Incident Live 2146 / 2146
마지막 조회: 03:54:21
0개 선택됨
NEW 인시던트
4 개
* NEW 상태 인시던트를 모두 resolved_security_testing 으로 처리합니다
AUTO RESOLVE
OFF
5분마다 NEW 인시던트 중 알럿 5개 이상 자동 리졸브
| ID | Status | Severity | Description | Hosts | OS | Alerts | Created | Modified | Actions | |
|---|---|---|---|---|---|---|---|---|---|---|
| #254 | Other | HIGH | 'Staged Malware Activity - 2394207323' along with 4 other is... | desktop-fnumv3u | Windows | 5 | 01-03 10:35 | 01-03 10:40 | - | |
| #251 | False Positive | HIGH | 'Protection Against Security Measures Bypass Techniques - 19... | dwshin | Windows | 5 | 01-03 10:02 | 01-03 10:40 | - | |
| #250 | Resolved | HIGH | 'Staged Malware Activity - 2123359011' along with 7 other is... | inbridge-42 | Linux | 8 | 01-03 09:30 | 01-03 10:40 | - | |
| #255 | False Positive | HIGH | 'Regsvr32 may have run code from an untrusted source' along ... | desktop-fnumv3u | Windows | 6 | 01-03 10:42 | 01-03 11:00 | - | |
| #256 | Resolved | HIGH | 'File Drop - 3732557733' along with 5 other issues generated... | dwshin | Windows | 6 | 01-03 11:02 | 01-03 11:20 | - | |
| #258 | Other | HIGH | 'File Drop - 3732557733' along with 4 other issues generated... | dwshin | Windows | 5 | 01-03 11:23 | 01-03 11:40 | - | |
| #257 | Resolved | HIGH | 'File Drop - 3732557733' along with 5 other issues generated... | desktop-fnumv3u | Windows | 6 | 01-03 11:03 | 01-03 11:40 | - | |
| #261 | False Positive | HIGH | 'Powershell Activity - 3083271452' along with 5 other issues... | dwshin | Windows | 6 | 01-03 11:44 | 01-03 12:10 | - | |
| #260 | False Positive | HIGH | 'Command-line arguments match Mimikatz execution' along with... | desktop-fnumv3u | Windows | 6 | 01-03 11:43 | 01-03 12:10 | - | |
| #252 | Resolved | MEDIUM | 'WildFire Malware' along with 4 other issues generated by XD... | teahee | Windows | 5 | 01-03 10:06 | 01-03 12:20 | - | |
| #262 | resolved_duplicate_incident | HIGH | 'Powershell Activity - 3990759154' along with 4 other issues... | desktop-fnumv3u | Windows | 5 | 01-03 12:13 | 01-03 12:30 | - | |
| #263 | Resolved | HIGH | 'Script Engine Activity - 3247043810' along with 4 other iss... | dwshin | Windows | 5 | 01-03 12:18 | 01-03 12:50 | - | |
| #265 | Resolved | HIGH | 'File Drop - 3732557733' along with 5 other issues generated... | desktop-fnumv3u | Windows | 6 | 01-03 12:34 | 01-03 13:00 | - | |
| #267 | Other | HIGH | 'Powershell Activity - 3990759154' along with 6 other issues... | desktop-fnumv3u | Windows | 7 | 01-03 13:02 | 01-03 13:30 | - | |
| #266 | Known Issue | HIGH | 'Staged Malware Activity - 2394207323' along with 4 other is... | dwshin | Windows | 5 | 01-03 12:54 | 01-03 13:40 | - | |
| #270 | resolved_duplicate_incident | HIGH | 'Bypass Attempt - 911079455' along with 4 other issues gener... | dwshin | Windows | 5 | 01-03 13:43 | 01-03 14:10 | - | |
| #269 | Resolved | HIGH | 'Protection Against Security Measures Bypass Techniques - 19... | desktop-fnumv3u | Windows | 5 | 01-03 13:37 | 01-03 14:10 | - | |
| #272 | Resolved | HIGH | 'Script Activity - 3055004603' along with 5 other issues gen... | desktop-fnumv3u | Windows | 6 | 01-03 14:12 | 01-03 14:30 | - | |
| #268 | Resolved | HIGH | 'Staged Malware Activity - 2123359011' along with 6 other is... | inbridge-42 | Linux | 7 | 01-03 13:30 | 01-03 14:30 | - | |
| #264 | resolved_duplicate_incident | MEDIUM | 'WildFire Malware' along with 4 other issues generated by XD... | teahee | Windows | 5 | 01-03 12:21 | 01-03 14:40 | - | |
| #274 | resolved_duplicate_incident | MEDIUM | 'WildFire Malware' along with 9 other issues generated by XD... | teahee | Windows | 10 | 01-03 15:21 | 01-03 20:20 | - | |
| #276 | resolved_duplicate_incident | MEDIUM | 'WildFire Malware' along with 4 other issues generated by XD... | teahee | Windows | 5 | 01-03 20:36 | 01-03 22:50 | - | |
| #277 | Other | HIGH | 'Powershell Activity - 3083271452' along with 4 other issues... | desktop-fnumv3u, teahee | Windows | 5 | 01-03 23:21 | 01-04 00:20 | - | |
| #278 | Resolved | MEDIUM | 'WildFire Malware' along with 4 other issues generated by XD... | teahee | Windows | 5 | 01-04 00:27 | 01-04 02:40 | - | |
