Incident Live 2146 / 2146
마지막 조회: 05:10:40
0개 선택됨
NEW 인시던트
4 개
* NEW 상태 인시던트를 모두 resolved_security_testing 으로 처리합니다
AUTO RESOLVE
OFF
5분마다 NEW 인시던트 중 알럿 5개 이상 자동 리졸브
| ID | Status | Severity | Description | Hosts | OS | Alerts | Created | Modified | Actions | |
|---|---|---|---|---|---|---|---|---|---|---|
| #404 | Resolved | HIGH | Shared object injection using LD_PRELOAD on a shell command | inbridge-42 | Linux | 1 | 01-05 17:09 | 01-05 17:09 | - | |
| #402 | Resolved | HIGH | 'Process Injection - 288965039' along with 2 other issues ge... | inbridge-ubt-24 | Linux | 3 | 01-05 17:08 | 01-05 17:09 | - | |
| #407 | Resolved | HIGH | 'Process Injection - 288965039' along with 3 other issues ge... | inbridge-42 | Linux | 4 | 01-05 17:12 | 01-05 17:12 | - | |
| #406 | Resolved | HIGH | 'Persistency - 779040014' along with 1 other issue generated... | in-bridge-40 | Linux | 2 | 01-05 17:12 | 01-05 17:12 | - | |
| #405 | Resolved | HIGH | 'Process Injection - 288965039' along with 3 other issues ge... | inbridge-ubt-24 | Linux | 4 | 01-05 17:11 | 01-05 17:12 | - | |
| #410 | Resolved | HIGH | 'Process Injection - 288965039' along with 3 other issues ge... | inbridge-42 | Linux | 4 | 01-05 17:14 | 01-05 17:14 | - | |
| #409 | Resolved | HIGH | 'Process Injection - 288965039' along with 1 other issue gen... | in-bridge-40 | Linux | 2 | 01-05 17:14 | 01-05 17:15 | - | |
| #408 | Resolved | HIGH | 'Process Injection - 288965039' along with 2 other issues ge... | inbridge-ubt-24 | Linux | 3 | 01-05 17:12 | 01-05 17:15 | - | |
| #413 | Resolved | HIGH | Process executes an obfuscated command for fetching remote f... | inbridge-42 | Linux | 1 | 01-05 17:29 | 01-05 17:29 | - | |
| #412 | Resolved | HIGH | 'Persistency - 456694134' along with 4 other issues generate... | in-bridge-40 | Linux | 5 | 01-05 17:19 | 01-05 17:29 | - | |
| #411 | Resolved | HIGH | 'Process Injection - 288965039' along with 2 other issues ge... | inbridge-ubt-24 | Linux | 3 | 01-05 17:15 | 01-05 17:30 | - | |
| #415 | Resolved | HIGH | 'Process Injection - 288965039' along with 5 other issues ge... | in-bridge-40 | Linux | 6 | 01-05 17:30 | 01-05 17:47 | - | |
| #414 | Resolved | HIGH | 'Process Injection - 288965039' along with 9 other issues ge... | inbridge-ubt-24 | Linux | 10 | 01-05 17:30 | 01-05 17:47 | - | |
| #416 | Resolved | HIGH | 'Persistency - 779040014' along with 4 other issues generate... | inbridge-42 | Linux | 5 | 01-05 17:35 | 01-05 17:50 | - | |
| #419 | Resolved | HIGH | 'Staged Malware Activity - 2123359011' along with 2 other is... | inbridge-42 | Linux | 3 | 01-05 17:53 | 01-05 17:53 | - | |
| #418 | Resolved | HIGH | 'Staged Malware Activity - 2123359011' along with 4 other is... | in-bridge-40 | Linux | 5 | 01-05 17:48 | 01-05 17:53 | - | |
| #417 | Resolved | HIGH | 'Process Injection - 288965039' along with 1 other issue gen... | inbridge-ubt-24 | Linux | 2 | 01-05 17:47 | 01-05 17:53 | - | |
| #422 | Resolved | HIGH | Remote shell persistency acquired using the crontab mechanis... | inbridge-42 | Linux | 1 | 01-05 17:56 | 01-05 17:56 | - | |
| #421 | Resolved | HIGH | Shared object injection using LD_PRELOAD on a shell command | in-bridge-40 | Linux | 1 | 01-05 17:56 | 01-05 17:56 | - | |
| #420 | Resolved | HIGH | 'Staged Malware Activity - 2123359011' along with 3 other is... | inbridge-ubt-24 | Linux | 4 | 01-05 17:53 | 01-05 17:56 | - | |
| #425 | Resolved | HIGH | 'Process Injection - 288965039' along with 1 other issue gen... | inbridge-42 | Linux | 2 | 01-05 17:59 | 01-05 17:59 | - | |
| #424 | Resolved | HIGH | 'Process Injection - 288965039' along with 1 other issue gen... | in-bridge-40 | Linux | 2 | 01-05 17:56 | 01-05 17:59 | - | |
| #423 | Resolved | HIGH | 'Process Injection - 288965039' along with 2 other issues ge... | inbridge-ubt-24 | Linux | 3 | 01-05 17:56 | 01-05 17:59 | - | |
| #427 | Resolved | HIGH | 'Staged Malware Activity - 2123359011' along with 5 other is... | inbridge-42 | Linux | 6 | 01-05 17:59 | 01-05 18:03 | - | |
