APT3 解析

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (1000)

言語

en	702
zh	170
ru	26
de	24
it	14

国・地域

us	368
cn	236
ru	42
es	20
ir	14

アクター

Nanocore RAT	1
RedLine Stealer	1
LockFile	1
Microcin	1
Babar	1

関心

タイプ

Not Defined	356
Operating System	48
Router Operating System	38
Content Management System	36
WordPress Plugin	24

ベンダー

Not Defined	314
Microsoft	52
IBM	28
Google	24
Apache	24

製品

Microsoft Windows	22
Apple macOS	14
MediaTek MT6853	12
MediaTek MT6873	12
MediaTek MT6875	12

脆弱性

#	脆弱性	Base	Temp	0day	本日	悪	修復	EPSS	CTI	CVE
1	TikiWiki tiki-register.php 特権昇格	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.01075	7.86	CVE-2006-6168
2	DZCP deV!L`z Clanportal config.php 特権昇格	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00943	0.54	CVE-2010-0966
3	Pligg cloud.php SQLインジェクション	6.3	6.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00000	0.44
4	ALPACA 弱い認証	5.6	5.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00110	0.17	CVE-2021-3618
5	nginx 特権昇格	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00241	1.22	CVE-2020-12440
6	SolarWinds Network Performance Monitor 特権昇格	9.8	9.8	$0-$5k	$0-$5k	Not Defined	Official Fix	0.65805	0.00	CVE-2021-31474
7	Huawei ACXXXX/SXXXX SSH Packet 特権昇格	7.5	7.3	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00246	0.07	CVE-2014-8572
8	MantisBT クロスサイトスクリプティング	4.3	4.1	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00482	0.05	CVE-2014-9571
9	MGB OpenSource Guestbook email.php SQLインジェクション	7.3	7.3	$0-$5k	$0-$5k	High	Unavailable	0.01302	0.64	CVE-2007-0354
10	jforum User 特権昇格	5.3	5.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00289	0.03	CVE-2019-7550
11	Apple Mac OS X Server Wiki Server クロスサイトスクリプティング	4.3	4.3	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.00263	0.04	CVE-2009-2814
12	AMI Megarac API 特権昇格	7.4	7.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00187	0.04	CVE-2022-26872
13	Phpsugar PHP Melody page_manager.php クロスサイトスクリプティング	5.2	4.9	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00087	0.00	CVE-2017-15648
14	TP-Link TL-WR902AC dm_fillObjByStr メモリ破損	6.3	6.1	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00172	0.00	CVE-2022-25074
15	Netgear WN604/WN802Tv2/WNAP210/WNAP320/WNDAP350/WNDAP360 boardDataWW.php 特権昇格	9.8	9.8	$5k-$25k	$0-$5k	High	Not Defined	0.97373	0.10	CVE-2016-1555
16	TRENDnet TV-IP110WN/TV-IP121WN network.cgi メモリ破損	8.5	8.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00206	0.02	CVE-2018-19240
17	jQuery Property extend Pollution クロスサイトスクリプティング	6.6	6.3	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.03535	0.14	CVE-2019-11358
18	DevExpress.XtraReports.UI 特権昇格	5.5	5.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.01502	0.04	CVE-2021-36483
19	Francisco Burzi PHP-Nuke Downloads Module viewsdownload SQLインジェクション	5.3	5.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00187	0.07	CVE-2005-0996
20	Phplinkdirectory PHP Link Directory conf_users_edit.php 未知の脆弱性	6.3	6.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00526	0.03	CVE-2011-0643

キャンペーン (2)

These are the campaigns that can be associated with the actor:

CVE-2015-5119
Xxxxxx Xxx

IOC - Indicator of Compromise (11)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IPアドレス	Hostname	アクター	キャンペーン	Identified	タイプ	信頼度
1	23.99.20.198		APT3		2020年12月15日	verified	高
2	54.169.89.240	ec2-54-169-89-240.ap-southeast-1.compute.amazonaws.com	APT3		2020年12月24日	verified	中
3	104.151.248.173	173.248-151-104.rdns.scalabledns.com	APT3	Double Tap	2020年12月12日	verified	高
4	XXX.XX.XXX.XX	xxx-xxx-xx-xxx-xx.xxxxxxx-x.xxxxxxxxx.xxx	Xxxx		2020年12月15日	verified	中
5	XXX.XX.XX.XX		Xxxx		2020年12月15日	verified	高
6	XXX.XXX.X.XXX		Xxxx	Xxx-xxxx-xxxx	2021年06月05日	verified	高
7	XXX.XXX.XXX.XXX		Xxxx		2021年05月31日	verified	高
8	XXX.XXX.XX.XXX	xxxxxxxxxx.xxxxxx.xxx	Xxxx	Xxxxxx Xxx	2020年12月12日	verified	高
9	XXX.XX.XXX.XXX		Xxxx		2020年12月24日	verified	高
10	XXX.XX.XXX.XX	xxxxxx-xx.xxxxxxxxxxxxxxxx.xxx	Xxxx	Xxxxxx Xxx	2021年01月01日	verified	高
11	XXX.XXX.XX.XX		Xxxx	Xxxxxx Xxx	2020年12月12日	verified	高

TTP - Tactics, Techniques, Procedures (26)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	クラス	脆弱性	アクセスベクター	タイプ	信頼度
1	T1006	CAPEC-126	CWE-21, CWE-22, CWE-23, CWE-24, CWE-425	Path Traversal	predictive	高
2	T1040	CAPEC-102	CWE-319	Authentication Bypass by Capture-replay	predictive	高
3	T1055	CAPEC-10	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	高
4	T1059	CAPEC-137	CWE-88, CWE-94, CWE-1321	Argument Injection	predictive	高
5	T1059.007	CAPEC-209	CWE-79, CWE-80	Cross Site Scripting	predictive	高
6	T1068	CAPEC-104	CWE-250, CWE-264, CWE-266, CWE-269, CWE-284	Execution with Unnecessary Privileges	predictive	高
7	TXXXX.XXX	CAPEC-191	CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	高
8	TXXXX	CAPEC-136	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	高
9	TXXXX.XXX	CAPEC-178	CWE-XXX	Xxxx Xxxxxxxx	predictive	高
10	TXXXX	CAPEC-	CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	高
11	TXXXX	CAPEC-1	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	高
12	TXXXX.XXX	CAPEC-492	CWE-XXXX	Xxxxxxxxxxx Xxxxxxx Xxxxxxxxxx Xxxxxxxxxx	predictive	高
13	TXXXX	CAPEC-184	CWE-XXX	Xxxxxxxx Xx Xxxx Xxxxxxx Xxxxxxxxx Xxxxx	predictive	高
14	TXXXX	CAPEC-108	CWE-XX, CWE-XX, CWE-XX	Xxx Xxxxxxxxx	predictive	高
15	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	高
16	TXXXX	CAPEC-50	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
17	TXXXX	CAPEC-37	CWE-XXX	Xxxxxxxxx Xxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
18	TXXXX	CAPEC-466	CWE-XXX	Xxxxxxx Xxxxxxxxxx Xx Xxx-xxxxxxxx	predictive	高
19	TXXXX.XXX	CAPEC-120	CWE-XXX	Xxxxxxx Xxxxxxxxxx Xxx Xxxxxxxx Xxxxxxx Xx Xx-xxxx Xxxxxx Xxxxxxxx	predictive	高
20	TXXXX.XXX	CAPEC-154	CWE-XXX	Xxxxxxxxxxxx	predictive	高
21	TXXXX	CAPEC-38	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	高
22	TXXXX.XXX	CAPEC-459	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
23	TXXXX	CAPEC-116	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
24	TXXXX	CAPEC-157	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	高
25	TXXXX.XXX	CAPEC-112	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	高
26	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	高

