Lyceum Analysis

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (1000)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en	764
zh	136
ru	22
ar	16
ja	14

Country

us	348
cn	224
gb	34
es	18
ru	14

Actors

Lyceum	4
Cobalt Strike	2
QakBot	1
Nanocore RAT	1
RedLine Stealer	1

Activities

Interest

Timeline

Type

Not Defined	362
Operating System	60
Router Operating System	34
Chip Software	28
Content Management System	24

Vendor

Not Defined	256
Microsoft	38
Apple	30
Apache	24
SourceCodester	22

Product

Microsoft Windows	24
Qualcomm Snapdragon Auto	20
Qualcomm Snapdragon Compute	20
Qualcomm Snapdragon Industrial IOT	20
Linux Kernel	18

Vulnerabilities

#	Vulnerability	Base	Temp	0day	Today	Exp	Rem	EPSS	CTI	CVE
1	TikiWiki tiki-register.php input validation	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.01075	7.06	CVE-2006-6168
2	DZCP deV!L`z Clanportal config.php code injection	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00943	0.71	CVE-2010-0966
3	Pligg cloud.php sql injection	6.3	6.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00000	0.71
4	ALPACA improper authentication	5.6	5.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00110	0.06	CVE-2021-3618
5	SolarWinds Network Performance Monitor deserialization	9.8	9.8	$0-$5k	$0-$5k	Not Defined	Official Fix	0.69184	0.08	CVE-2021-31474
6	nginx request smuggling	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00241	1.62	CVE-2020-12440
7	Huawei ACXXXX/SXXXX SSH Packet input validation	7.5	7.3	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00246	0.07	CVE-2014-8572
8	Trend Micro Maximum Security Secure Erase link following	5.4	5.4	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00045	0.00	CVE-2022-30687
9	Arista EOS credentials management	5.4	5.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00074	0.00	CVE-2021-28509
10	Roncoo Education File pic unrestricted upload	5.5	5.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00250	0.00	CVE-2022-29632
11	Linglong Cookie access control	5.5	5.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00238	0.00	CVE-2022-29633
12	Archer Platform SSO ADFS access control	9.7	9.5	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00087	0.04	CVE-2022-30584
13	Archer Platform REST API authorization	5.4	5.3	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00106	0.00	CVE-2022-30585
14	Arista EOS credentials management	5.7	5.7	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00074	0.00	CVE-2021-28508
15	Apple macOS state issue	5.3	5.1	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00063	0.05	CVE-2022-26691
16	Apple iOS/iPadOS Kernel memory corruption	7.8	7.5	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00082	0.00	CVE-2022-22672
17	Apple macOS Kernel memory corruption	7.8	7.5	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00082	0.00	CVE-2022-22672
18	Apple macOS XPC Services API permission	4.4	4.2	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00050	0.04	CVE-2022-22676
19	Apple macOS File System race condition	3.6	3.5	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00051	0.00	CVE-2022-26690
20	MantisBT cross site scripting	4.3	4.1	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00482	0.05	CVE-2014-9571

Campaigns (1)

These are the campaigns that can be associated with the actor:

