Incident Live 2148 / 2148
마지막 조회: 19:24:03
0개 선택됨
NEW 인시던트
6 개
* NEW 상태 인시던트를 모두 resolved_security_testing 으로 처리합니다
AUTO RESOLVE
OFF
5분마다 NEW 인시던트 중 알럿 5개 이상 자동 리졸브
| ID | Status | Severity | Description | Hosts | OS | Alerts | Created | Modified | Actions | |
|---|---|---|---|---|---|---|---|---|---|---|
| #1251 | resolved_duplicate_incident | HIGH | 'Volume Shadow Deletion Attempt - 1186929355' along with 4 o... | teahee | Windows | 5 | 01-11 00:45 | 01-11 02:50 | - | |
| #1252 | resolved_duplicate_incident | HIGH | 'Powershell Activity - 3083271452' along with 4 other issues... | book-r0be6s1nc3, teahee | Windows | 5 | 01-11 01:14 | 01-11 01:50 | - | |
| #1253 | Known Issue | HIGH | 'Bypass Attempt - 911079455' along with 5 other issues gener... | dwshin | Windows | 6 | 01-11 01:16 | 01-11 01:40 | - | |
| #1254 | Known Issue | HIGH | 'Malware Activity - 1320008962' along with 4 other issues ge... | dwshin | Windows | 5 | 01-11 01:44 | 01-11 02:10 | - | |
| #1255 | Resolved | HIGH | 'Protection Against Security Measures Bypass Techniques - 19... | dwshin | Windows | 6 | 01-11 02:19 | 01-11 02:50 | - | |
| #1256 | Known Issue | MEDIUM | 'WildFire Malware' along with 4 other issues generated by XD... | book-r0be6s1nc3 | Windows | 5 | 01-11 02:50 | 01-11 07:20 | - | |
| #1257 | Resolved | MEDIUM | 'WildFire Malware' along with 5 other issues generated by XD... | teahee | Windows | 6 | 01-11 02:54 | 01-11 05:10 | - | |
| #1258 | Resolved | HIGH | 'Credential Gathering Protection - 122198212' along with 8 o... | dwshin | Windows | 9 | 01-11 02:54 | 01-11 03:30 | - | |
| #1259 | Resolved | HIGH | 'Credential Gathering Protection - 510630382' along with 5 o... | dwshin | Windows | 6 | 01-11 03:36 | 01-11 04:00 | - | |
| #1260 | Resolved | HIGH | 'Protection Against Security Measures Bypass Techniques - 19... | dwshin | Windows | 6 | 01-11 04:14 | 01-11 04:40 | - | |
| #1261 | Other | HIGH | 'Powershell Activity - 3083271452' along with 4 other issues... | dwshin | Windows | 5 | 01-11 04:46 | 01-11 05:10 | - | |
| #1262 | Other | HIGH | 'Ransomware Activity - 426137677' along with 5 other issues ... | dwshin | Windows | 6 | 01-11 05:14 | 01-11 05:30 | - | |
| #1263 | resolved_duplicate_incident | HIGH | 'Evasion Technique - 527483761' along with 4 other issues ge... | dwshin | Windows | 5 | 01-11 05:35 | 01-11 06:10 | - | |
| #1264 | Resolved | MEDIUM | 'WildFire Malware' along with 4 other issues generated by XD... | teahee | Windows | 5 | 01-11 06:03 | 01-11 08:10 | - | |
| #1265 | resolved_duplicate_incident | HIGH | 'File Drop - 3732557733' along with 4 other issues generated... | dwshin | Windows | 5 | 01-11 06:10 | 01-11 06:40 | - | |
| #1266 | resolved_duplicate_incident | HIGH | 'Evasion Technique - 527483761' along with 5 other issues ge... | dwshin | Windows | 6 | 01-11 06:52 | 01-11 07:30 | - | |
| #1267 | Resolved | HIGH | 'Bypass Attempt - 911079455' along with 4 other issues gener... | dwshin | Windows | 5 | 01-11 07:32 | 01-11 08:00 | - | |
| #1268 | Resolved | HIGH | 'Credential Gathering Protection - 122198212' along with 4 o... | dwshin | Windows | 5 | 01-11 08:02 | 01-11 08:40 | - | |
| #1269 | Resolved | MEDIUM | 'WildFire Malware' along with 6 other issues generated by XD... | book-r0be6s1nc3 | Windows | 7 | 01-11 08:20 | 01-11 15:00 | - | |
| #1270 | Resolved | MEDIUM | 'WildFire Malware' along with 21 other issues generated by X... | teahee | Windows | 22 | 01-11 08:27 | 01-11 19:59 | - | |
| #1271 | False Positive | HIGH | 'File Drop - 1815185192' along with 5 other issues generated... | dwshin | Windows | 6 | 01-11 08:44 | 01-11 09:20 | - | |
| #1273 | Resolved | HIGH | 'Evasion Technique - 527483761' along with 96 other issues g... | dwshin | Windows | 97 | 01-11 09:33 | 01-11 19:58 | - | |
| #1274 | Resolved | MEDIUM | 'WildFire Malware' along with 3 other issues generated by XD... | book-r0be6s1nc3 | Windows | 4 | 01-11 16:02 | 01-11 19:58 | - | |
| #1278 | Resolved | HIGH | 'Protection Against Security Measures Bypass Techniques - 19... | dwshin | Windows | 5 | 01-11 20:03 | 01-11 20:28 | - | |