IOA - Indicator of Attack (378)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	クラス	Indicator	タイプ	信頼度
1	File	/+CSCOE+/logon.html	predictive	高
2	File	/act/ActDao.xml	predictive	高
3	File	/ajax.php?action=read_msg	predictive	高
4	File	/ajax/networking/get_netcfg.php	predictive	高
5	File	/api/clusters/local/topics/{topic}/messages	predictive	高
6	File	/api/gen/clients/{language}	predictive	高
7	File	/API/info	predictive	中
8	File	/app/options.py	predictive	高
9	File	/bin/httpd	predictive	中
10	File	/cgi-bin/wapopen	predictive	高
11	File	/ci_spms/admin/category	predictive	高
12	File	/ci_spms/admin/search/searching/	predictive	高
13	File	/classes/Master.php?f=delete_appointment	predictive	高
14	File	/classes/Master.php?f=delete_train	predictive	高
15	File	/concat?/%2557EB-INF/web.xml	predictive	高
16	File	/Content/Template/root/reverse-shell.aspx	predictive	高
17	File	/ctcprotocol/Protocol	predictive	高
18	File	/dashboard/menu-list.php	predictive	高
19	File	/data/remove	predictive	中
20	File	/debug/pprof	predictive	中
21	File	/ebics-server/ebics.aspx	predictive	高
22	File	/ffos/classes/Master.php?f=save_category	predictive	高
23	File	/forum/away.php	predictive	高
24	File	/goform/net\_Web\_get_value	predictive	高
25	File	/goforms/rlminfo	predictive	高
26	File	/GponForm/usb_restore_Form?script/	predictive	高
27	File	/group1/uploa	predictive	高
28	File	/hedwig.cgi	predictive	中
29	File	/HNAP1	predictive	低
30	File	/HNAP1/SetClientInfo	predictive	高
31	File	/Items/*/RemoteImages/Download	predictive	高
32	File	/manage/IPSetup.php	predictive	高
33	File	/menu.html	predictive	中
34	File	/modules/profile/index.php	predictive	高
35	File	/nagiosxi/admin/banner_message-ajaxhelper.php	predictive	高
36	File	/navigate/navigate_download.php	predictive	高
37	File	/ocwbs/admin/?page=user/manage_user	predictive	高
38	File	/ofrs/admin/?page=user/manage_user	predictive	高
39	File	/out.php	predictive	中
40	File	/password.html	predictive	高
41	File	/patient/appointment.php	predictive	高
42	File	/php_action/fetchSelectedUser.php	predictive	高
43	File	/plugin	predictive	低
44	File	/prescription/prescription/delete/	predictive	高
45	File	/xxx/xxxxxx/xxxxxxxx	predictive	高
46	File	/xxxxxxxx-xxxx/xxxxxxxx_xxxx.xxx	predictive	高
47	File	/xxxx/xxxxxxx/xxxxx.xxx	predictive	高
48	File	/xxxxxxxxx//../	predictive	高
49	File	/xxxx/xxx/x/xxxxxx	predictive	高
50	File	/x/	predictive	低
51	File	/xxxxxxx/xxxx_xxxxxx	predictive	高
52	File	/xxxxxx/xxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	高
53	File	/xxxx.xxx	predictive	中
54	File	/xxxxxxxx-xxxx/xxx/xxxxx/xxxxxxx/xxxxxxxxxxxxxxxxxxxxx.xxx	predictive	高
55	File	/xxx/xxxxxx.x	predictive	高
