H0lyGh0st Analysis

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (1000)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en	924
zh	24
ru	16
fr	12
de	6

Country

cn	412
us	278
vn	224
ru	24
ie	14

Actors

Indexsinas	1
Venom RAT	1
Mirai	1

Activities

Interest

Timeline

Type

Not Defined	282
Operating System	62
Content Management System	34
WordPress Plugin	24
Web Browser	24

Vendor

Not Defined	234
Microsoft	62
Apple	36
Oracle	30
Google	12

Product

Microsoft Windows	34
Apple macOS	12
Apple iOS	10
Mozilla Firefox	10
Google Android	8

Vulnerabilities

#	Vulnerability	Base	Temp	0day	Today	Exp	Rem	EPSS	CTI	CVE
1	PHP phpinfo cross site scripting	4.3	3.9	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.01960	0.04	CVE-2007-1287
2	Tiki Admin Password tiki-login.php improper authentication	8.0	7.7	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00936	2.44	CVE-2020-15906
3	TikiWiki tiki-register.php input validation	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.01075	4.91	CVE-2006-6168
4	DZCP deV!L`z Clanportal config.php code injection	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00943	0.28	CVE-2010-0966
5	Microsoft Windows win32k.sys xxxMenuWindowProc denial of service	5.5	5.0	$5k-$25k	$0-$5k	Proof-of-Concept	Unavailable	0.00000	0.03
6	Apple CUPS Interface cross site scripting	4.3	4.1	$5k-$25k	$0-$5k	High	Official Fix	0.00864	0.00	CVE-2014-2856
7	MGB OpenSource Guestbook email.php sql injection	7.3	7.3	$0-$5k	$0-$5k	High	Unavailable	0.01302	1.10	CVE-2007-0354
8	Ivanti Secure Access Client config	8.1	8.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00043	0.05	CVE-2023-35080
9	Apache Superset External URL redirect	4.9	4.9	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.00436	0.03	CVE-2021-28125
10	LogicBoard CMS away.php redirect	6.3	6.1	$0-$5k	$0-$5k	Not Defined	Unavailable	0.00000	2.27
11	Oracle PeopleSoft Enterprise PeopleTools Integration Broker access control	6.5	5.9	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00799	0.05	CVE-2017-3548
12	Pirelli DRG A115 v3 ADSL Router DNS privileges management	7.3	6.6	$0-$5k	$0-$5k	Functional	Workaround	0.00000	0.02
13	nginx request smuggling	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00241	2.48	CVE-2020-12440
14	NotificationX Plugin SQL Statement sql injection	5.6	5.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02414	0.04	CVE-2022-0349
15	Pligg cloud.php sql injection	6.3	6.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00000	0.61

Campaigns (1)

These are the campaigns that can be associated with the actor:

H0lyGh0st

IOC - Indicator of Compromise (2)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP address	Hostname	Actor	Campaigns	Identified	Type	Confidence
1	127.0.0.1	localhost	H0lyGh0st		10/10/2022	verified	High
2	XXX.XX.XX.XXX		Xxx-xxxx	Xxxxxxxxx	07/15/2022	verified	High

TTP - Tactics, Techniques, Procedures (25)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Class	Vulnerabilities	Access Vector	Type	Confidence
1	T1006	CAPEC-126	CWE-22, CWE-24, CWE-29	Path Traversal	predictive	High
2	T1040	CAPEC-102	CWE-319	Authentication Bypass by Capture-replay	predictive	High
3	T1055	CAPEC-10	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	High
4	T1059	CAPEC-242	CWE-94, CWE-1321	Argument Injection	predictive	High
5	T1059.007	CAPEC-209	CWE-79, CWE-80	Cross Site Scripting	predictive	High
6	TXXXX	CAPEC-122	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
7	TXXXX.XXX	CAPEC-191	CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	High
8	TXXXX	CAPEC-136	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	High
9	TXXXX.XXX	CAPEC-178	CWE-XXX	Xxxx Xxxxxxxx	predictive	High
10	TXXXX	CAPEC-	CWE-XXX, CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	High
11	TXXXX	CAPEC-1	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	High
12	TXXXX.XXX	CAPEC-492	CWE-XXXX	Xxxxxxxxxxx Xxxxxxx Xxxxxxxxxx Xxxxxxxxxx	predictive	High
13	TXXXX	CAPEC-108	CWE-XX, CWE-XX, CWE-XX	Xxx Xxxxxxxxx	predictive	High
14	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	High
15	TXXXX	CAPEC-102	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
16	TXXXX.XXX	CAPEC-	CWE-XXX	Xxxxxxxx Xx Xxxxxxxxxxxxx Xxxx	predictive	High
17	TXXXX.XXX	CAPEC-154	CWE-XXX	Xxxxxxxxxxxx	predictive	High
18	TXXXX	CAPEC-38	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	High
19	TXXXX.XXX	CAPEC-459	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
20	TXXXX	CAPEC-116	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	High
21	TXXXX.XXX	CAPEC-	CWE-XX	Xxxxxxxxxxxxx	predictive	High
22	TXXXX	CAPEC-157	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	High
23	TXXXX.XXX	CAPEC-	CWE-XXX, CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	High
24	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	High
25	TXXXX	CAPEC-	CWE-XXX	Xxxxxxxxxxx Xxxxxx	predictive	High