DanBot

IOC - Indicator of Compromise (12)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP address	Hostname	Actor	Campaigns	Identified	Type	Confidence
1	62.113.196.37	aeroplan-redirect.online	Lyceum	DanBot	03/28/2022	verified	High
2	62.113.207.181		Lyceum	DanBot	03/28/2022	verified	High
3	75.87.185.45	cpe-75-87-185-45.kc.res.rr.com	Lyceum	DanBot	03/28/2022	verified	High
4	XX.XXX.XXX.XXX		Xxxxxx		03/31/2022	verified	High
5	XXX.XXX.XX.XX	xxxxxxxxxx.xxxxxx.xxx	Xxxxxx	Xxxxxx	03/28/2022	verified	High
6	XXX.XXX.XX.XX		Xxxxxx		03/31/2022	verified	High
7	XXX.XXX.XXX.XX		Xxxxxx	Xxxxxx	03/28/2022	verified	High
8	XXX.XXX.XXX.XX		Xxxxxx	Xxxxxx	03/28/2022	verified	High
9	XXX.XX.XXX.XXX	xxxxx.xxxxxxxxxxxxxx.xxxx	Xxxxxx	Xxxxxx	03/28/2022	verified	High
10	XXX.XXX.XXX.XX	xxxx.xx-xxx-xxx-xxx.xx	Xxxxxx	Xxxxxx	03/28/2022	verified	High
11	XXX.XXX.XXX.XXX	xxxxxxxx-xxxxxxx.xxxxxxxxxxxx.xxx	Xxxxxx		03/31/2022	verified	High
12	XXX.XX.XXX.XXX		Xxxxxx	Xxxxxx	03/28/2022	verified	High

TTP - Tactics, Techniques, Procedures (25)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Class	Vulnerabilities	Access Vector	Type	Confidence
1	T1006	CAPEC-126	CWE-21, CWE-22, CWE-23, CWE-24, CWE-425	Path Traversal	predictive	High
2	T1040	CAPEC-102	CWE-294	Authentication Bypass by Capture-replay	predictive	High
3	T1055	CAPEC-10	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	High
4	T1059	CAPEC-137	CWE-88, CWE-94, CWE-1321	Argument Injection	predictive	High
5	T1059.007	CAPEC-209	CWE-79, CWE-80	Cross Site Scripting	predictive	High
6	TXXXX	CAPEC-104	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
7	TXXXX.XXX	CAPEC-191	CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	High
8	TXXXX	CAPEC-136	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	High
9	TXXXX.XXX	CAPEC-178	CWE-XXX	Xxxx Xxxxxxxx	predictive	High
10	TXXXX	CAPEC-	CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	High
11	TXXXX	CAPEC-1	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	High
12	TXXXX.XXX	CAPEC-492	CWE-XXXX	Xxxxxxxxxxx Xxxxxxx Xxxxxxxxxx Xxxxxxxxxx	predictive	High
13	TXXXX	CAPEC-184	CWE-XXX	Xxxxxxxx Xx Xxxx Xxxxxxx Xxxxxxxxx Xxxxx	predictive	High
14	TXXXX	CAPEC-108	CWE-XX, CWE-XX, CWE-XX	Xxx Xxxxxxxxx	predictive	High
15	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	High
16	TXXXX	CAPEC-	CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
17	TXXXX	CAPEC-37	CWE-XXX	Xxxxxxxxx Xxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxx	predictive	High
18	TXXXX	CAPEC-466	CWE-XXX	Xxxxxxx Xxxxxxxxxx Xx Xxx-xxxxxxxx	predictive	High
19	TXXXX.XXX	CAPEC-154	CWE-XXX	Xxxxxxxxxxxx	predictive	High
20	TXXXX	CAPEC-38	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	High
21	TXXXX.XXX	CAPEC-459	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
22	TXXXX	CAPEC-116	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	High
23	TXXXX	CAPEC-157	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	High
24	TXXXX.XXX	CAPEC-112	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	High
25	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	High