56	File	/xxx/xxxx/xxxxxxxxxxxxxx	predictive	高
57	File	/xxx	predictive	低
58	File	/xxxxxxx/	predictive	中
59	File	/xxxxxxxx_xxxxx/?x=xxxx_xxxxxxx	predictive	高
60	File	/xxxxxxxxx/xxxx	predictive	高
61	File	/xxxx/?xxxx=xx_xxxxxxxx	predictive	高
62	File	/xx-xxxx	predictive	中
63	File	/xx-xxxx/xxxxxx/x.x/xxxxx?xxx	predictive	高
64	File	x.xxx.xxx\xxxx\xxxxxxxx.xxx	predictive	高
65	File	xxx.xxx	predictive	低
66	File	xxxxxxx.xxx	predictive	中
67	File	xxxxx/?xxxx=xxxxxxx	predictive	高
68	File	xxxxx/xxx.xxx	predictive	高
69	File	xxxxx/xxxx_xxxxx_xxxx.xxx	predictive	高
70	File	xxxxx/xx_xxxxxxxx.xxx	predictive	高
71	File	xxxxx/xxxx-xxxxx.xxx	predictive	高
72	File	xxxxx/xxxxxxxxxx/xxxxxxxx.xxx	predictive	高
73	File	xxxxx/xxxxxxxx/xxxx_xxxxxxx.xxx	predictive	高
74	File	xxxxx/xxxxxxxxxxxxxxxxxx.xxxx	predictive	高
75	File	xxxxx/xxxxxxxx.xxxx	predictive	高
76	File	xxxxxxxxxxxxx/xxxxxxxxxx/xxx_xxxxx/xxxxxxx/xxxxx.xxx	predictive	高
77	File	xxxx/xxxxxxx-xxxxxxx-xxxxxx.xxx	predictive	高
78	File	xxxx_xxxxxxx.xxx	predictive	高
79	File	xxx/xxx/xxxxx	predictive	高
80	File	xxx/xxxxxxxxxxx/xxxx/xxxxxxxx_xxxxxxxxxx.xx	predictive	高
81	File	xxxxxx/xxxxxxxxx.xx	predictive	高
82	File	xxxxxxxxxxxxxx.xxx	predictive	高
83	File	xxxx.xxx_xxxxx_xxxx_xxxx-xxxx.xxx	predictive	高
84	File	xxxx/xxxxx	predictive	中
85	File	xxxxxxx.xx	predictive	中
86	File	xxxxxx/xxxxxx.xxx	predictive	高
87	File	xxxxxx.xxxx	predictive	中
88	File	xxxxxxxx.xxx	predictive	中
89	File	xxxxxxxxxxxx.xxx/xxxxxxxxxxx.xxx/xxxxxxxxxxx.xxx/xxxxxxxxxxx.xxx	predictive	高
90	File	xxx_xxxxxxxxx.xxx	predictive	高
91	File	x:\xxxxxxxx	predictive	中
92	File	xxxxxxxxx.xxx	predictive	高
93	File	xx_xxxx.xxx	predictive	中
94	File	xxxxxxxxxx_xxxxx.xxx	predictive	高
95	File	xxx.xxxx	predictive	中
96	File	xxxx.xxx	predictive	中
97	File	xxxxx.xxx	predictive	中
98	File	xx.xxxxxx.xxxx.xxxx.xxxxxxx.xxxx	predictive	高
99	File	xxxxxx/xxx.x	predictive	中
100	File	xxxx_xxxxxxxx/xx.xxx	predictive	高
101	File	xxxx_xxxx.xxx	predictive	高
102	File	xxxxxxx.xxxxxxxx.xxx	predictive	高
103	File	xxxx.xx	predictive	低
104	File	x_xxxxxx	predictive	中
105	File	xxxx/xxxxxxxxxxxxxxx.xxx	predictive	高
106	File	xxxxxxxxxxxxxxx.xxxx	predictive	高
107	File	xx.xxx	predictive	低
108	File	xxxxxxxxxxxx.xxx	predictive	高
109	File	xxxx_xxxx.xxx	predictive	高
110	File	xxxxxxxx_xxxxx_xxxxxxxxx.xxx	predictive	高
111	File	xxxxxxx.xxx	predictive	中
112	File	xxxxxxxx.xxx	predictive	中
113	File	xxxxx.xxx	predictive	中
114	File	xxxxxxx.xxx	predictive	中
115	File	xxxx-xxxxx.x	predictive	中
116	File	xxxx.x	predictive	低
117	File	xxxx.xxx	predictive	中
118	File	xxxxxxxxxxxxxxxxxxxx.xxx	predictive	高
119	File	xx_xxxx.xxx	predictive	中