IOA - Indicator of Attack (347)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Class	Indicator	Type	Confidence
1	File	/admin/	predictive	Low
2	File	/admin/admin_user.php	predictive	High
3	File	/admin/category/save	predictive	High
4	File	/admin/list_ipAddressPolicy.php	predictive	High
5	File	/admin/subject.php	predictive	High
6	File	/auth/auth.php?user=1	predictive	High
7	File	/boaform/device_reset.cgi	predictive	High
8	File	/cgi-bin/cstecgi.cgi	predictive	High
9	File	/cgi-bin/cstecgi.cgi?action=login	predictive	High
10	File	/cgi-bin/cstecgi.cgi?action=login&flag=1	predictive	High
11	File	/cgi-bin/nas_sharing.cgi	predictive	High
12	File	/cgi-bin/system_mgr.cgi	predictive	High
13	File	/cgi-bin/wlogin.cgi	predictive	High
14	File	/cgi/cpaddons_report.pl	predictive	High
15	File	/common/dict/list	predictive	High
16	File	/debug/pprof	predictive	Medium
17	File	/DXR.axd	predictive	Medium
18	File	/forum/away.php	predictive	High
19	File	/goform/DhcpListClient	predictive	High
20	File	/goform/goform_get_cmd_process	predictive	High
21	File	/HNAP1/	predictive	Low
22	File	/hrm/leaverequest.php	predictive	High
23	File	/importexport.php	predictive	High
24	File	/install/	predictive	Medium
25	File	/Interface/DevManage/VM.php	predictive	High
26	File	/main/doctype.php	predictive	High
27	File	/main/webservices/additional_webservices.php	predictive	High
28	File	/mc	predictive	Low
29	File	/ndmComponents.js	predictive	High
30	File	/net/bluetooth/rfcomm/core.C	predictive	High
31	File	/oauth/idp/.well-known/openid-configuration	predictive	High
32	File	/opt/zimbra/jetty/webapps/zimbra/public	predictive	High
33	File	/pdf	predictive	Low
34	File	/register.php	predictive	High
35	File	/remote/put_file	predictive	High
36	File	/setting/NTPSyncWithHost	predictive	High
37	File	/spip.php	predictive	Medium
38	File	/squashfs-root/etc_ro/custom.conf	predictive	High
39	File	/src/c-blosc2/plugins/codecs/ndlz/ndlz4x4.c	predictive	High
40	File	/xxxxx/xxxxxxxxxxx.xxx	predictive	High
41	File	/xxxxxxx/xxxxxxxxxxx.xxx	predictive	High
42	File	/xxx/xxxx/xxxxxxxxxxxx?xxxxxxxx=xxxxx	predictive	High
43	File	/xxxxxxxx/xxxxxx-xxxxxxx.xxx	predictive	High
44	File	/xxxxxx-xxxxxxxx-xxxx/	predictive	High
45	File	/xxxxxxx/xxxx.xxx	predictive	High
46	File	/xxx/xxx/xxxx-xx/xx	predictive	High
47	File	/xxx/xxx/xxxx/xxxx-xxx-xxxxxxxx	predictive	High
48	File	/xxx/xxxxxxxx.xxx	predictive	High
49	File	/xx-xxxxx/xxxxx-xxxx.xxx	predictive	High
50	File	xxxxxxxxxxx.xxx	predictive	High
51	File	xxxxxx/xxxx/xxxxxx.xxxx	predictive	High
52	File	xxxxxxx.xxx	predictive	Medium
53	File	xxx.xxx	predictive	Low
54	File	xxxxx.xxx	predictive	Medium
