Techniques

Unternehmen

Technique Changes

• Adversary-in-the-Middle: LLMNR/NBT-NS Poisoning and SMB Relay (v1.3→v1.4)
• Establish Accounts: Cloud Accounts (v1.0→v1.1)

Minor Technique Changes

• Multi-Factor Authentication Interception (v2.0→v2.0)
• Search Open Websites/Domains: Code Repositories (v1.0→v1.0)
• Stage Capabilities: SEO Poisoning (v1.0→v1.0)

Software

Unternehmen

Minor Software Changes

• DCSrv (v1.0→v1.0)
• Heyoka Backdoor (v1.0→v1.0)
• MacMa (v1.0→v1.0)
• Mongall (v1.0→v1.0)
• PingPull (v1.0→v1.0)
• PsExec (v1.3→v1.3)
• PyDCrypt (v1.0→v1.0)
• WhisperGate (v1.0→v1.0)

Groups

Unternehmen

Minor Group Changes

• Aoqin Dragon (v1.0→v1.0)
• EXOTIC LILY (v1.0→v1.0)
• Moses Staff (v1.0→v1.0)
• SideCopy (v1.0→v1.0)

Data Sources and/or Components

Unternehmen

Data Source and/or Component Deprecations

• Container: Container Metadata (v1.0)
• Pod: Pod Metadata (v1.0)

Contributors to this release

• Manikantan Srinivasan, NEC Corporation India
• Phill Taylor, BT Security
• Vinayak Wadhwa, SAFE Security
• Will Jolliffe