Intelligence View
⚡ tsecurity.de Intelligence
Ransomware Groups Increasingly Deploy EDR Kill Techniques
Halcyon’s latest quarterly ransomware report showed that while ransomware attacks are declining, obfuscation techniques are getting harder to fight against
Reagiere als Erste:r — dein Feedback zählt!
Halcyon’s latest quarterly ransomware report showed that while ransomware attacks are declining, obfuscation techniques are getting harder to fight against
CTI Threat Relationship Graph3 Knoten / 2 Relationen
IR-PLAYBOOK-RANSOMWARE
CRITICALSOC Incident Playbook: Ransomware Outbreak Containment
1-Click Detection Engineering: Sigma & YARA Rules
SOC Readytitle: Detect Exploitation - Ransomware Groups Increasingly Deploy EDR Kill Techniques
id: c68aca78-3443-4e78-8f28-ba5591025338
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
- https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-23
logsource:
category: network_connection
product: any
detection:
selection:
CommandLine|contains:
- 'exploit'
condition: selection
falsepositives:
- Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
- attack.initial_access
- attack.t1486rule CTI_Threat_Indicator {
meta:
author = "iShareStuff CTI Automated Detection Engine"
date = "2026-09-23"
description = "YARA Signature for "
strings:
$str = "Ransomware Groups Increasingly" ascii wide
condition:
any of them
}
SOCIAL SHARE CARD GENERATOR