IOA - Indicator of Attack (356)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Class	Indicator	Type	Confidence
1	File	/+CSCOE+/logon.html	predictive	High
2	File	/act/ActDao.xml	predictive	High
3	File	/admin/login.php	predictive	High
4	File	/admin/return_add.php	predictive	High
5	File	/ajax.php?action=read_msg	predictive	High
6	File	/api/clusters/local/topics/{topic}/messages	predictive	High
7	File	/api/gen/clients/{language}	predictive	High
8	File	/app/options.py	predictive	High
9	File	/apply/index.php	predictive	High
10	File	/bin/httpd	predictive	Medium
11	File	/cgi-bin/wapopen	predictive	High
12	File	/ci_spms/admin/category	predictive	High
13	File	/ci_spms/admin/search/searching/	predictive	High
14	File	/classes/Master.php?f=delete_appointment	predictive	High
15	File	/classes/Master.php?f=delete_train	predictive	High
16	File	/Content/Template/root/reverse-shell.aspx	predictive	High
17	File	/course/api/upload/pic	predictive	High
18	File	/ctcprotocol/Protocol	predictive	High
19	File	/dashboard/menu-list.php	predictive	High
20	File	/data/remove	predictive	Medium
21	File	/debug/pprof	predictive	Medium
22	File	/ebics-server/ebics.aspx	predictive	High
23	File	/emap/devicePoint_addImgIco?hasSubsystem=true	predictive	High
24	File	/ffos/classes/Master.php?f=save_category	predictive	High
25	File	/forum/away.php	predictive	High
26	File	/goform/execCommand	predictive	High
27	File	/goform/net\_Web\_get_value	predictive	High
28	File	/goforms/rlminfo	predictive	High
29	File	/GponForm/usb_restore_Form?script/	predictive	High
30	File	/group1/uploa	predictive	High
31	File	/hedwig.cgi	predictive	Medium
32	File	/HNAP1	predictive	Low
33	File	/HNAP1/SetClientInfo	predictive	High
34	File	/include/file.php	predictive	High
35	File	/Items/*/RemoteImages/Download	predictive	High
36	File	/manage/IPSetup.php	predictive	High
37	File	/menu.html	predictive	Medium
38	File	/modules/profile/index.php	predictive	High
39	File	/nagiosxi/admin/banner_message-ajaxhelper.php	predictive	High
40	File	/navigate/navigate_download.php	predictive	High
41	File	/ocwbs/admin/?page=user/manage_user	predictive	High
42	File	/ofrs/admin/?page=user/manage_user	predictive	High
43	File	/xxx.xxx	predictive	Medium
44	File	/xxxxxxx/xxxxxxxxxxx.xxx	predictive	High
45	File	/xxx_xxxxxx/xxxxxxxxxxxxxxxxx.xxx	predictive	High
46	File	/xxxxxx	predictive	Low
47	File	/xxx/xxxxx.xxx	predictive	High
48	File	/xxxxxxxxxxxx/xxxxxxxxxxxx/xxxxxx/	predictive	High
49	File	/xxx/xxxxxx/xxxxxxxx	predictive	High
50	File	/xxxxxxxx-xxxx/xxxxxxxx_xxxx.xxx	predictive	High
51	File	/xxxx/xxxxxxx/xxxxx.xxx	predictive	High
52	File	/xxxxxxxxx//../	predictive	High
