Suspicious Network Activity - IDS

These detections identify suspicious activity from network sessions evaluated by Rapid7 Network Sensor (Insight Network Sensor).

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

Abuse.ch is a non-profit organization that provides various signatures, blacklists, and other types of indicators for common malware families and botnets. These alerts may require different methods of validation. Please refer to the corresponding IDS rule for further information.

Recommendation

Review all relevant alerts and pertinent logs related to the IP or endpoint in question, and review the reference URLs provided in the signature for additional context. If a system has been compromised, rebuild the system from a known, good baseline image that has been validated by your organization.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

Abuse.ch is a non-profit organization that provides various signatures, blacklists, and other types of indicators for common malware families and botnets. These alerts may require different methods of validation. Please refer to the corresponding IDS rule for further information.

Recommendation

Review all relevant alerts and pertinent logs related to the IP or endpoint in question, and review the reference URLs provided in the signature for additional context. If a system has been compromised, rebuild the system from a known, good baseline image that has been validated by your organization.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

Abuse.ch is a non-profit organization that provides various signatures, blacklists, and other types of indicators for common malware families and botnets. These alerts may require different methods of validation. Please refer to the corresponding IDS rule for further information.

Recommendation

Review all relevant alerts and pertinent logs related to the IP or endpoint in question, and review the reference URLs provided in the signature for additional context. If a system has been compromised, rebuild the system from a known, good baseline image that has been validated by your organization.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

Abuse.ch is a non-profit organization that provides various signatures, blacklists, and other types of indicators for common malware families and botnets. These alerts may require different methods of validation. Please refer to the corresponding IDS rule for further information.

Recommendation

Review all relevant alerts and pertinent logs related to the IP or endpoint in question, and review the reference URLs provided in the signature for additional context. If a system has been compromised, rebuild the system from a known, good baseline image that has been validated by your organization.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

Abuse.ch is a non-profit organization that provides various signatures, blacklists, and other types of indicators for common malware families and botnets. These alerts may require different methods of validation. Please refer to the corresponding IDS rule for further information.

Recommendation

Review all relevant alerts and pertinent logs related to the IP or endpoint in question, and review the reference URLs provided in the signature for additional context. If a system has been compromised, rebuild the system from a known, good baseline image that has been validated by your organization.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

Abuse.ch is a non-profit organization that provides various signatures, blacklists, and other types of indicators for common malware families and botnets. These alerts may require different methods of validation. Please refer to the corresponding IDS rule for further information.

Recommendation

Review all relevant alerts and pertinent logs related to the IP or endpoint in question, and review the reference URLs provided in the signature for additional context. If a system has been compromised, rebuild the system from a known, good baseline image that has been validated by your organization.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

Abuse.ch is a non-profit organization that provides various signatures, blacklists, and other types of indicators for common malware families and botnets. These alerts may require different methods of validation. Please refer to the corresponding IDS rule for further information.

Recommendation

Review all relevant alerts and pertinent logs related to the IP or endpoint in question, and review the reference URLs provided in the signature for additional context. If a system has been compromised, rebuild the system from a known, good baseline image that has been validated by your organization.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

Abuse.ch is a non-profit organization that provides various signatures, blacklists, and other types of indicators for common malware families and botnets. These alerts may require different methods of validation. Please refer to the corresponding IDS rule for further information.

Recommendation

Review all relevant alerts and pertinent logs related to the IP or endpoint in question, and review the reference URLs provided in the signature for additional context. If a system has been compromised, rebuild the system from a known, good baseline image that has been validated by your organization.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

Abuse.ch is a non-profit organization that provides various signatures, blacklists, and other types of indicators for common malware families and botnets. These alerts may require different methods of validation. Please refer to the corresponding IDS rule for further information.