55	File	xxxxx.xxxx	predictive	Medium
56	File	xxxxx.xxx?x=xxxxxx&x=xxxxxx&x=xxxxxx	predictive	High
57	File	xxxxx/xxxxxxxxxxxxxxx.xxx	predictive	High
58	File	xxxxx/xxxxxxx/xxxxxxx_xxxx_xxxx.xxx	predictive	High
59	File	xxxxx/xxxx/xxxxxx/xxxxxxx/xxxxxx/xxxx_xxxxxxxxxx.xxx	predictive	High
60	File	xxxxxxx.xxx	predictive	Medium
61	File	xxxxx_xxxxxx.xxx	predictive	High
62	File	xxxxxxxx.xxx	predictive	Medium
63	File	xxx/xxxxxxxx/xxxxxxxxxxx.xxx	predictive	High
64	File	xxx/xxxxxxx/xxxxxxxxxxx_xxxxxx.xx	predictive	High
65	File	xxxxxxx.x	predictive	Medium
66	File	xxxxxxxx.xxxx	predictive	High
67	File	xxxxxxxxxxxxxxxx.xxxx	predictive	High
68	File	xxxxxxx.xx	predictive	Medium
69	File	xxxxxxx/xxxxx/xxxx/	predictive	High
70	File	xxxxxxx.xxxx	predictive	Medium
71	File	xxx/xxxxx	predictive	Medium
72	File	xxxxxx.x	predictive	Medium
73	File	xxxxx/xxx-xxxxxx.x	predictive	High
74	File	xxxxxxxxxx/xxx/xxxxxxx.xxxx	predictive	High
75	File	xxxxxxx/xxxxxxx/xxxxxxx.xxxx?xxxx	predictive	High
76	File	xxxx.x	predictive	Low
77	File	xxx-xxxx.xxx	predictive	Medium
78	File	xxx-xxx/xxxxxxx_xxxxxxxx	predictive	High
79	File	xxx-xxx/xxxxx/xxxxx/xxxxx/xxx_xxxx/xxxx_xxxx/	predictive	High
80	File	xxxxxxxx/xxxxxxxxxxx/xxxxxxx/xxxxxxx/xxxxx.xxx	predictive	High
81	File	xxxxx.xxx	predictive	Medium
82	File	xxx.xxx?xxx=xxxxx_xxxx	predictive	High
83	File	xxxxxx/xxx.x	predictive	Medium
84	File	xxxxxx/xxx.x	predictive	Medium
85	File	xxxxx-xxxxxxx.xxx	predictive	High
86	File	xxxxxx.xxx	predictive	Medium
87	File	xxxxxx.xxx	predictive	Medium
88	File	xxxxxx/x.x	predictive	Medium
89	File	xxxx/xxxxxx.xxxx	predictive	High
90	File	xxxxxxxx.xxx	predictive	Medium
91	File	xxxxxxx.xxx	predictive	Medium
92	File	xxxxxxx.xxx	predictive	Medium
93	File	xxxxxxx.xxx	predictive	Medium
94	File	xxxxx.xxx	predictive	Medium
95	File	xxxxxxxxxxxxxxxx-xxx/xxx/xxxx/xxxx/xxx/xxxxxx/xxxxxxxxxxxxxxxx/xxx/xxxxxxxx/xxxx/xxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	High
96	File	xxxxxxx/xxx/xxx/xxx_xxxxxx.x	predictive	High
97	File	xxxxxxx/xxxxx/xxxxx/xxxxxx-xxx.x	predictive	High
98	File	xxxxx.xxx	predictive	Medium
99	File	xxxxx_xx.xx	predictive	Medium
100	File	xxxxxxx.x	predictive	Medium
101	File	xxxx-xxxx.x	predictive	Medium
102	File	xx/xxx/xxxxxx/xxxxxxx.x	predictive	High
103	File	xxxx.xxx	predictive	Medium
104	File	xxxxxx/xxxxx/xxxx.xxxxxxxx.xxx	predictive	High
105	File	xxxxxxxxxx.xxx	predictive	High
106	File	xxxxxx.xxxx	predictive	Medium
107	File	xx-xxxxxxx/xxxxxxx	predictive	High
108	File	xxxxxx/xxxxxxxxxxxxx	predictive	High
109	File	xxxx.xxx	predictive	Medium
110	File	xxxx_xxxxxxx.xxx.xxx	predictive	High
111	File	xxxxxxxxx.xxx	predictive	High