53	File	/xxxxxx/xxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	High
54	File	/xxxx.xxx	predictive	Medium
55	File	/xxxxxxxx-xxxx/xxx/xxxxx/xxxxxxx/xxxxxxxxxxxxxxxxxxxxx.xxx	predictive	High
56	File	/xxx/xxxx/xxxxxxxxxxxxxx	predictive	High
57	File	/xxx	predictive	Low
58	File	/xxxxxxxx_xxxxx/?x=xxxx_xxxxxxx	predictive	High
59	File	/xxxx/?xxxx=xx_xxxxxxxx	predictive	High
60	File	/xx-xxxxx/xxxxx-xxxx.xxx	predictive	High
61	File	/xx-xxxx	predictive	Medium
62	File	xxx.xxx	predictive	Low
63	File	xxxxxxx.xxx	predictive	Medium
64	File	xxxxx/?xxxx=xxxxxxx	predictive	High
65	File	xxxxx/xxx.xxx	predictive	High
66	File	xxxxx/xxxx_xxxxx_xxxx.xxx	predictive	High
67	File	xxxxx/xx_xxxxxxxx.xxx	predictive	High
68	File	xxxxx/xxxx-xxxxx.xxx	predictive	High
69	File	xxxxx/xxxxxxxxxx/xxxxxxxx.xxx	predictive	High
70	File	xxxxx/xxxxxxxx/xxxx_xxxxxxx.xxx	predictive	High
71	File	xxxxx/xxxxxxxxxxxxxxxxxx.xxxx	predictive	High
72	File	xxxxx/xxxxxxxx.xxxx	predictive	High
73	File	xxxxxxxxxxxxx/xxxxxxxxxx/xxx_xxxxx/xxxxxxx/xxxxx.xxx	predictive	High
74	File	xxxxx_xxxxx.xxx	predictive	High
75	File	xxxx_xxxxxxx.xxx	predictive	High
76	File	xxx/xxx/xxxxx	predictive	High
77	File	xxxxxxxxxxxxxx.xxx	predictive	High
78	File	xxxx.xxx_xxxxx_xxxx_xxxx-xxxx.xxx	predictive	High
79	File	xxxx.xxx	predictive	Medium
80	File	xxxx/xxxxx	predictive	Medium
81	File	xxxxxx.xxxx	predictive	Medium
82	File	xxxxxxxxxxxx.xxx/xxxxxxxxxxx.xxx/xxxxxxxxxxx.xxx/xxxxxxxxxxx.xxx	predictive	High
83	File	xxx_xxxxxxxxx.xxx	predictive	High
84	File	xxxxxxxxx.xxx	predictive	High
85	File	xx_xxxx.xxx	predictive	Medium
86	File	xxxxxxxxxx_xxxxx.xxx	predictive	High
87	File	xxxxx.xxx	predictive	Medium
88	File	xx.xxxxxx.xxxx.xxxx.xxxxxxx.xxxx	predictive	High
89	File	xxxxxx/xxx.x	predictive	Medium
90	File	xxxx_xxxxxxxx/xx.xxx	predictive	High
91	File	xxxx_xxxx.xxx	predictive	High
92	File	xxxxxxx.xxxxxxxx.xxx	predictive	High
93	File	xxxx.xx	predictive	Low
94	File	xxxxxxxxxx.xxx	predictive	High
95	File	x_xxxxxx	predictive	Medium
96	File	xxxxxxxxxxxxxxx.xxxx	predictive	High
97	File	xx.xxx	predictive	Low
98	File	xxxxxxxxxxxx.xxx	predictive	High
99	File	xxxxxxxxxx.xxx	predictive	High
100	File	xxxx_xxxx.xxx	predictive	High
101	File	xxxxxxxx_xxxxx_xxxxxxxxx.xxx	predictive	High
102	File	xxxxxxx/xxxx/xxxxx/xxxxx_xxxx.x	predictive	High
103	File	xxxxxxxx.xxx	predictive	Medium
104	File	xxxxx.xxx	predictive	Medium
105	File	xxxxxxx.xxx	predictive	Medium
106	File	xxxx-xxxxx.x	predictive	Medium
107	File	xxxx.x	predictive	Low
108	File	xxxx.xxx	predictive	Medium
109	File	xxxxxxxxxxxxxxxxxxxx.xxx	predictive	High
110	File	xx_xxxx.xxx	predictive	Medium
111	File	xxxxxxxxx.xxx.xxx	predictive	High
