BITS Transfer Job Download From Direct IP (90f138c1-f578-4ac3-8c49-eecfd847c8b7)
Detects a BITS transfer job downloading file(s) from a direct IP address.
Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
---|---|---|---|---|
BITS Jobs - T1197 (c8e87b83-edbb-48d4-9295-4974897525b7) | Attack Pattern | BITS Transfer Job Download From Direct IP (90f138c1-f578-4ac3-8c49-eecfd847c8b7) | Sigma-Rules | 1 |