Skip to content

Hide Navigation Hide TOC

Network Connection Initiated From Process Located In Potentially Suspicious Or Uncommon Location (7b434893-c57d-4f41-908d-6a17bf1ae98f)

Detects a network connection initiated by programs or processes running from suspicious or uncommon files system locations.

Cluster A Galaxy A Cluster B Galaxy B Level
Network Connection Initiated From Process Located In Potentially Suspicious Or Uncommon Location (7b434893-c57d-4f41-908d-6a17bf1ae98f) Sigma-Rules Ingress Tool Transfer - T1105 (e6919abc-99f9-4c6c-95a5-14761e7b2add) Attack Pattern 1