PUA - Angry IP Scanner Execution

Rule Info

Name
PUA - Angry IP Scanner Execution
Author
Swachchhanda Shrawan Poudel
Description
Detects execution of Angry IP Scanner, a network scanning tool. Adversaries may use this tool for network discovery, identifying potential targets, and mapping out network infrastructure during the reconnaissance phase of an attack.
Reference
https://angryip.org/
Date
2025-03-18 00:00:00
Modified
None
Id
396981aa-51a8-4430-afff-9549c2f9c068
Tags
attack.discovery attack.t1046
Type
Nextron Sigma feed only (private)

Rule History

THOR Logo  Scan your endpoints, forensic images or collected files with our portable scanner THOR
  Warning: Access to VALHALLA is rate-limited - once you prove unworthy, access gets denied
  Nextron Systems 2022