112	File	xxxxxxxxxx.xxx	predictive	High
113	File	xxxxx.xxx	predictive	Medium
114	File	xxxxxxxxxxxxxxxxx.xxxx	predictive	High
115	File	xxxx.xxx	predictive	Medium
116	File	xxxxxxxx/xxxx_xxxx	predictive	High
117	File	xxxxxxx/xxxxxxxxxxxx.xxx	predictive	High
118	File	xxxxxxxxxxxxxxxxxxxxxxxxxxx.xxx	predictive	High
119	File	xxxxx/xxxxxxx/xxxxxxxxxxxxxxxxxxxx.xxx	predictive	High
120	File	xxxx.xxx	predictive	Medium
121	File	xxxxxxxxxxxxxxxxxxx.xxxx	predictive	High
122	File	xxxx.xx	predictive	Low
123	File	xxxxxxxxxxxxxx.xxx	predictive	High
124	File	xxx/xxxxxx.xxx	predictive	High
125	File	xxx/xxxxxxxxxxx/xxxxxxx.xxx	predictive	High
126	File	xxxxx.xxxx	predictive	Medium
127	File	xxxxx.xx	predictive	Medium
128	File	xxxxx.xxx	predictive	Medium
129	File	xxxxx_xxxxxx_xxxxxxxxxx.xxx	predictive	High
130	File	xxxxxxx.x	predictive	Medium
131	File	xxxxxxxx/xx/xxxx_xxxxxx.xx	predictive	High
132	File	xxxxx.xxx	predictive	Medium
133	File	xxx.x	predictive	Low
134	File	xxxx.xxx	predictive	Medium
135	File	xxxx_xxxx.xxx	predictive	High
136	File	xxx_xxxxxx_xxxxxx.xx	predictive	High
137	File	xxxx.x	predictive	Low
138	File	xxxxxx/xxxxxx/xxxxxx-xx.x	predictive	High
139	File	xxx_xxx.xx	predictive	Medium
140	File	xxxxxxxxxxxx/xxxxxx_xxxxx.xx	predictive	High
141	File	xxxx/xxxxxxxx/xxxxxx_xxxxxxxx.x	predictive	High
142	File	xxxxx.xxx	predictive	Medium
143	File	xxxxx.xxx	predictive	Medium
144	File	xxxxx/	predictive	Low
145	File	xxxxx_xxx	predictive	Medium
146	File	xxxxx/xxxxxxxx/xxxxxxxx.xx	predictive	High
147	File	xxx_xxxxx.x	predictive	Medium
148	File	xxxxxx/xxxxxx.xxx	predictive	High
149	File	xxxxxxxx.xx	predictive	Medium
150	File	xxxxxxxxxxxxxxx.xxxx	predictive	High
151	File	xxx_xx/xxx_xx_xxxxxx.x	predictive	High
152	File	xxxxxxx.xxx	predictive	Medium
153	File	xxxx_xxxx.xxx	predictive	High
154	File	xxxxxxxxx.xxx	predictive	High
155	File	xxxxxx.xxx	predictive	Medium
156	File	xxxxx.xxxx_xxxx.xxx	predictive	High
157	File	xxxx_xxxxxxx.xxx	predictive	High
158	File	xxx_xxxxxx.xx	predictive	High
159	File	xxxxxxxxx.xxx.xxx	predictive	High
160	File	xxx/xxxxxx_xxxx.xxx	predictive	High
161	File	xxxxx/xxxxxxxx/xxx/xxx_xxxxx.xxx	predictive	High
162	File	xxxxxxxx.xxx	predictive	Medium
163	File	xxxxxxxxx.xxx	predictive	High
164	File	xxxxxxx/xxx/xxxxxxx/xxxxxx/xxxx-xxxxxxxxxx/<xxxxxx>/xx.xxx	predictive	High
165	File	xxxx.xxx	predictive	Medium
166	File	xxxxxxxx.xxx	predictive	Medium
167	File	xxxxxxxxxxxxxx.xxx	predictive	High
168	File	xxxxx-xxxxxxxx-xxxxxxxxx.xxx	predictive	High
169	File	xxxx.xxx	predictive	Medium
170	File	xxxxx.xxx	predictive	Medium
171	File	xxxxxxxxxx.xxx	predictive	High
172	File	xxxxxxxx.xxx	predictive	Medium
