Rule Info
Name
Scilc.EXE Execution
Author
Nasreddine Bencherchali (Nextron Systems), X__Junior (Nextron Systems)
Description
Detects the execution of the "Scilc.EXE" binary - a native utility that's part of the MicroSCADA software suite.
This utility allows for the execution of SCIL commands.
Investigate any suspicious files or commands being passed in the command line in order to determine suspicious activity.
Date
2024-01-30 00:00:00
Modified
None
Id
3ce66868-05b8-47fe-8ec7-0dbaab7514f6
Tags
attack.reconnaissance attack.t1595
Type
Nextron Sigma feed only (private)
Rule History
Scan your endpoints, forensic images or collected files with our portable scanner THOR