112	File	xxxxxx_xxxx_xxxxxx.xxx	predictive	High
113	File	xxxx.xxx	predictive	Medium
114	File	xxxx.x	predictive	Low
115	File	xxxx_xxxx.x	predictive	Medium
116	File	xxxxxx_xxxxxxx.xxxx	predictive	High
117	File	xxx/xxxxxx.xxx	predictive	High
118	File	xxx/xxxxxxxxxxx/xxxxxxx.xxx	predictive	High
119	File	xxxxx.xxx	predictive	Medium
120	File	xxxxx.xxxx	predictive	Medium
121	File	xxxxx.xxx	predictive	Medium
122	File	xxxxxxxx.xxx	predictive	Medium
123	File	xxxxxxx.x	predictive	Medium
124	File	xxxxxxxxxxxxxxxx.xxx	predictive	High
125	File	xxxxxxxxxxxxx.xxx	predictive	High
126	File	xxxxx.x	predictive	Low
127	File	xxx/xxxxxx.xxx	predictive	High
128	File	xxxx.x	predictive	Low
129	File	xxxxxxxxxx/xxxxxxxxxxxxx.x	predictive	High
130	File	xxxxxxx/xxxx.x	predictive	High
131	File	xxxxxxx.xx	predictive	Medium
132	File	xxxxx.xxx	predictive	Medium
133	File	xxxxxxxxxx/xx.x	predictive	High
134	File	xxxx.xxx	predictive	Medium
135	File	xxxxxxxx.xxx	predictive	Medium
136	File	xxxx/xxxxxxxxxx.xxx	predictive	High
137	File	xxxxxx.xxx	predictive	Medium
138	File	xxxxx.xxx.xxx	predictive	High
139	File	xxx_xxxxx.xxxx/xxx_xxxxxxxx.xxxx	predictive	High
140	File	xxx/xxxxxxxxx/xxx_xxxxxxxxx.x	predictive	High
141	File	xxxxxx.xxx	predictive	Medium
142	File	xxx_xxxx.xxx	predictive	Medium
143	File	xxx/xx/xxx/xxxxxxxxxx	predictive	High
144	File	xx/xxxxxxx/xxxxxxxx/xxx-xxxxxx.x	predictive	High
145	File	xx/xxxxxxx/xxxxxxxx/xxx.x	predictive	High
146	File	xxxxx.xxx	predictive	Medium
147	File	xxxxxxxx-xxxxxxxx.xxx	predictive	High
148	File	xxxxxxxxxxx.xxxx	predictive	High
149	File	xxxxxxx.xxx	predictive	Medium
150	File	xxxxxxx-xxxxxx.xxx	predictive	High
151	File	xxxxxx/xxxxxxxxxx/xxx/xxxx.xxx	predictive	High
152	File	xxxxxxx/xxx/xxxxxxx/xxxxxx/xxxx-xxxxxxxxxx/<xxxxxx>/xx.xxx	predictive	High
153	File	xxxxxxx.xxx	predictive	Medium
154	File	xxx.xxxxx.xxx	predictive	High
155	File	xxxxx.xxx	predictive	Medium
156	File	xxxxx.xxx	predictive	Medium
157	File	xxxxxxxxxx.xxx	predictive	High
158	File	xxxxxxxxxxxx.xxx	predictive	High
159	File	xxxxxxx.xx	predictive	Medium
160	File	xxx.xxx	predictive	Low
161	File	xx_xxx.xx	predictive	Medium
162	File	xxxxxx.xx	predictive	Medium
163	File	xxxxxxx/xxxxxxxxxx	predictive	High
164	File	xxxxxx.xxx	predictive	Medium
165	File	xxxxxx-xxxxx.xxx	predictive	High
166	File	xxxxxx_xxxxxxxxx.xxx	predictive	High
167	File	xxxxxxx.xxx	predictive	Medium
168	File	xxxx_xxxxxxx.xxx	predictive	High
169	File	xx_xxxxx_xxxx.xxx	predictive	High
170	File	xxxxxxxx_xxxxxxxxx.xxx	predictive	High
171	File	xxx.xxxx	predictive	Medium
172	File	xxxxxxx.xxx	predictive	Medium
173	File	xxxxxxxxxxxxxxx.xxx	predictive	High
