PUA - Seatbelt Execution (38646daa-e78f-4ace-9de0-55547b2d30da)

Detects the execution of the PUA/Recon tool Seatbelt via PE information of command line parameters

Rows: 3
Loading extensions...
Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
<, <=, >, >=, =, *, !, {, }, ||,&&, **[empty]**, **[nonempty]**, **rgx:**
Learn more
TableFilter v0.7.2
https://www.tablefilter.com/
©2015-2025 Max Guglielmi
Close
?
Cluster A	Galaxy A	Cluster B	Galaxy B	Level
	Clear Attack Pattern		Clear Sigma-Rules	Clear 1
Cloud Service Discovery - T1526 (e24fcba8-2557-4442-a139-1ee2f2e784db)	Attack Pattern	PUA - Seatbelt Execution (38646daa-e78f-4ace-9de0-55547b2d30da)	Sigma-Rules	1
File and Directory Discovery - T1083 (7bc57495-ea59-4380-be31-a64af124ef18)	Attack Pattern	PUA - Seatbelt Execution (38646daa-e78f-4ace-9de0-55547b2d30da)	Sigma-Rules	1
Account Discovery - T1087 (72b74d71-8169-42aa-92e0-e7b04b9f5a08)	Attack Pattern	PUA - Seatbelt Execution (38646daa-e78f-4ace-9de0-55547b2d30da)	Sigma-Rules	1