Incident Live 2146 / 2146
마지막 조회: 12:10:36
0개 선택됨
NEW 인시던트
4 개
* NEW 상태 인시던트를 모두 resolved_security_testing 으로 처리합니다
AUTO RESOLVE
OFF
5분마다 NEW 인시던트 중 알럿 5개 이상 자동 리졸브
| ID | Status | Severity | Description | Hosts | OS | Alerts | Created | Modified | Actions | |
|---|---|---|---|---|---|---|---|---|---|---|
| #1196 | Resolved | HIGH | 'Network Connection - 1971152322' along with 4 other issues ... | teahee | Windows | 5 | 01-10 13:49 | 01-10 14:20 | - | |
| #1197 | Resolved | HIGH | 'Process Injection - 288965039' along with 5 other issues ge... | in-bridge-40, inbridge-42 +1 | Linux | 6 | 01-10 13:50 | 01-10 14:18 | - | |
| #1193 | Resolved | HIGH | 'Script Activity - 3055004603' along with 4 other issues gen... | dwshin | Windows | 5 | 01-10 13:36 | 01-10 13:57 | - | |
| #1184 | Resolved | HIGH | 'Persistency - 1983659418' along with 4 other issues generat... | teahee | Windows | 5 | 01-10 12:39 | 01-10 13:47 | - | |
| #1195 | Resolved | HIGH | 'Persistency - 779040014' along with 4 other issues generate... | inbridge-42, inbridge-ubt-24 | Linux | 5 | 01-10 13:40 | 01-10 13:42 | - | |
| #1192 | Resolved | HIGH | 'Persistency - 779040014' along with 20 other issues generat... | in-bridge-40, inbridge-42 +1 | Linux | 21 | 01-10 13:31 | 01-10 13:37 | - | |
| #1191 | Resolved | HIGH | 'Process Injection - 288965039' along with 7 other issues ge... | in-bridge-40, inbridge-42 +1 | Linux | 8 | 01-10 13:25 | 01-10 13:32 | - | |
| #1190 | Resolved | HIGH | 'Process Injection - 288965039' along with 9 other issues ge... | in-bridge-40, inbridge-42 +1 | Linux | 10 | 01-10 13:25 | 01-10 13:30 | - | |
| #1188 | Resolved | HIGH | 'Powershell Activity - 3990759154' along with 4 other issues... | dwshin | Windows | 5 | 01-10 12:47 | 01-10 13:27 | - | |
| #1189 | Resolved | HIGH | 'Staged Malware Activity - 2123359011' along with 8 other is... | in-bridge-40, inbridge-ubt-24 | Linux | 9 | 01-10 13:14 | 01-10 13:22 | - | |
| #1187 | Resolved | HIGH | 'Process Injection - 288965039' along with 12 other issues g... | in-bridge-40, inbridge-42 +1 | Linux | 13 | 01-10 12:47 | 01-10 13:17 | - | |
| #1186 | Resolved | HIGH | 'Process Injection - 288965039' along with 20 other issues g... | in-bridge-40, inbridge-42 +1 | Linux | 21 | 01-10 12:41 | 01-10 12:46 | - | |
| #1182 | Resolved | HIGH | 'Powershell Activity - 3083271452' along with 4 other issues... | dwshin | Windows | 5 | 01-10 12:33 | 01-10 12:41 | - | |
| #1185 | Resolved | HIGH | 'Persistency - 779040014' along with 4 other issues generate... | in-bridge-40, inbridge-ubt-24 | Linux | 5 | 01-10 12:40 | 01-10 12:41 | - | |
| #1181 | Resolved | HIGH | 'Staged Malware Activity - 2123359011' along with 2 other is... | inbridge-ubt-24 | Linux | 3 | 01-10 12:33 | 01-10 12:38 | - | |
| #1183 | Resolved | MEDIUM | Process action type = execution AND target process cmd = *so... | in-bridge-40 | Linux | 1 | 01-10 12:34 | 01-10 12:38 | - | |
| #1180 | Resolved | HIGH | 'Process Injection - 288965039' along with 3 other issues ge... | inbridge-42, inbridge-ubt-24 | Linux | 4 | 01-10 12:32 | 01-10 12:38 | - | |
| #1176 | Resolved | MEDIUM | Suspicious executable detected | teahee | Windows | 1 | 01-10 12:12 | 01-10 12:31 | - | |
| #1177 | Resolved | MEDIUM | Suspicious process creation detected | dwshin | Windows | 1 | 01-10 12:12 | 01-10 12:31 | - | |
| #1178 | Resolved | HIGH | 'Persistency - 779040014' along with 2 other issues generate... | inbridge-ubt-24 | Linux | 3 | 01-10 12:22 | 01-10 12:31 | - | |
| #1179 | Resolved | HIGH | 'Process Injection - 288965039' along with 16 other issues g... | in-bridge-40, inbridge-42 +1 | Linux | 17 | 01-10 12:22 | 01-10 12:31 | - | |
| #1175 | Resolved | HIGH | 'Process Injection - 288965039' along with 6 other issues ge... | in-bridge-40, inbridge-ubt-24 | Linux | 7 | 01-10 12:08 | 01-10 12:10 | - | |
| #1157 | Resolved | MEDIUM | Suspicious process creation detected | book-r0be6s1nc3 | Windows | 1 | 01-10 10:39 | 01-10 12:07 | - | |
| #1171 | Resolved | MEDIUM | Suspicious executable detected | teahee | Windows | 1 | 01-10 11:33 | 01-10 12:07 | - | |
| #1172 | Resolved | HIGH | 'Persistency - 779040014' along with 2 other issues generate... | inbridge-ubt-24 | Linux | 3 | 01-10 11:40 | 01-10 12:07 | - | |