174	File	xxx/xxxx/xxxx/xx/xxxxx/xxxxx/xxxx/xxxxxxxxxxxx.xxxx	predictive	High
175	File	xxx/xxxx/xxxx/xxx/xxxxxxxxxx/xxxxxxxxxx/xxxxxxxxxxxxxxxxxx.xxxx	predictive	High
176	File	xxxxxxxx.xxx	predictive	Medium
177	File	xxx_xxxxxxx.x	predictive	High
178	File	xxxx-xxxxx.xxx	predictive	High
179	File	xxxx-xxxxx.xxx	predictive	High
180	File	xxxx-xxxxxxxx.xxx	predictive	High
181	File	xxxxx/xxxxx/xxxxxxxxx/xxxxxx.xxx	predictive	High
182	File	xxxxx_xxx_xxxxxxx.xxx	predictive	High
183	File	xxxxx.xxx	predictive	Medium
184	File	xxxxxxxx-xxx.xxx	predictive	High
185	File	xx/x.x.xx.xxxxxx/xxxxxxx/xx/xxxxx.xx.xxxxxxxxx	predictive	High
186	File	xxxxxx/xxxxx.xxx/xxxx/xxxx	predictive	High
187	File	xxxxxxxx/xxxxxxxx	predictive	High
188	File	xxxxx/xxxxxxxx-xxxxxxxxx.xxx	predictive	High
189	File	xxxx_xxxxx.xxx	predictive	High
190	File	xxxx/xxx/xxxx-xxxxx.xxx	predictive	High
191	File	xxxx/xxxxxxxx/xxxxxxxx.xxxx	predictive	High
192	File	xx/xxxxxxxxx/xx	predictive	High
193	File	xxxxxx.xxx	predictive	Medium
194	File	xxx_xxxxx.xxxx	predictive	High
195	File	xxxxx.xxxxxx.xxxxxxx.xxx	predictive	High
196	File	xxxxxx.xxx	predictive	Medium
197	File	xxxxxxxx.xxx	predictive	Medium
198	File	xxxxxx.xxx	predictive	Medium
199	File	xx.xxxxxx/xxxxxxx/	predictive	High
200	File	xx-xxxxx/xxxxx-xxxx.xxx	predictive	High
201	File	xx-xxxxxxx/xxxxxxx/xxxx-xx-xxxx/	predictive	High
202	File	xx-xxxxxxxx/xxxx-xxx/xxxxxxxxx/xxxxx-xx-xxxx-xxxxx-xxxxxxxxxx.xxx	predictive	High
203	File	xx-xxxxxxxxxxx.xxx	predictive	High
204	File	xx/xx/xxxxx	predictive	Medium
205	File	xxxx.xx	predictive	Low
206	File	\xx_xxxx\xxx\xxxxxxxx\xxxxxxxx_xxxxxxx.xx	predictive	High
207	File	{{xxxxxxxx}}/xxxxx	predictive	High
208	Library	/_xxx_xxx/xxxxx.xxx	predictive	High
209	Library	xx/xxx/xxxx_xxxxxx.xxx	predictive	High
210	Library	x:/xxxxxxx xxxxx/xxxxx/xxxxxxx.xxx	predictive	High
211	Library	xxxxxxx.xxx	predictive	Medium
212	Library	xxxxxx_xxxxxxxx.xxx	predictive	High
213	Library	xxxxxxx-xxxxxx.xxx	predictive	High
214	Library	xxx/xxxx.x	predictive	Medium
215	Library	xxx/xx/xxxxx/xxxxxxxxxx/xxxx.xx	predictive	High
216	Library	xxx/xxx.x	predictive	Medium
217	Library	xxxxxx.xxx	predictive	Medium
218	Library	xxxxx.xxx	predictive	Medium
219	Library	xxxxxxx.xxx	predictive	Medium
220	Library	xxxxxx.xxx	predictive	Medium
221	Argument	.xxxxxxxx	predictive	Medium
222	Argument	xx/xx	predictive	Low
223	Argument	xxxxxx	predictive	Low
224	Argument	xxxxx	predictive	Low
225	Argument	xxxx	predictive	Low
226	Argument	xxxxxxxxxxxxx	predictive	High
227	Argument	xxxxxxxxxxxxxx	predictive	High
228	Argument	xxxxxxxx	predictive	Medium
229	Argument	xxxx_xxx	predictive	Medium
