Renamed PuTTY Secure Copy Execution

Rule Info

Id
f4e8d74a-9096-48d3-873b-c5ff35a822ef
Author
Nasreddine Bencherchali
Name
Renamed PuTTY Secure Copy Execution
Tags
attack.exfiltration attack.t1048.003
Date
2022-11-10 00:00:00
Modified
None
Description
Detects execution of a renamed PuTTY Secure Copy (PSCP)
Type
Nextron Sigma feed only (private)

Rule History