173	File	xxxxxxxx/xxxxx/xxxxxxxx?xxxxxxxx	predictive	High
174	File	xxxxxx.x	predictive	Medium
175	File	xxxxxx_xxxxxx.xxx	predictive	High
176	File	xxxxxx/xxxxxxxx.xxx	predictive	High
177	File	xxxx.xxx	predictive	Medium
178	File	xxxx.xxx	predictive	Medium
179	File	xxxx/xxxxx.xxx	predictive	High
180	File	xxxx/xxxx.xxx	predictive	High
181	File	xxxx_xxxx.xxx	predictive	High
182	File	xxxxxxx.xxx	predictive	Medium
183	File	xxxxxxx.xxx	predictive	Medium
184	File	xxx_xxxxx.xx	predictive	Medium
185	File	xx_xxxx/xxxx_xxxx.x	predictive	High
186	File	xx_xxxx/xxxxxxxxxxxxxxxx.x	predictive	High
187	File	xxx_xxxxx.x	predictive	Medium
188	File	xxxxxxx.xxx	predictive	Medium
189	File	xxxxxxx-xxxxxxx.xxx	predictive	High
190	File	xxxxxxxx.xxx	predictive	Medium
191	File	xxxxxx\xxxxxxxx\xx_xxxxx_xxxxxxx.xxx	predictive	High
192	File	xxxxxxx.xxx	predictive	Medium
193	File	xxxx-xxxxx.xxx	predictive	High
194	File	xxxx-xxxxxxxx.xxx	predictive	High
195	File	xxxxx/xxxx_xxxxx.x	predictive	High
196	File	xxxxx/xxxx-xxxxxx.x	predictive	High
197	File	xxxxxxxxx/xxxxxxxxxxxxxxxxxx.xxx	predictive	High
198	File	xxxxxxxxx	predictive	Medium
199	File	xxxxxxx_xxxxx.xxx	predictive	High
200	File	xxxxxx.xxx	predictive	Medium
201	File	xxxx.xxxx	predictive	Medium
202	File	xxxx.xxx	predictive	Medium
203	File	xxxxxxxxx.xxx	predictive	High
204	File	xxxxx.xxx	predictive	Medium
205	File	xxxxx/xxxxxxxx-xxxxxxxxx.xxx	predictive	High
206	File	xxxx\xxxxxxxxxx\xxxxxxx_xxxxxxxxx.xxx	predictive	High
207	File	xxxxx.x	predictive	Low
208	File	xxxx-xxxxx-xxxxxxx.xxx	predictive	High
209	File	xxxxx.xxx	predictive	Medium
210	File	xxx/xxxxxx/xxxxxxxxxxxxx.xxx	predictive	High
211	File	xxxxxxx-xxxx.xxx	predictive	High
212	File	xx-xxxxxxxx/xxxxxxxx/xxxxxxx/xxxxxxxxxxxxxxxx.xxx	predictive	High
213	File	xx-xxxxxxxx/xxxx-xxx/xxxxxxxxx/xxxxx-xx-xxxx-xxxxx-xxxxxxxxxx.xxx	predictive	High
214	File	xxxxxx.xxxx	predictive	Medium
215	File	\xxxxx\xxxxxxxxxx\xxxxxxxx.xxx	predictive	High
216	File	~/xxxxxxxx-xxxxxxxx.xxx	predictive	High
217	File	~/xxxxxx-xxxxx-xxxxxxx.xxx	predictive	High
218	Library	xxxx/xxx/xxxxxx.xxx	predictive	High
219	Library	xxxxx.xxx	predictive	Medium
220	Library	xxx/xxxxxxx.xx	predictive	High
221	Library	xxxxxxx/xxxxxxxx.xxx	predictive	High
222	Library	xxx/xxx/xxx/xxxxxx/xxxxx/xxxxxxxxx.xxxxx.xxx	predictive	High
223	Argument	$_xxxxxx['xxx_xxxx']	predictive	High
224	Argument	?xxxxxx	predictive	Low
225	Argument	xx_xxxxx_xxx_xxxx	predictive	High
226	Argument	xxxxx	predictive	Low
227	Argument	xxxxx_xxxxxxxx	predictive	High
228	Argument	xxx	predictive	Low
229	Argument	xxxx(xxxx_xxxx)	predictive	High
230	Argument	xxxxx	predictive	Low
231	Argument	xxxxxxxx	predictive	Medium