120	File	xxxxxxxxx.xxx.xxx	predictive	高
121	File	xxxxxxxxxx.xxx	predictive	高
122	File	xxxxx.xxx	predictive	中
123	File	xxxxxxxxxxxxxxxxx.xxxx	predictive	高
124	File	xxxx.xxx	predictive	中
125	File	xxxxxxxx/xxxx_xxxx	predictive	高
126	File	xxxxxxx/xxxxxxxxxxxx.xxx	predictive	高
127	File	xxxxxxxxxxxxxxxxxxxxxxxxxxx.xxx	predictive	高
128	File	xxxxx/xxxxxxx/xxxxxxxxxxxxxxxxxxxx.xxx	predictive	高
129	File	xxxx.xxx	predictive	中
130	File	xxxxxxxxxxxxxxxxxxx.xxxx	predictive	高
131	File	xxxx.xx	predictive	低
132	File	xxxxxxxxxxxxxx.xxx	predictive	高
133	File	xxx/xxx.x	predictive	中
134	File	xxxxxxx.x	predictive	中
135	File	xxx/xxxxxx.xxx	predictive	高
136	File	xxx/xxxxxxxxxxx/xxxxxxx.xxx	predictive	高
137	File	xxxxxxx/xxxxxxxxxx.xxx	predictive	高
138	File	xxxxx.xxxx	predictive	中
139	File	xxxxx.xx	predictive	中
140	File	xxxxx.xxx	predictive	中
141	File	xxxxx_xxxxxx_xxxxxxxxxx.xxx	predictive	高
142	File	xxxxxxx.x	predictive	中
143	File	xxxxxxxx/xx/xxxx_xxxxxx.xx	predictive	高
144	File	xxxxx.xxx	predictive	中
145	File	xxx.x	predictive	低
146	File	xxxx.xxx	predictive	中
147	File	xxxx_xxxx.xxx	predictive	高
148	File	xxx_xxxxxx_xxxxxx.xx	predictive	高
149	File	xxxx.x	predictive	低
150	File	xx/xxxxxx.xxxxxxxxxxx.xx	predictive	高
151	File	xxxxxx/xxxxxx/xxxxxx-xx.x	predictive	高
152	File	xxxxxxxxxxxx/xxxxxx_xxxxx.xx	predictive	高
153	File	xxxxxxxxx/xxxxxxx/xxxxxx/xxxxxxxxxx.xxx	predictive	高
154	File	xxxxxxxxx/xxxxxx.xxx.xxx	predictive	高
155	File	xxxx/xxxxxxxx/xxxxxx_xxxxxxxx.x	predictive	高
156	File	xxxxx.xxx	predictive	中
157	File	xxxxx.xxx	predictive	中
158	File	xxxxx/	predictive	低
159	File	xxxxx_xxx	predictive	中
160	File	xxxxx/xxxxxxxx/xxxxxxxx.xx	predictive	高
161	File	xxxxxxx.xxx	predictive	中
162	File	xxx_xxxxx.x	predictive	中
163	File	xxxxxx/xxxxxx.xxx	predictive	高
164	File	xxxxxxxx.xx	predictive	中
165	File	xxxxxxxxxxxxxxx.xxxx	predictive	高
166	File	xxx_xx/xxx_xx_xxxxxx.x	predictive	高
167	File	xxx/xxxxxxxxx/xxx_xxxxx.x	predictive	高
168	File	xxxxxxx.xxx	predictive	中
169	File	xxxx_xxxx.xxx	predictive	高
170	File	xxxxxxxxx.xxx	predictive	高
171	File	xxxxxx.xxx	predictive	中
172	File	xxxxx.xxxx_xxxx.xxx	predictive	高
173	File	xxxx_xxxxxxx.xxx	predictive	高
174	File	xxx_xxxxxx.xx	predictive	高
175	File	xxxxxxxxx.xxx.xxx	predictive	高
176	File	xxx/xxxxxx_xxxx.xxx	predictive	高
177	File	xxxxx/xxxxxxxx/xxx/xxx_xxxxx.xxx	predictive	高
178	File	xxxxxxxx.xxx	predictive	中
179	File	xxxxxxxxx.xxx	predictive	高
180	File	xxxxxxx/xxx/xxxxxxx/xxxxxx/xxxx-xxxxxxxxxx/<xxxxxx>/xx.xxx	predictive	高
181	File	xxxxxx/xxxxx_xxxxxxxx/xxxxxxx.xxxx	predictive	高
182	File	xxxxxxxxxxxx/xxx.xxx/xxxxx/xxxxx/xxxxxxxxxxx/xxxxxxxxxxxxxxxx.xx	predictive	高
