Skip to content

Hide Navigation Hide TOC

RottenPotato Like Attack Pattern (16f5d8ca-44bd-47c8-acbe-6fc95a16c12f)

Detects logon events that have characteristics of events generated during an attack with RottenPotato and the like

Cluster A Galaxy A Cluster B Galaxy B Level
LLMNR/NBT-NS Poisoning and SMB Relay - T1557.001 (650c784b-7504-4df7-ab2c-4ea882384d1e) Attack Pattern RottenPotato Like Attack Pattern (16f5d8ca-44bd-47c8-acbe-6fc95a16c12f) Sigma-Rules 1
LLMNR/NBT-NS Poisoning and SMB Relay - T1557.001 (650c784b-7504-4df7-ab2c-4ea882384d1e) Attack Pattern Adversary-in-the-Middle - T1557 (035bb001-ab69-4a0b-9f6c-2de8b09e1b9d) Attack Pattern 2