232	Argument	xxxxxxx_xx	predictive	Medium
233	Argument	xxxxxxxxxx_xxxx	predictive	High
234	Argument	xxx_xxx	predictive	Low
235	Argument	xxx	predictive	Low
236	Argument	xxxxxxxxxx	predictive	Medium
237	Argument	xxxxxxxx	predictive	Medium
238	Argument	xxxx_xx	predictive	Low
239	Argument	xxxxxxx	predictive	Low
240	Argument	xxxxxxx-xxxxxx	predictive	High
241	Argument	xxxxxxx-xxxxxxxx-xxxxxx	predictive	High
242	Argument	xxxxx_xx	predictive	Medium
243	Argument	xxxx	predictive	Low
244	Argument	xxxx_xxxx	predictive	Medium
245	Argument	xxxxxx	predictive	Low
246	Argument	xxxxxxxxxxx	predictive	Medium
247	Argument	xxxx	predictive	Low
248	Argument	xxxx_xxxxxx=xxxx	predictive	High
249	Argument	xxxxx	predictive	Low
250	Argument	xxxxxxxxxx	predictive	Medium
251	Argument	xxxxxx	predictive	Low
252	Argument	xxxx	predictive	Low
253	Argument	xxxxxxxxxx	predictive	Medium
254	Argument	xxxxxxxx	predictive	Medium
255	Argument	xxxxxxxx	predictive	Medium
256	Argument	xxxxxxxxxxxxxxx	predictive	High
257	Argument	xxxxx	predictive	Low
258	Argument	xxxx	predictive	Low
259	Argument	xxxx	predictive	Low
260	Argument	xxxxxxxxxxxxxx	predictive	High
261	Argument	xx	predictive	Low
262	Argument	xx	predictive	Low
263	Argument	xx/xxxxx	predictive	Medium
264	Argument	xx_xxxxxxxx	predictive	Medium
265	Argument	xxxxxxxx	predictive	Medium
266	Argument	xxxxxx	predictive	Low
267	Argument	xxxx	predictive	Low
268	Argument	xxxx/xxx_xxxxxxxxx	predictive	High
269	Argument	xxxxxxxx_xxx	predictive	Medium
270	Argument	xxxx	predictive	Low
271	Argument	xxxxxxxxxx	predictive	Medium
272	Argument	xxxxxxxx	predictive	Medium
273	Argument	xxx	predictive	Low
274	Argument	xxx	predictive	Low
275	Argument	xx	predictive	Low
276	Argument	xxxx/xxxxxxxxxxx	predictive	High
277	Argument	xxxxxxx/xxxxxxx	predictive	High
278	Argument	xxxxxxxx	predictive	Medium
279	Argument	xx_xx	predictive	Low
280	Argument	xxxxxx xxxxxx	predictive	High
281	Argument	xxxxxxxxxx	predictive	Medium
282	Argument	xxxx	predictive	Low
283	Argument	xxxxxx	predictive	Low
284	Argument	xxxxxx	predictive	Low
285	Argument	xxxxxxxx/xxxxxx	predictive	High
286	Argument	xxxx_xxxxx	predictive	Medium
287	Argument	xxx	predictive	Low
288	Argument	xxxxxxxx	predictive	Medium
289	Argument	xxxx	predictive	Low
290	Argument	xxxxxxxx	predictive	Medium
291	Argument	xxxxxxxxx	predictive	Medium
292	Argument	xxx_xxxxxx_xxxx	predictive	High
293	Argument	xxxxxxxx	predictive	Medium
294	Argument	xxxxxxx xxxxx	predictive	High
295	Argument	xxxxxx	predictive	Low
296	Argument	xxxxx_xxxxxx	predictive	Medium
297	Argument	xxxxxxxx_xx	predictive	Medium
298	Argument	xxxxxxx	predictive	Low
299	Argument	xxxxxxxxxx	predictive	Medium
