Skip to content

Hide Navigation Hide TOC

Suspicious ASPX File Drop by Exchange (bd1212e5-78da-431e-95fa-c58e3237a8e6)

Detects suspicious file type dropped by an Exchange component in IIS into a suspicious folder

Cluster A Galaxy A Cluster B Galaxy B Level
Web Shell - T1505.003 (5d0d3609-d06d-49e1-b9c9-b544e0c618cb) Attack Pattern Suspicious ASPX File Drop by Exchange (bd1212e5-78da-431e-95fa-c58e3237a8e6) Sigma-Rules 1
Web Shell - T1505.003 (5d0d3609-d06d-49e1-b9c9-b544e0c618cb) Attack Pattern Server Software Component - T1505 (d456de47-a16f-4e46-8980-e67478a12dcb) Attack Pattern 2