Skip to content

Hide Navigation Hide TOC

Potential SMB Relay Attack Tool Execution (5589ab4f-a767-433c-961d-c91f3f704db1)

Detects different hacktools used for relay attacks on Windows for privilege escalation

Cluster A Galaxy A Cluster B Galaxy B Level
LLMNR/NBT-NS Poisoning and SMB Relay - T1557.001 (650c784b-7504-4df7-ab2c-4ea882384d1e) Attack Pattern Potential SMB Relay Attack Tool Execution (5589ab4f-a767-433c-961d-c91f3f704db1) Sigma-Rules 1
LLMNR/NBT-NS Poisoning and SMB Relay - T1557.001 (650c784b-7504-4df7-ab2c-4ea882384d1e) Attack Pattern Adversary-in-the-Middle - T1557 (035bb001-ab69-4a0b-9f6c-2de8b09e1b9d) Attack Pattern 2