections for bypass
Auto-extracted: 2 detections for exfiltrat
Auto-extracted: 2 detections for exfiltrat
Auto-extracted: 2 detections for macro
Auto-extracted: 2 detections for evasion
Auto-extracted: 2 detections for evasion
Auto-extracted: 2 detections for macro
Auto-extracted: 2 detections for child process
Auto-extracted: 2 detections for dns
Auto-extracted: 2 detections for command line monitoring
Auto-extracted: 2 detections for lateral
Auto-extracted: 1 detections for masquerad
Auto-extracted: 1 detections for inject
Auto-extracted: 1 detections for attachment
Auto-extracted: 1 detections for powershell
Auto-extracted: 1 detections for aws
Auto-extracted: 1 detections for http
Auto-extracted: 1 detections for file monitoring
Auto-extracted: 1 detections for inject
Auto-extracted: 1 detections for unusual
Auto-extracted: 1 detections for lateral
Auto-extracted: 1 detections for remote
Auto-extracted: 1 detections for api
Auto-extracted: 1 detections for service
Auto-extracted: 1 detections for unusual
Auto-extracted: 1 detections for token
Auto-extracted: 1 detections for token
Auto-extracted: 1 detections for http
Auto-extracted: 1 detections for evasion
Auto-extracted: 1 detections for parent process
Auto-extracted: 1 detections for email
Auto-extracted: 1 detections for base64
Auto-extracted: 1 detections for parent process
Auto-extracted: 1 detections for persist
Auto-extracted: 1 detections for bypass
Auto-extracted: 1 detections for macro
Auto-extracted: 1 detections for privilege
Auto-extracted: 1 detections for masquerad
Auto-extracted: 1 detections for registry
Auto-extracted: 1 detections for powershell
Auto-extracted: 1 detections for unusual
Auto-extracted: 1 detections for aws
Auto-extracted: 1 detections for cloud
Auto-extracted: 1 detections for inject
Auto-extracted: 1 detections for unusual
Auto-extracted: 1 detections for oauth
Auto-extracted: 1 detections for oauth
Auto-extracted: 1 detections for inject
Auto-extracted: 1 detections for bypass
Auto-extracted: 1 detections for phish
Auto-extracted: 1 detections for parent process
Auto-extracted: 1 detections for parent process
Auto-extracted: 1 detections for api
Auto-extracted: 1 detections for remote
Auto-extracted: 1 detections for oauth
Auto-extracted: 1 detections for child process
Auto-extracted: 1 detections for registry
Auto-extracted: 1 detections for module load monitoring
Auto-extracted: 1 detections for bypass
Auto-extracted: 1 detections for remote
Auto-extracted: 1 detections for privilege
Auto-extracted: 1 detections for exfiltrat
Auto-extracted: 1 detections for impersonat
Auto-extracted: 1 detections for impersonat
Auto-extracted: 1 detections for aws
Auto-extracted: 1 detections for attachment
Auto-extracted: 1 detections for evasion
Auto-extracted: 1 detections for credential
Auto-extracted: 1 detections for impersonat
Auto-extracted: 1 detections for cloud
Auto-extracted: 1 detections for credential
Auto-extracted: 1 detections for persist
Auto-extracted: 1 detections for exfiltrat