183	File	xxxx.xxx	predictive	中
184	File	xxxxxxxx.xxx	predictive	中
185	File	xxxxxxxxxxxxxx.xxx	predictive	高
186	File	xxxxx-xxxxxxxx-xxxxxxxxx.xxx	predictive	高
187	File	xxxx.xxx	predictive	中
188	File	xxxxx.xxx	predictive	中
189	File	xxxxxxxxxx.xxx	predictive	高
190	File	xxxxxxxx.xxx	predictive	中
191	File	xxxxxxxx/xxxxx/xxxxxxxx?xxxxxxxx	predictive	高
192	File	xxxxxx.x	predictive	中
193	File	xxxxxx/xxxxxxxx.xxx	predictive	高
194	File	xxxxxx_xxx_xxxxxx.xxx	predictive	高
195	File	xxxxxxxxxxxxxxxxxxxxx.xxx	predictive	高
196	File	xxxx.xxx	predictive	中
197	File	xxxx.xxx	predictive	中
198	File	xxxx/xxxxx.xxx	predictive	高
199	File	xxxx/xxxx.xxx	predictive	高
200	File	xxxx_xxxx.xxx	predictive	高
201	File	xxxxxxx.xxx	predictive	中
202	File	xxx/xxxxxxx/xxx_xxxx.x	predictive	高
203	File	xxx/xxxx-xxxxxxxx.x	predictive	高
204	File	xx_xxxx/xxxx_xxxx.x	predictive	高
205	File	xx_xxxx/xxxxxxxxxxxxxxxx.x	predictive	高
206	File	xxx_xxxxx.x	predictive	中
207	File	xxxxxxx.xxx	predictive	中
208	File	xxxxxxx-xxxxxxx.xxx	predictive	高
209	File	xxx-xxxx.x	predictive	中
210	File	xxxxxxxx.xxx	predictive	中
211	File	xxxxxx\xxxxxxxx\xx_xxxxx_xxxxxxx.xxx	predictive	高
212	File	xxxxxxx.xxx	predictive	中
213	File	xxxx-xxxxx.xxx	predictive	高
214	File	xxxx-xxxxxxxx.xxx	predictive	高
215	File	xxxxx/xxxx_xxxxx.x	predictive	高
216	File	xxxxxxxxx/xxxxxxxxxxxxxxxxxx.xxx	predictive	高
217	File	xxxxxxxxx	predictive	中
218	File	xxxxxxx_xxxxx.xxx	predictive	高
219	File	xxxx.xxxx	predictive	中
220	File	xxxxxxxxx.xxx	predictive	高
221	File	xxxxx.xxx	predictive	中
222	File	xxxxx/xxxxxxxx-xxxxxxxxx.xxx	predictive	高
223	File	xxxx\xxxxxxxxxx\xxxxxxx_xxxxxxxxx.xxx	predictive	高
224	File	xxxxx.x	predictive	低
225	File	xxxx-xxxxx-xxxxxxx.xxx	predictive	高
226	File	xxxxx.xxx	predictive	中
227	File	xxx/xxxxxx/xxxxxxxxxxxxx.xxx	predictive	高
228	File	xxxxxxx-xxxx.xxx	predictive	高
229	File	xx-xxxxxxxx/xxxx-xxx/xxxxxxxxx/xxxxx-xx-xxxx-xxxxx-xxxxxxxxxx.xxx	predictive	高
230	File	xxxxxx.xxxx	predictive	中
231	File	\xxxxx\xxxxxxxxxx\xxxxxxxx.xxx	predictive	高
232	File	~/xxxxxxxx-xxxxxxxx.xxx	predictive	高
233	File	~/xxxxxxxx/xxxxx/xxxxx-xx-xxxxxx-xxxxx-xxxx-xxxx.xxx	predictive	高
234	File	~/xxxxxx-xxxxx-xxxxxxx.xxx	predictive	高
235	Library	xxxxxx.xxx	predictive	中
236	Library	xxxx/xxx/xxxxxx.xxx	predictive	高
237	Library	xxxxx.xxx	predictive	中
238	Library	xxxxxxxxxx.xxx	predictive	高
239	Library	xxx/xxxxxxx.xx	predictive	高
240	Library	xxxxxxx/xxxxxxxx.xxx	predictive	高
241	Library	xxx/xxx/xxx/xxxxxx/xxxxx/xxxxxxxxx.xxxxx.xxx	predictive	高
242	Argument	$_xxxxxx['xxx_xxxx']	predictive	高
243	Argument	?xxxxxx	predictive	低
244	Argument	xx_xxxxx_xxx_xxxx	predictive	高
