Skip to content

Hide Navigation Hide TOC

Exchange Set OabVirtualDirectory ExternalUrl Property (9db37458-4df2-46a5-95ab-307e7f29e675)

Rule to detect an adversary setting OabVirtualDirectory External URL property to a script in Exchange Management log

Cluster A Galaxy A Cluster B Galaxy B Level
Web Shell - T1505.003 (5d0d3609-d06d-49e1-b9c9-b544e0c618cb) Attack Pattern Exchange Set OabVirtualDirectory ExternalUrl Property (9db37458-4df2-46a5-95ab-307e7f29e675) Sigma-Rules 1
Web Shell - T1505.003 (5d0d3609-d06d-49e1-b9c9-b544e0c618cb) Attack Pattern Server Software Component - T1505 (d456de47-a16f-4e46-8980-e67478a12dcb) Attack Pattern 2