Recommendation

Review all relevant alerts and pertinent logs related to the IP or endpoint in question, and review the reference URLs provided in the signature for additional context. If a system has been compromised, rebuild the system from a known, good baseline image that has been validated by your organization.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

Abuse.ch is a non-profit organization that provides various signatures, blacklists, and other types of indicators for common malware families and botnets. These alerts may require different methods of validation. Please refer to the corresponding IDS rule for further information.

Recommendation

Review all relevant alerts and pertinent logs related to the IP or endpoint in question, and review the reference URLs provided in the signature for additional context. If a system has been compromised, rebuild the system from a known, good baseline image that has been validated by your organization.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

Abuse.ch is a non-profit organization that provides various signatures, blacklists, and other types of indicators for common malware families and botnets. These alerts may require different methods of validation. Please refer to the corresponding IDS rule for further information.

Recommendation

Review all relevant alerts and pertinent logs related to the IP or endpoint in question, and review the reference URLs provided in the signature for additional context. If a system has been compromised, rebuild the system from a known, good baseline image that has been validated by your organization.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

Abuse.ch is a non-profit organization that provides various signatures, blacklists, and other types of indicators for common malware families and botnets. These alerts may require different methods of validation. Please refer to the corresponding IDS rule for further information.

Recommendation

Review all relevant alerts and pertinent logs related to the IP or endpoint in question, and review the reference URLs provided in the signature for additional context. If a system has been compromised, rebuild the system from a known, good baseline image that has been validated by your organization.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

Abuse.ch is a non-profit organization that provides various signatures, blacklists, and other types of indicators for common malware families and botnets. These alerts may require different methods of validation. Please refer to the corresponding IDS rule for further information.

Recommendation

Review all relevant alerts and pertinent logs related to the IP or endpoint in question, and review the reference URLs provided in the signature for additional context. If a system has been compromised, rebuild the system from a known, good baseline image that has been validated by your organization.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

Abuse.ch is a non-profit organization that provides various signatures, blacklists, and other types of indicators for common malware families and botnets. These alerts may require different methods of validation. Please refer to the corresponding IDS rule for further information.

Recommendation

Review all relevant alerts and pertinent logs related to the IP or endpoint in question, and review the reference URLs provided in the signature for additional context. If a system has been compromised, rebuild the system from a known, good baseline image that has been validated by your organization.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

Abuse.ch is a non-profit organization that provides various signatures, blacklists, and other types of indicators for common malware families and botnets. These alerts may require different methods of validation. Please refer to the corresponding IDS rule for further information.

Recommendation

Review all relevant alerts and pertinent logs related to the IP or endpoint in question, and review the reference URLs provided in the signature for additional context. If a system has been compromised, rebuild the system from a known, good baseline image that has been validated by your organization.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

Abuse.ch is a non-profit organization that provides various signatures, blacklists, and other types of indicators for common malware families and botnets. These alerts may require different methods of validation. Please refer to the corresponding IDS rule for further information.

Recommendation

Review all relevant alerts and pertinent logs related to the IP or endpoint in question, and review the reference URLs provided in the signature for additional context. If a system has been compromised, rebuild the system from a known, good baseline image that has been validated by your organization.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

Abuse.ch is a non-profit organization that provides various signatures, blacklists, and other types of indicators for common malware families and botnets. These alerts may require different methods of validation. Please refer to the corresponding IDS rule for further information.

Recommendation

Review all relevant alerts and pertinent logs related to the IP or endpoint in question, and review the reference URLs provided in the signature for additional context. If a system has been compromised, rebuild the system from a known, good baseline image that has been validated by your organization.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

Abuse.ch is a non-profit organization that provides various signatures, blacklists, and other types of indicators for common malware families and botnets. These alerts may require different methods of validation. Please refer to the corresponding IDS rule for further information.

Recommendation

Review all relevant alerts and pertinent logs related to the IP or endpoint in question, and review the reference URLs provided in the signature for additional context. If a system has been compromised, rebuild the system from a known, good baseline image that has been validated by your organization.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

Abuse.ch is a non-profit organization that provides various signatures, blacklists, and other types of indicators for common malware families and botnets. These alerts may require different methods of validation. Please refer to the corresponding IDS rule for further information.