| #428 | Resolved | HIGH | 'Process Injection - 288965039' along with 6 other issues ge... | in-bridge-40 | Linux | 7 | 01-05 18:01 | 01-05 18:03 | - | |
| #426 | Resolved | HIGH | 'Persistency - 779040014' along with 6 other issues generate... | inbridge-ubt-24 | Linux | 7 | 01-05 17:59 | 01-05 18:03 | - | |
| #431 | Resolved | HIGH | Shared object injection using LD_PRELOAD on a shell command | inbridge-42 | Linux | 1 | 01-05 18:04 | 01-05 18:05 | - | |
| #430 | Resolved | HIGH | Shared object injection using LD_PRELOAD on a shell command | in-bridge-40 | Linux | 1 | 01-05 18:04 | 01-05 18:05 | - | |
| #429 | Resolved | HIGH | 'Process Injection - 288965039' along with 4 other issues ge... | inbridge-ubt-24 | Linux | 5 | 01-05 18:03 | 01-05 18:05 | - | |
| #433 | Resolved | HIGH | 'Persistency - 779040014' along with 3 other issues generate... | in-bridge-40 | Linux | 4 | 01-05 18:06 | 01-05 18:18 | - | |
| #434 | Resolved | MEDIUM | Process action type = execution AND target process cmd = *so... | inbridge-42 | Linux | 1 | 01-05 18:09 | 01-05 18:18 | - | |
| #432 | Resolved | HIGH | 'Process Injection - 288965039' along with 1 other issue gen... | inbridge-ubt-24 | Linux | 2 | 01-05 18:05 | 01-05 18:18 | - | |
| #437 | Resolved | HIGH | 'Persistency - 779040014' along with 1 other issue generated... | inbridge-42 | Linux | 2 | 01-05 18:19 | 01-05 18:19 | - | |
| #436 | Resolved | HIGH | 'Process Injection - 288965039' along with 2 other issues ge... | in-bridge-40 | Linux | 3 | 01-05 18:18 | 01-05 18:19 | - | |
| #435 | Resolved | HIGH | 'Staged Malware Activity - 2123359011' along with 1 other is... | inbridge-ubt-24 | Linux | 2 | 01-05 18:18 | 01-05 18:19 | - | |
| #440 | Resolved | HIGH | 'Persistency - 779040014' along with 1 other issue generated... | inbridge-42 | Linux | 2 | 01-05 18:24 | 01-05 18:25 | - | |
| #439 | Resolved | HIGH | 'Persistency - 779040014' along with 3 other issues generate... | in-bridge-40 | Linux | 4 | 01-05 18:22 | 01-05 18:25 | - | |
| #438 | Resolved | HIGH | 'Persistency - 456694134' along with 3 other issues generate... | inbridge-ubt-24 | Linux | 4 | 01-05 18:19 | 01-05 18:25 | - | |
| #443 | Resolved | HIGH | 'Process Injection - 288965039' along with 2 other issues ge... | inbridge-42 | Linux | 3 | 01-05 18:31 | 01-05 18:31 | - | |
| #442 | Resolved | HIGH | 'Staged Malware Activity - 2123359011' along with 1 other is... | in-bridge-40 | Linux | 2 | 01-05 18:30 | 01-05 18:31 | - | |
| #441 | Resolved | HIGH | Shared object injection using LD_PRELOAD on a shell command | inbridge-ubt-24 | Linux | 1 | 01-05 18:30 | 01-05 18:31 | - | |
| #446 | Resolved | HIGH | Shared object injection using LD_PRELOAD on a shell command | inbridge-42 | Linux | 1 | 01-05 18:35 | 01-05 18:35 | - | |
| #445 | Resolved | HIGH | 'Process Injection - 288965039' along with 1 other issue gen... | in-bridge-40 | Linux | 2 | 01-05 18:33 | 01-05 18:35 | - | |
| #444 | Resolved | HIGH | 'Persistency - 779040014' along with 1 other issue generated... | inbridge-ubt-24 | Linux | 2 | 01-05 18:31 | 01-05 18:35 | - | |
| #449 | Resolved | HIGH | 'Process Injection - 288965039' along with 1 other issue gen... | inbridge-42 | Linux | 2 | 01-05 18:36 | 01-05 18:36 | - | |
| #448 | Resolved | HIGH | 'Process Injection - 288965039' along with 2 other issues ge... | in-bridge-40 | Linux | 3 | 01-05 18:36 | 01-05 18:36 | - | |
| #447 | Resolved | HIGH | Suspicious cron job using a base64 payload | inbridge-ubt-24 | Linux | 1 | 01-05 18:35 | 01-05 18:36 | - | |
| #450 | Resolved | HIGH | 'Process Injection - 288965039' along with 12 other issues g... | inbridge-42 | Linux | 13 | 01-05 18:36 | 01-05 18:52 | - | |
| #451 | Resolved | HIGH | 'Process Injection - 288965039' along with 4 other issues ge... | in-bridge-40 | Linux | 5 | 01-05 18:49 | 01-05 18:53 | - | |
| #452 | Resolved | MEDIUM | Process action type = execution AND target process cmd = *so... | inbridge-ubt-24 | Linux | 1 | 01-05 18:50 | 01-05 18:53 | - |