230	Argument	xxxxx	predictive	Low
231	Argument	xxxxxx	predictive	Low
232	Argument	xxxxxxx	predictive	Low
233	Argument	xxxxxxxxxx	predictive	Medium
234	Argument	xxx	predictive	Low
235	Argument	xxxxxxx	predictive	Low
236	Argument	xxxxxxx xxxx/xxxxxxxxxxx	predictive	High
237	Argument	xxxxxx	predictive	Low
238	Argument	xxxxxxxxxxxxxxxx	predictive	High
239	Argument	xxxx_xx	predictive	Low
240	Argument	xxxxx	predictive	Low
241	Argument	xxxxxxxxx_xxxxxx/xxxxxxxxx_xxxxxx	predictive	High
242	Argument	xxxxxxxxx	predictive	Medium
243	Argument	xxxxxxx	predictive	Low
244	Argument	xxxxxx	predictive	Low
245	Argument	xxxxxxxxxxxx	predictive	Medium
246	Argument	xxxxx	predictive	Low
247	Argument	xxx	predictive	Low
248	Argument	xxxx	predictive	Low
249	Argument	xxxx	predictive	Low
250	Argument	xxxxxxxx	predictive	Medium
251	Argument	xxxxxxxx/xxxxxxx/xxxxx	predictive	High
252	Argument	xxxxxxxxxxxxxxxx	predictive	High
253	Argument	xxxxxxxxx/xxxxxxxx/xxxxxxxx	predictive	High
254	Argument	xx_xxxx	predictive	Low
255	Argument	xxxxxxx	predictive	Low
256	Argument	xxxxx	predictive	Low
257	Argument	xxxxxxxxx/xxxxxx	predictive	High
258	Argument	xx=xxxxxx)	predictive	Medium
259	Argument	xxxxxxx	predictive	Low
260	Argument	xxxx_xxxx	predictive	Medium
261	Argument	xxxx	predictive	Low
262	Argument	xx	predictive	Low
263	Argument	xx	predictive	Low
264	Argument	xx	predictive	Low
265	Argument	xxxxxxxxx	predictive	Medium
266	Argument	xxx	predictive	Low
267	Argument	xxx_xxxxxxxx	predictive	Medium
268	Argument	xxxxxxx	predictive	Low
269	Argument	xxxxxxxxxxxxxx	predictive	High
270	Argument	xxxxxxxxx/xxxxx	predictive	High
271	Argument	xxxxxxx	predictive	Low
272	Argument	xxxx	predictive	Low
273	Argument	xxxx	predictive	Low
274	Argument	xxxxxxxxxx	predictive	Medium
275	Argument	xxxxxxxxx	predictive	Medium
276	Argument	xxx_xxxxxxx_xxx	predictive	High
277	Argument	xxxxxxxxx	predictive	Medium
278	Argument	xxxxx_xxxxxx_xxx/xxxxx_xxxx_xxxxxxxx	predictive	High
279	Argument	xxxx	predictive	Low
280	Argument	xxxxxxxxx	predictive	Medium
281	Argument	xxxxxxxxxx/xxxxxxx/xxxxxxxxxxxxx	predictive	High
282	Argument	xxx_xxx	predictive	Low
283	Argument	xxxxxxxxx	predictive	Medium
284	Argument	xx_xx	predictive	Low
285	Argument	xxxxxx/xxxxx/xxxx	predictive	High
286	Argument	xx	predictive	Low
287	Argument	xxxx	predictive	Low
288	Argument	xxxxxxxx	predictive	Medium
289	Argument	xxxxx_xxxx_xxxx	predictive	High
290	Argument	xxx_xxxxxxxx	predictive	Medium
291	Argument	xxxx_xxxx_xxxx	predictive	High
292	Argument	xxx/xxxx	predictive	Medium
293	Argument	xxxxxxxxxxxxxxx	predictive	High
294	Argument	xxxxxxx	predictive	Low
295	Argument	xxxxxxx_xx[xxxxx]	predictive	High