245	Argument	xxxxx	predictive	低
246	Argument	xxxxx_xxxxxxxx	predictive	高
247	Argument	xxxxx	predictive	低
248	Argument	xxx	predictive	低
249	Argument	xxxx(xxxx_xxxx)	predictive	高
250	Argument	xxxxx	predictive	低
251	Argument	xxxxxx_xxxx	predictive	中
252	Argument	xxxxxxxx	predictive	中
253	Argument	xxxxxxx_xx	predictive	中
254	Argument	xxxxxxxxxx_xxxx	predictive	高
255	Argument	xxx	predictive	低
256	Argument	xxxxxxxxxx	predictive	中
257	Argument	xxxx_xx	predictive	低
258	Argument	xxxxxx	predictive	低
259	Argument	xxxxxxx	predictive	低
260	Argument	xxxxxxx-xxxxxx	predictive	高
261	Argument	xxxxxxx-xxxxxxxx-xxxxxx	predictive	高
262	Argument	xxxxx_xx	predictive	中
263	Argument	xxxxxx_xx	predictive	中
264	Argument	xxxx	predictive	低
265	Argument	xxxx_xxxx	predictive	中
266	Argument	xxxxxxxxxxx	predictive	中
267	Argument	xxxx	predictive	低
268	Argument	xxxx_xxxxxx=xxxx	predictive	高
269	Argument	xxxxx	predictive	低
270	Argument	xxxxxx	predictive	低
271	Argument	xxxx	predictive	低
272	Argument	xxxxxxxxxx	predictive	中
273	Argument	xxxxxxxx	predictive	中
274	Argument	xxxxxxxx	predictive	中
275	Argument	xxxxxxxxxxxxxxx	predictive	高
276	Argument	xxxxx	predictive	低
277	Argument	xxxx	predictive	低
278	Argument	xxxxxxxx_xxxxxxx	predictive	高
279	Argument	xxxx	predictive	低
280	Argument	xxxxxxx	predictive	低
281	Argument	xxxxxxxxxxxxxx	predictive	高
282	Argument	xx	predictive	低
283	Argument	xx	predictive	低
284	Argument	xx/xxxxx	predictive	中
285	Argument	xx_xxxxxxxx	predictive	中
286	Argument	xxxxx	predictive	低
287	Argument	xxxxxxxx	predictive	中
288	Argument	xxxxxx	predictive	低
289	Argument	xxxx	predictive	低
290	Argument	xxxx/xxx_xxxxxxxxx	predictive	高
291	Argument	xxxxxxxx_xxx	predictive	中
292	Argument	xxxx	predictive	低
293	Argument	xxxxxxxxxx	predictive	中
294	Argument	xxxxxxxx	predictive	中
295	Argument	xxx	predictive	低
296	Argument	xxxxxxx	predictive	低
297	Argument	xxx	predictive	低
298	Argument	xxxx/xxxxxxxxxxx	predictive	高
299	Argument	xxxxxxx/xxxxxxx	predictive	高
300	Argument	xxxxxxxx	predictive	中
301	Argument	xx_xx	predictive	低
302	Argument	xxxxxx xxxxxx	predictive	高
303	Argument	xxxxxx	predictive	低
304	Argument	xxxxxxxxxx	predictive	中
305	Argument	xxxx	predictive	低
306	Argument	xxxxxx	predictive	低
307	Argument	xxxxxx	predictive	低
308	Argument	xxxxxxxx/xxxxxx	predictive	高
309	Argument	xxxx_xxxxx	predictive	中
310	Argument	xxx	predictive	低
311	Argument	xxxxxxxx	predictive	中
312	Argument	xxxx	predictive	低
313	Argument	xxxxxxxx	predictive	中
314	Argument	xxxxxxxxx	predictive	中
315	Argument	xxxxxxx	predictive	低
316	Argument	xxx_xxxxxx_xxxx	predictive	高
317	Argument	xxxxxxxx	predictive	中
