PuTTY Secure Copy Execution

Rule Info

Id
1af0c3d8-b0f7-4cef-9c78-2129ad7a9bc5
Author
Nasreddine Bencherchali
Name
PuTTY Secure Copy Execution
Tags
attack.exfiltration attack.t1048.003
Date
2022-11-10 00:00:00
Modified
None
Description
Detects execution of PuTTY Secure Copy (PSCP)
Type
Nextron Sigma feed only (private)

Rule History