296	Argument	xxxxxxxxxxxx	predictive	Medium
297	Argument	xxxx_xxx	predictive	Medium
298	Argument	xxxxxxxxxxxx	predictive	Medium
299	Argument	xxxxxx	predictive	Low
300	Argument	xxxxxxxxxx	predictive	Medium
301	Argument	xxxxxxxx_xxxxxx_xxxxx	predictive	High
302	Argument	xxxx_xxxx	predictive	Medium
303	Argument	xxxxxx_xx	predictive	Medium
304	Argument	xxxxxxxxx	predictive	Medium
305	Argument	xxx	predictive	Low
306	Argument	xxxxxxxxxxx	predictive	Medium
307	Argument	xxxxxxxx_xxxxxxx_xxxxxxx/xxxxxxxx_xxxxxx_xxxxxxx	predictive	High
308	Argument	xxxx_xx	predictive	Low
309	Argument	xxxx/xxxxxx/xxxxxxx/xxxxxxxxxx	predictive	High
310	Argument	xxxxxx	predictive	Low
311	Argument	xxxxxxx[]	predictive	Medium
312	Argument	xxx_xxxxx	predictive	Medium
313	Argument	xxxxxx	predictive	Low
314	Argument	xxxxxxxxxxxxxxxxxxxxxxx	predictive	High
315	Argument	xxxxxxxxxxxxxxx	predictive	High
316	Argument	xxxxxxxxxx_xxxx_xxxxxx	predictive	High
317	Argument	xx	predictive	Low
318	Argument	xxxxxx	predictive	Low
319	Argument	xxx	predictive	Low
320	Argument	xxxxxxxx	predictive	Medium
321	Argument	xxxxxxxx	predictive	Medium
322	Argument	xxxxxxxx/xxxxxxxx	predictive	High
323	Argument	xxxxxxxxx	predictive	Medium
324	Argument	xxx_xxxx	predictive	Medium
325	Argument	xxxx	predictive	Low
326	Argument	xx	predictive	Low
327	Argument	xxx	predictive	Low
328	Argument	xxxxxx	predictive	Low
329	Argument	x-xxxxxxxxx-xxx	predictive	High
330	Argument	x-xxxxxxxxx-xxxx	predictive	High
331	Argument	xx	predictive	Low
332	Argument	xxx	predictive	Low
333	Argument	xxxx	predictive	Low
334	Input Value	"><xxxxxx xxx="xxxxx://xx.xxx/xxxxxxxxxx"></xxxxxx>	predictive	High
335	Input Value	%xx	predictive	Low
336	Input Value	%xxxxxxxx%xxxxxxx%xxxxxxxx.xxxxxxxxxxxx%xxxxx,%xxxxx,%xxxxx%xx%xx%xx/xxxxxx%xx	predictive	High
337	Input Value	../../../xxx/xxxxxx	predictive	High
338	Input Value	/%xx	predictive	Low
339	Input Value	x%xx"()%xx%xx<xxx><xxxxxx>xxxxx(xxxxxxxx.xxxxxx)</xxxxxx>	predictive	High
340	Input Value	<xxxxxx>xxxxx('xxxxxxxx.xxxxxx='+xxxxxxxx.xxxxxx)</xxxxxx>.xxxxx	predictive	High
341	Input Value	<xxxxxx>xxxxx(x)</xxxxxx>	predictive	High
342	Input Value	<xxxxx/xxx=x xxxxxxx=xxxxx(xxxxxxxx.xxxxxx)>	predictive	High
343	Input Value	xxxxxx	predictive	Low
344	Input Value	\x	predictive	Low
345	Pattern	\|xx\|	predictive	Low
346	Network Port	xxx/xxx (xxx)	predictive	High
347	Network Port	xxx xxxxxx xxxx	predictive	High

References (4)

The following list contains external sources which discuss the actor and the associated activities:

◂ PreviousOverviewNext ▸

Do you know our Splunk app?

Download it now for free!