| #279 | Resolved | MEDIUM | 'WildFire Malware' along with 4 other issues generated by XD... | teahee | Windows | 5 | 01-04 02:54 | 01-04 05:10 | - | |
| #280 | Resolved | MEDIUM | 'WildFire Malware' along with 5 other issues generated by XD... | teahee | Windows | 6 | 01-04 05:57 | 01-04 08:10 | - | |
| #281 | resolved_duplicate_incident | MEDIUM | 'WildFire Malware' along with 8 other issues generated by XD... | teahee | Windows | 9 | 01-04 09:12 | 01-04 13:30 | - | |
| #282 | Known Issue | MEDIUM | 'WildFire Malware' along with 4 other issues generated by XD... | teahee | Windows | 5 | 01-04 13:39 | 01-04 16:00 | - | |
| #283 | Resolved | MEDIUM | 'WildFire Malware' along with 4 other issues generated by XD... | teahee | Windows | 5 | 01-04 16:33 | 01-04 18:40 | - | |
| #284 | Resolved | MEDIUM | 'WildFire Malware' along with 4 other issues generated by XD... | teahee | Windows | 5 | 01-04 19:09 | 01-04 21:30 | - | |
| #285 | Resolved | MEDIUM | 'WildFire Malware' along with 4 other issues generated by XD... | teahee | Windows | 5 | 01-04 21:48 | 01-05 00:00 | - | |
| #286 | Other | HIGH | 'File Drop - 1815185192' along with 6 other issues generated... | desktop-fnumv3u, teahee | Windows | 7 | 01-05 00:00 | 01-05 00:20 | - | |
| #287 | resolved_duplicate_incident | MEDIUM | 'WildFire Malware' along with 4 other issues generated by XD... | teahee | Windows | 5 | 01-05 00:39 | 01-05 03:00 | - | |
| #288 | Resolved | MEDIUM | 'WildFire Malware' along with 4 other issues generated by XD... | teahee | Windows | 5 | 01-05 03:03 | 01-05 05:10 | - | |
| #289 | Other | MEDIUM | 'WildFire Malware' along with 4 other issues generated by XD... | teahee | Windows | 5 | 01-05 06:09 | 01-05 08:20 | - | |
| #275 | Resolved | HIGH | 'Staged Malware Activity - 2123359011' along with 179 other ... | inbridge-42 | Linux | 180 | 01-03 15:30 | 01-05 11:13 | - | |
| #291 | Resolved | HIGH | 'Process Injection - 288965039' along with 1 other issue gen... | in-bridge-40 | Linux | 2 | 01-05 11:11 | 01-05 11:13 | - | |
| #290 | Resolved | HIGH | 'Process Injection - 288965039' along with 2 other issues ge... | inbridge-ubt-24 | Linux | 3 | 01-05 11:02 | 01-05 11:13 | - | |
| #259 | Resolved | HIGH | 'Staged Malware Activity - 2123359011' along with 7 other is... | inbridge-42 | Linux | 8 | 01-03 11:30 | 01-05 11:13 | - | |
| #294 | Resolved | HIGH | 'Process Injection - 288965039' along with 2 other issues ge... | inbridge-42 | Linux | 3 | 01-05 11:14 | 01-05 11:16 | - | |
| #292 | Resolved | HIGH | 'Process Injection - 288965039' along with 2 other issues ge... | inbridge-ubt-24 | Linux | 3 | 01-05 11:14 | 01-05 11:16 | - | |
| #293 | Resolved | HIGH | 'Persistency - 779040014' along with 2 other issues generate... | in-bridge-40 | Linux | 3 | 01-05 11:14 | 01-05 11:16 | - | |
| #296 | Resolved | HIGH | 'Persistency - 779040014' along with 4 other issues generate... | in-bridge-40 | Linux | 5 | 01-05 11:20 | 01-05 11:57 | - | |
| #297 | Resolved | HIGH | 'Staged Malware Activity - 2123359011' along with 4 other is... | inbridge-42 | Linux | 5 | 01-05 11:21 | 01-05 11:57 | - | |
| #295 | Resolved | HIGH | 'Process Injection - 288965039' along with 5 other issues ge... | inbridge-ubt-24 | Linux | 6 | 01-05 11:16 | 01-05 11:57 | - | |
| #300 | Resolved | HIGH | 'Staged Malware Activity - 2123359011' along with 2 other is... | inbridge-42 | Linux | 3 | 01-05 12:03 | 01-05 12:03 | - | |
| #299 | Resolved | HIGH | 'Persistency - 779040014' along with 3 other issues generate... | in-bridge-40 | Linux | 4 | 01-05 12:00 | 01-05 12:03 | - | |
| #298 | Resolved | HIGH | 'Process Injection - 288965039' along with 5 other issues ge... | inbridge-ubt-24 | Linux | 6 | 01-05 12:00 | 01-05 12:03 | - | |
| #303 | Resolved | MEDIUM | Process action type = execution AND target process cmd = *so... | inbridge-42 | Linux | 1 | 01-05 12:23 | 01-05 12:23 | - | |
| #301 | Resolved | HIGH | 'Process Injection - 288965039' along with 6 other issues ge... | inbridge-ubt-24 | Linux | 7 | 01-05 12:03 | 01-05 12:23 | - |