| #1173 | Resolved | HIGH | 'Powershell Activity - 3990759154' along with 2 other issues... | dwshin | Windows | 3 | 01-10 11:51 | 01-10 12:07 | - | |
| #1174 | Resolved | HIGH | Shared object injection using LD_PRELOAD on a shell command | inbridge-42 | Linux | 1 | 01-10 12:00 | 01-10 12:07 | - | |
| #1169 | Resolved | HIGH | 'Protection Against Security Measures Bypass Techniques - 19... | dwshin | Windows | 5 | 01-10 11:23 | 01-10 11:50 | - | |
| #1170 | Resolved | HIGH | 'Process Injection - 288965039' along with 5 other issues ge... | inbridge-42, inbridge-ubt-24 | Linux | 6 | 01-10 11:28 | 01-10 11:50 | - | |
| #1152 | Resolved | MEDIUM | 'WildFire Malware' along with 2 other issues generated by XD... | teahee | Windows | 3 | 01-10 10:06 | 01-10 11:26 | - | |
| #1168 | Resolved | HIGH | 'Staged Malware Activity - 2123359011' along with 4 other is... | in-bridge-40, inbridge-42 +1 | Linux | 5 | 01-10 11:20 | 01-10 11:21 | - | |
| #1167 | Resolved | HIGH | 'Persistency - 779040014' along with 1 other issue generated... | inbridge-ubt-24 | Linux | 2 | 01-10 11:11 | 01-10 11:20 | - | |
| #1165 | Resolved | HIGH | 'Staged Malware Activity - 2123359011' along with 4 other is... | in-bridge-40, inbridge-42 | Linux | 5 | 01-10 11:08 | 01-10 11:20 | - | |
| #1166 | Resolved | HIGH | 'Process Injection - 288965039' along with 6 other issues ge... | in-bridge-40, inbridge-42 +1 | Linux | 7 | 01-10 11:10 | 01-10 11:20 | - | |
| #1161 | Known Issue | HIGH | 'File Drop - 2775215878' along with 4 other issues generated... | dwshin | Windows | 5 | 01-10 10:48 | 01-10 11:10 | - | |
| #1164 | Resolved | HIGH | 'Process Injection - 288965039' along with 5 other issues ge... | in-bridge-40, inbridge-ubt-24 | Linux | 6 | 01-10 11:08 | 01-10 11:10 | - | |
| #1159 | Resolved | HIGH | 'Staged Malware Activity - 2123359011' along with 4 other is... | in-bridge-40, inbridge-42 | Linux | 5 | 01-10 10:43 | 01-10 11:07 | - | |
| #1163 | Resolved | HIGH | Process executes an obfuscated command for fetching remote f... | in-bridge-40 | Linux | 1 | 01-10 11:04 | 01-10 11:07 | - | |
| #1162 | Resolved | HIGH | 'Process Injection - 288965039' along with 8 other issues ge... | in-bridge-40, inbridge-ubt-24 | Linux | 9 | 01-10 11:00 | 01-10 11:07 | - | |
| #1160 | Resolved | HIGH | 'Process Injection - 288965039' along with 22 other issues g... | in-bridge-40, inbridge-42 +1 | Linux | 23 | 01-10 10:46 | 01-10 10:51 | - | |
| #1158 | Resolved | HIGH | 'Process Injection - 288965039' along with 4 other issues ge... | in-bridge-40, inbridge-ubt-24 | Linux | 5 | 01-10 10:43 | 01-10 10:46 | - | |
| #1154 | Resolved | HIGH | 'Staged Malware Activity - 2123359011' along with 4 other is... | in-bridge-40, inbridge-42 | Linux | 5 | 01-10 10:08 | 01-10 10:41 | - | |
| #1156 | Resolved | HIGH | 'Process Injection - 288965039' along with 9 other issues ge... | inbridge-42, inbridge-ubt-24 | Linux | 10 | 01-10 10:20 | 01-10 10:41 | - | |
| #1153 | resolved_duplicate_incident | HIGH | 'File Drop - 3732557733' along with 4 other issues generated... | dwshin | Windows | 5 | 01-10 10:06 | 01-10 10:40 | - | |
| #1155 | Resolved | HIGH | 'Process Injection - 288965039' along with 8 other issues ge... | in-bridge-40, inbridge-42 +1 | Linux | 9 | 01-10 10:14 | 01-10 10:20 | - | |
| #1151 | Resolved | HIGH | 'Process Injection - 288965039' along with 17 other issues g... | in-bridge-40, inbridge-42 +1 | Linux | 18 | 01-10 10:06 | 01-10 10:10 | - | |
| #1150 | Resolved | HIGH | 'Process Injection - 288965039' along with 17 other issues g... | in-bridge-40, inbridge-42 +1 | Linux | 18 | 01-10 09:55 | 01-10 10:05 | - | |
| #1147 | resolved_duplicate_incident | HIGH | 'Evasion Technique - 527483761' along with 5 other issues ge... | dwshin | Windows | 6 | 01-10 09:38 | 01-10 10:00 | - | |
| #1146 | Resolved | MEDIUM | Process action type = execution AND target process cmd = *so... | inbridge-42 | Linux | 1 | 01-10 09:32 | 01-10 09:55 | - | |
| #1148 | Resolved | HIGH | 'Staged Malware Activity - 2123359011' along with 1 other is... | in-bridge-40, inbridge-ubt-24 | Linux | 2 | 01-10 09:42 | 01-10 09:55 | - |