Recommendation

Review all relevant alerts and pertinent logs related to the IP or endpoint in question, and review the reference URLs provided in the signature for additional context. If a system has been compromised, rebuild the system from a known, good baseline image that has been validated by your organization.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

Abuse.ch is a non-profit organization that provides various signatures, blacklists, and other types of indicators for common malware families and botnets. These alerts may require different methods of validation. Please refer to the corresponding IDS rule for further information.

Recommendation

Review all relevant alerts and pertinent logs related to the IP or endpoint in question, and review the reference URLs provided in the signature for additional context. If a system has been compromised, rebuild the system from a known, good baseline image that has been validated by your organization.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

Abuse.ch is a non-profit organization that provides various signatures, blacklists, and other types of indicators for common malware families and botnets. These alerts may require different methods of validation. Please refer to the corresponding IDS rule for further information.

Recommendation

Review all relevant alerts and pertinent logs related to the IP or endpoint in question, and review the reference URLs provided in the signature for additional context. If a system has been compromised, rebuild the system from a known, good baseline image that has been validated by your organization.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

Abuse.ch is a non-profit organization that provides various signatures, blacklists, and other types of indicators for common malware families and botnets. These alerts may require different methods of validation. Please refer to the corresponding IDS rule for further information.

Recommendation

Review all relevant alerts and pertinent logs related to the IP or endpoint in question, and review the reference URLs provided in the signature for additional context. If a system has been compromised, rebuild the system from a known, good baseline image that has been validated by your organization.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

Abuse.ch is a non-profit organization that provides various signatures, blacklists, and other types of indicators for common malware families and botnets. These alerts may require different methods of validation. Please refer to the corresponding IDS rule for further information.

Recommendation

Review all relevant alerts and pertinent logs related to the IP or endpoint in question, and review the reference URLs provided in the signature for additional context. If a system has been compromised, rebuild the system from a known, good baseline image that has been validated by your organization.

MITRE ATT&CK Techniques

• Develop Capabilities - T1587

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Encrypted for Impact - T1486

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Encrypted for Impact - T1486

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Encrypted for Impact - T1486

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

Recommendation

Description

Recommendation

Description

Recommendation

Description

Recommendation

Description

Recommendation

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Encrypted for Impact - T1486

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Encrypted for Impact - T1486

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Encrypted for Impact - T1486

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Encrypted for Impact - T1486

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Encrypted for Impact - T1486

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Encrypted for Impact - T1486

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Encrypted for Impact - T1486

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Encrypted for Impact - T1486

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Encrypted for Impact - T1486

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Encrypted for Impact - T1486

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Encrypted for Impact - T1486

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Encrypted for Impact - T1486

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Resource Hijacking - T1496

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Encrypted for Impact - T1486

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Encrypted for Impact - T1486

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Resource Hijacking - T1496

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Encrypted for Impact - T1486

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

Recommendation

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Obfuscation - T1001

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Obfuscation - T1001

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Obfuscation - T1001

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Obfuscation - T1001

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Obfuscation - T1001

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Obfuscation - T1001

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Obfuscation - T1001

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Obfuscation - T1001

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Obfuscation - T1001

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Obfuscation - T1001

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Obfuscation - T1001

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Obfuscation - T1001

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Obfuscation - T1001

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Obfuscation - T1001

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Data Obfuscation - T1001

Description

This detection identifies malware-related activity using Rapid7’s Rapid7 Network Sensor (Insight Network Sensor). Malicious actors often use malware in order to gain access to victim organizations.

Recommendation

Review the alert in question. If necessary, rebuild the host from a known, good source and have the user change their password.

MITRE ATT&CK Techniques

• Exfiltration Over C2 Channel - T1041