Advanced IP Scanner - File Event (fed85bf9-e075-4280-9159-fbe8a023d6fa)
Detects the use of Advanced IP Scanner. Seems to be a popular tool for ransomware groups.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Network Service Discovery - T1046 (e3a12395-188d-4051-9a16-ea8e14d07b88) | Attack Pattern | Advanced IP Scanner - File Event (fed85bf9-e075-4280-9159-fbe8a023d6fa) | Sigma-Rules | 1 |