318	Argument	xxxxxxx xxxxx	predictive	高
319	Argument	xxxxx	predictive	低
320	Argument	xxxxxx	predictive	低
321	Argument	xxxxx-xxxxxxxxxxxxx	predictive	高
322	Argument	xxxxx_xxxxxx	predictive	中
323	Argument	xxxxxxxx_xx	predictive	中
324	Argument	xxxxxxx	predictive	低
325	Argument	xxxxxxxxxx	predictive	中
326	Argument	xxxxxxxxxxxxxx	predictive	高
327	Argument	xxxxxxxxxx	predictive	中
328	Argument	xxxxxx	predictive	低
329	Argument	xxxxxxx	predictive	低
330	Argument	xxxxxxxxxxxxxxx	predictive	高
331	Argument	xxxxxx/xxxxxx/xxx	predictive	高
332	Argument	xxxxxx	predictive	低
333	Argument	xxxxxx xxxx	predictive	中
334	Argument	xxxxxx_xxxxxx	predictive	高
335	Argument	xxxxxxxxxx	predictive	中
336	Argument	xxxxxxx	predictive	低
337	Argument	xxxxxxxx[xxxx xxxxxxx][xxxxxxxxxxxxxxxxxx]	predictive	高
338	Argument	xxxxxxxxxxx	predictive	中
339	Argument	xxxx_xxxxx	predictive	中
340	Argument	xxxxxxx	predictive	低
341	Argument	xxxxxxxx	predictive	中
342	Argument	xxxxxx	predictive	低
343	Argument	xxxxxxxxx	predictive	中
344	Argument	xxx	predictive	低
345	Argument	xxx	predictive	低
346	Argument	xxx	predictive	低
347	Argument	xxxxx	predictive	低
348	Argument	xxxxxx/xxxxxxxx/xxxx/xxx	predictive	高
349	Argument	xxxx_xx[]	predictive	中
350	Argument	xxx	predictive	低
351	Argument	xxx	predictive	低
352	Argument	xxxx	predictive	低
353	Argument	xxxx-xxxxx	predictive	中
354	Argument	xxxxxx	predictive	低
355	Argument	xxxxxxxx	predictive	中
356	Argument	xxxxxxxxxxxx	predictive	中
357	Argument	xxx	predictive	低
358	Argument	xxxxxxx_xxxx	predictive	中
359	Argument	xxxxxxxxxxxxxxxxxxxxxx	predictive	高
360	Argument	xxxxxxxx	predictive	中
361	Argument	x-xxxxxxxxx-xxx	predictive	高
362	Argument	x-xxxxxxxxx-xxxxxx	predictive	高
363	Argument	_xxxx[_xxx_xxxx_xxxx	predictive	高
364	Argument	__xxxxxxxxxxxxx	predictive	高
365	Argument	__xxxxxxxxx	predictive	中
366	Input Value	"><xxxxxx>xxxxx("xxx")</xxxxxx>	predictive	高
367	Input Value	'"><xxxxxx>xxxxx(/xxx/)</xxxxxx>	predictive	高
368	Input Value	../	predictive	低
369	Input Value	../..	predictive	低
370	Input Value	../../../../xxxxxx/xxxxxx/xxxxxx/xxxxxx.xxxxxx-x.xxx	predictive	高
371	Input Value	../../../../xxxxx_xxxxx.xxx	predictive	高
372	Input Value	xxx' xxx xxxxx(x) xxx 'xxxx'='xxxx	predictive	高
373	Input Value	x=x	predictive	低
374	Pattern	\|xx xx xx\|	predictive	中
375	Network Port	xxxxx	predictive	低
376	Network Port	xxx/xxxx	predictive	中
377	Network Port	xxx/xxxxx	predictive	中
378	Network Port	xxx/xxx (xxx)	predictive	高

参考 (9)

The following list contains external sources which discuss the actor and the associated activities:

◂ 前概要次 ▸

Do you know our Splunk app?

Download it now for free!