300	Argument	xxxxxxxxxxxxxx	predictive	High
301	Argument	xxxxxxxx	predictive	Medium
302	Argument	xxxxxxxxxx	predictive	Medium
303	Argument	xxxxxx	predictive	Low
304	Argument	xxxxxxxxxxxxxxx	predictive	High
305	Argument	xxxxxx/xxxxxx/xxx	predictive	High
306	Argument	xxxxxx	predictive	Low
307	Argument	xxxxxx_xxxxxx	predictive	High
308	Argument	xxxxxxxxxx	predictive	Medium
309	Argument	xxxxxxx	predictive	Low
310	Argument	xxxxxxxx[xxxx xxxxxxx][xxxxxxxxxxxxxxxxxx]	predictive	High
311	Argument	xxxxxxxxxxx	predictive	Medium
312	Argument	xxxx_xxxxx	predictive	Medium
313	Argument	xxxxxxx	predictive	Low
314	Argument	xxxxxxx	predictive	Low
315	Argument	xxxxxxxx	predictive	Medium
316	Argument	xxxxxx	predictive	Low
317	Argument	xxx	predictive	Low
318	Argument	xxx	predictive	Low
319	Argument	xxx	predictive	Low
320	Argument	xxxxx	predictive	Low
321	Argument	xxxxxxxxx	predictive	Medium
322	Argument	xxxx_xx[]	predictive	Medium
323	Argument	xxxxx/xxxxxxxx	predictive	High
324	Argument	xxxxxx	predictive	Low
325	Argument	xxx	predictive	Low
326	Argument	xxx	predictive	Low
327	Argument	xxxx	predictive	Low
328	Argument	xxxx-xxxxx	predictive	Medium
329	Argument	xxxxxx	predictive	Low
330	Argument	xxxxxxxx	predictive	Medium
331	Argument	xxxxxxxx/xxxxxx	predictive	High
332	Argument	xxxxxxxxxxxx	predictive	Medium
333	Argument	xxxx_xxxx	predictive	Medium
334	Argument	xxx	predictive	Low
335	Argument	xxxxxxx_xxxx	predictive	Medium
336	Argument	xxxxxxxx	predictive	Medium
337	Argument	x-xxxxxxxxx-xxx	predictive	High
338	Argument	x-xxxxxxxxx-xxxxxx	predictive	High
339	Argument	_xxxx[_xxx_xxxx_xxxx	predictive	High
340	Argument	__xxxxxxxxxxxxx	predictive	High
341	Argument	__xxxxxxxxx	predictive	Medium
342	Input Value	"><xxxxxx>xxxxx("xxx")</xxxxxx>	predictive	High
343	Input Value	'"><xxxxxx>xxxxx(/xxx/)</xxxxxx>	predictive	High
344	Input Value	../	predictive	Low
345	Input Value	../..	predictive	Low
346	Input Value	../../../../xxxxxx/xxxxxx/xxxxxx/xxxxxx.xxxxxx-x.xxx	predictive	High
347	Input Value	../../../../xxxxx_xxxxx.xxx	predictive	High
348	Input Value	xxx' xxx xxxxx(x) xxx 'xxxx'='xxxx	predictive	High
349	Input Value	xxxxx' xx 'x'='x	predictive	High
350	Input Value	x=x	predictive	Low
351	Pattern	\|xx xx xx\|	predictive	Medium
352	Network Port	xxxxx	predictive	Low
353	Network Port	xxx	predictive	Low
354	Network Port	xxx/xxxx	predictive	Medium
355	Network Port	xxx/xxxxx	predictive	Medium
356	Network Port	xxx/xxx (xxx)	predictive	High

References (3)

The following list contains external sources which discuss the actor and the associated activities:

◂ PreviousOverviewNext ▸

Do you know our Splunk app?

Download it now for free!