app:other 3
3
- Log source
- Other application logs
- Host type
- Other / unclassified
- Tier, host type
- Recommended
- Techniques
- 0
- Rules depending on it
- Sigma 17
Why this tier
Techniques it helps detect
No ATT&CK analytic names this event. Its standing comes from the standards and rules below.
Rules that depend on it
Sigma 17
- Possible DCSync Attack by Sagie Dulce, Dekel Paz
- Recon Activity via SASec by Sagie Dulce, Dekel Paz
- Remote DCOM/WMI Lateral Movement by Sagie Dulce, Dekel Paz
- Remote Encrypting File System Abuse by Sagie Dulce, Dekel Paz
- Remote Event Log Recon by Sagie Dulce, Dekel Paz
- Remote Printing Abuse for Lateral Movement by Sagie Dulce, Dekel Paz
- Remote Registry Lateral Movement by Sagie Dulce, Dekel Paz
- Remote Registry Recon by Sagie Dulce, Dekel Paz
- Remote Schedule Task Lateral Movement via ATSvc by Sagie Dulce, Dekel Paz
- Remote Schedule Task Lateral Movement via ITaskSchedulerService by Sagie Dulce, Dekel Paz
- Remote Schedule Task Lateral Movement via SASec by Sagie Dulce, Dekel Paz
- Remote Schedule Task Recon via AtScv by Sagie Dulce, Dekel Paz
- Remote Schedule Task Recon via ITaskSchedulerService by Sagie Dulce, Dekel Paz
- Remote Server Service Abuse by Sagie Dulce, Dekel Paz
- Remote Server Service Abuse for Lateral Movement by Sagie Dulce, Dekel Paz
- SharpHound Recon Account Discovery by Sagie Dulce, Dekel Paz
- SharpHound Recon Sessions by Sagie Dulce, Dekel Paz