<<< Hide Navigation Hide TOC >>>
RegAsm.EXE Initiating Network Connection To Public IP (0531e43a-d77d-47c2-b89f-5fe50321c805)
Detects "RegAsm.exe" initiating a network connection to public IP adresses
Cluster A![]() |
Galaxy A![]() |
Cluster B![]() |
Galaxy B![]() |
Level![]() |
---|---|---|---|---|
Regsvcs/Regasm - T1218.009 (c48a67ee-b657-45c1-91bf-6cdbe27205f8) | Attack Pattern | RegAsm.EXE Initiating Network Connection To Public IP (0531e43a-d77d-47c2-b89f-5fe50321c805) | Sigma-Rules | 1 |
System Binary Proxy Execution - T1218 (457c7820-d331-465a-915e-42f85500ccc4) | Attack Pattern | Regsvcs/Regasm - T1218.009 (c48a67ee-b657-45c1-91bf-6cdbe27205f8) | Attack Pattern | 2 |