| #1279 | Resolved | MEDIUM | 'WildFire Malware' along with 2 other issues generated by XD... | book-r0be6s1nc3 | Windows | 3 | 01-11 20:26 | 01-11 23:17 | - | |
| #1283 | Resolved | HIGH | 'Staged Malware Activity - 4061872954' along with 4 other is... | dwshin | Windows | 5 | 01-11 20:31 | 01-11 21:08 | - | |
| #1284 | Resolved | MEDIUM | 'WildFire Malware' along with 5 other issues generated by XD... | teahee | Windows | 6 | 01-11 20:55 | 01-11 23:09 | - | |
| #1287 | Other | HIGH | 'Protection Against Security Measures Bypass Techniques - 19... | dwshin | Windows | 5 | 01-11 21:27 | 01-11 22:10 | - | |
| #1296 | Resolved | HIGH | 'Evasion Technique - 527483761' along with 4 other issues ge... | dwshin | Windows | 5 | 01-11 22:16 | 01-11 22:39 | - | |
| #1298 | Resolved | HIGH | 'Credential Gathering Protection - 510630382' along with 6 o... | dwshin | Windows | 7 | 01-11 22:44 | 01-11 23:09 | - | |
| #1272 | Resolved | HIGH | 'Process Injection - 288965039' along with 242 other issues ... | in-bridge-40, inbridge-42 +1 | Linux | 243 | 01-11 09:00 | 01-11 19:59 | - | |
| #1276 | Resolved | HIGH | 'Process Injection - 288965039' along with 5 other issues ge... | in-bridge-40, inbridge-42 +1 | Linux | 6 | 01-11 20:00 | 01-11 20:02 | - | |
| #1277 | Resolved | HIGH | 'Persistency - 779040014' along with 6 other issues generate... | in-bridge-40, inbridge-ubt-24 | Linux | 7 | 01-11 20:00 | 01-11 20:02 | - | |
| #1281 | Resolved | HIGH | 'Process Injection - 288965039' along with 4 other issues ge... | inbridge-ubt-24 | Linux | 5 | 01-11 20:30 | 01-11 21:03 | - | |
| #1280 | Resolved | HIGH | 'Staged Malware Activity - 2123359011' along with 10 other i... | in-bridge-40, inbridge-42 +1 | Linux | 11 | 01-11 20:30 | 01-11 21:33 | - | |
| #1286 | Resolved | HIGH | 'Persistency - 779040014' along with 6 other issues generate... | in-bridge-40, inbridge-42 +1 | Linux | 7 | 01-11 21:05 | 01-11 21:23 | - | |
| #1289 | Resolved | HIGH | 'Process Injection - 288965039' along with 4 other issues ge... | in-bridge-40, inbridge-ubt-24 | Linux | 5 | 01-11 21:34 | 01-11 21:48 | - | |
| #1290 | Resolved | HIGH | 'Persistency - 779040014' along with 4 other issues generate... | in-bridge-40 | Linux | 5 | 01-11 21:34 | 01-11 21:53 | - | |
| #1291 | Resolved | HIGH | 'Process Injection - 288965039' along with 12 other issues g... | in-bridge-40, inbridge-42 +1 | Linux | 13 | 01-11 21:49 | 01-11 21:53 | - | |
| #1292 | Resolved | HIGH | 'Staged Malware Activity - 2123359011' along with 4 other is... | in-bridge-40, inbridge-42 | Linux | 5 | 01-11 21:55 | 01-11 22:44 | - | |
| #1293 | Resolved | HIGH | 'Process Injection - 288965039' along with 5 other issues ge... | inbridge-42, inbridge-ubt-24 | Linux | 6 | 01-11 21:57 | 01-11 22:03 | - | |
| #1294 | Resolved | HIGH | 'Persistency - 456694134' along with 10 other issues generat... | in-bridge-40, inbridge-ubt-24 | Linux | 11 | 01-11 22:00 | 01-11 22:24 | - | |
| #1297 | Resolved | HIGH | 'Persistency - 779040014' along with 4 other issues generate... | inbridge-ubt-24 | Linux | 5 | 01-11 22:30 | 01-11 22:34 | - | |
| #1299 | Resolved | HIGH | 'Process Injection - 288965039' along with 13 other issues g... | in-bridge-40, inbridge-42 +1 | Linux | 14 | 01-11 22:46 | 01-11 23:04 | - | |
| #1275 | Resolved | CRITICAL | 'CVE-2023-45853 vulnerability in zlib at /symantec_testmanag... | - | - | 28 | 01-11 19:36 | 01-11 19:58 | - | |
| #1282 | Resolved | CRITICAL | 'CVE-2023-45853 vulnerability in zlib at /symantec_testmanag... | - | - | 48 | 01-11 20:30 | 01-11 20:58 | - | |
| #1285 | Resolved | CRITICAL | 'CVE-2023-45853 vulnerability in zlib at docker.io/library/s... | - | - | 72 | 01-11 21:00 | 01-11 21:33 | - | |
| #1288 | Resolved | CRITICAL | 'CVE-2023-45853 vulnerability in zlib at /symantec_testmanag... | - | - | 396 | 01-11 21:33 | 01-11 21:38 | - | |
| #1295 | Resolved | CRITICAL | 'CVE-2023-45853 vulnerability in zlib at docker.io/library/s... | - | - | 5 | 01-11 22:00 | 01-11 23:04 | - | |
| #1300 | Resolved | CRITICAL | .NET Core Remote Code Execution Vulnerability | - | - | 1 | 01-11 23:00 | 01-11 23:17 | - |