NSA Analysis

IOB - Indicator of Behavior (1000)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en	904
es	24
de	22
it	12
fr	12

Country

us	498
gb	188
cn	88
gr	66
ru	28

Actors

NSA	7
Syrian Electronic Army	1
Emotet	1
Conti	1
Lazarus	1

Activities

Interest

Timeline

Type

Not Defined	264
Operating System	104
Content Management System	66
Web Server	44
Smartphone Operating System	36

Vendor

Not Defined	266
Microsoft	116
Apple	54
Apache	30
Google	24

Product

Microsoft Windows	52
Apple Mac OS X	34
WordPress	26
Apache HTTP Server	24
Google Android	22

Vulnerabilities

#	Vulnerability	Base	Temp	0day	Today	Exp	Rem	CTI	EPSS	CVE
1	Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash information disclosure	5.3	5.2	$5k-$25k	Calculating	High	Workaround	0.04	0.04187	CVE-2007-1192
2	nginx request smuggling	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Not Defined	5.80	0.00000	CVE-2020-12440
3	Microsoft Windows SMB input validation	7.7	7.1	$25k-$100k	$0-$5k	High	Official Fix	0.26	0.96089	CVE-2017-0144
4	Microsoft IIS cross site scripting	5.2	4.7	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.41	0.25090	CVE-2017-0055
5	Microsoft Word/Office/Outlook RTF Document memory corruption	10.0	9.6	$25k-$100k	$0-$5k	High	Official Fix	0.02	0.90601	CVE-2014-1761
6	SourceCodester Library Management System index.php sql injection	7.1	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.05	0.00885	CVE-2022-2492
7	Bitrix Site Manager Vote Module Remote Code Execution	7.3	7.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.15	0.01156	CVE-2022-27228
8	Microsoft IIS IP/Domain Restriction access control	6.5	5.7	$25k-$100k	$0-$5k	Unproven	Official Fix	0.67	0.29797	CVE-2014-4078
9	Bram Korsten Note editor.php Reflected cross site scripting	5.2	5.0	$0-$5k	$0-$5k	Not Defined	Not Defined	0.01	0.00885	CVE-2017-9289
10	Maran PHP Shop prod.php sql injection	7.3	7.3	$0-$5k	Calculating	High	Unavailable	0.01	0.00986	CVE-2008-4879
11	DZCP deV!L`z Clanportal config.php code injection	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.61	0.04187	CVE-2010-0966
12	Cisco IOS NTP Interface Queue input validation	7.5	7.2	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.08	0.01136	CVE-2016-1478
13	Peplink Balance Cookie admin.cgi sql injection	8.5	7.7	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.03	0.33212	CVE-2017-8835
14	vsftpd deny_file unknown vulnerability	3.7	3.6	$0-$5k	$0-$5k	Not Defined	Official Fix	0.26	0.01136	CVE-2015-1419
15	Citrix Netscaler SD-WAN Session ID Cookie input validation	9.8	9.4	$5k-$25k	$0-$5k	High	Official Fix	0.02	0.08944	CVE-2017-6316
16	X2Engine X2CRM File Upload ProfileController.php actionUploadPhoto unrestricted upload	7.5	7.2	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	0.04695	CVE-2014-2664
17	Microsoft Windows improper authentication	6.5	6.2	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.00	0.03884	CVE-2004-0540
18	Elegant Themes Bloom Plugin privileges management	7.5	7.2	$0-$5k	Calculating	Not Defined	Official Fix	0.01	0.00885	CVE-2016-11003
19	PHPWind goto.php redirect	6.3	6.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.36	0.01213	CVE-2015-4134
20	ProFTPD mod_sftp/mod_sftp_pam kbdint.c resp_count numeric error	7.5	7.1	$0-$5k	$0-$5k	Proof-of-Concept	Unavailable	0.04	0.01319	CVE-2013-4359

Campaigns (1)

These are the campaigns that can be associated with the actor:

BOUNDLESS INFORMANT

IOC - Indicator of Compromise (31)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP address	Hostname	Actor	Campaigns	Type	Confidence
1	31.6.17.94		NSA	BOUNDLESS INFORMANT	verified	High
2	37.72.168.84	84.168.72.37.static.swiftway.net	NSA	BOUNDLESS INFORMANT	verified	High
3	37.130.229.100	uk.server	NSA	BOUNDLESS INFORMANT	verified	High
4	37.130.229.101	uk.server	NSA	BOUNDLESS INFORMANT	verified	High
5	37.220.10.28	h37-220-10-28.host.redstation.co.uk	NSA	BOUNDLESS INFORMANT	verified	High
6	50.115.118.140	sfaaa.net	NSA	BOUNDLESS INFORMANT	verified	High
7	50.115.119.172	327377ac.setaptr.net	NSA	BOUNDLESS INFORMANT	verified	High
8	XX.X.XXX.XXX		Xxx	Xxxxxxxxx Xxxxxxxxx	verified	High
9	XX.XX.XX.XXX		Xxx	Xxxxxxxxx Xxxxxxxxx	verified	High
10	XX.XX.XXX.XXX		Xxx	Xxxxxxxxx Xxxxxxxxx	verified	High
11	XX.XX.XXX.XX		Xxx	Xxxxxxxxx Xxxxxxxxx	verified	High
12	XX.XXX.XX.XX	xxxxxx.xx-xxxxxxx.xxx	Xxx	Xxxxxxxxx Xxxxxxxxx	verified	High
13	XX.XX.XX.XXX	xxx-xx-xx-xxx.xxxx.xxxxxxxxxx.xx.xx	Xxx	Xxxxxxxxx Xxxxxxxxx	verified	High
14	XX.XX.XXX.XXX		Xxx	Xxxxxxxxx Xxxxxxxxx	verified	High
15	XX.XXX.XXX.XXX		Xxx	Xxxxxxxxx Xxxxxxxxx	verified	High
16	XX.XXX.XXX.XXX		Xxx	Xxxxxxxxx Xxxxxxxxx	verified	High
17	XX.XXX.XXX.XX		Xxx	Xxxxxxxxx Xxxxxxxxx	verified	High
18	XX.XXX.XX.XX	xx.xxxx.xxxxxxxxx.xxx	Xxx	Xxxxxxxxx Xxxxxxxxx	verified	High
19	XXX.XXX.XX.XXX	xxxxxxxx-xxxxxx.xxxxxxxxxxxxx.xxx	Xxx	Xxxxxxxxx Xxxxxxxxx	verified	High
20	XXX.XXX.XX.XXX	xxxxxxxx.xx.xxx.xxx	Xxx	Xxxxxxxxx Xxxxxxxxx	verified	High
21	XXX.XXX.XX.XX	xx.xx.xxx.xxx.xxxxxxxxxx.xxx.xxxxxxxxx.xxx	Xxx	Xxxxxxxxx Xxxxxxxxx	verified	High
22	XXX.XXX.XXX.XXX	xxx.xxx.xxx.xxx.xxxxxx.xxxxxxxx.xxx	Xxx	Xxxxxxxxx Xxxxxxxxx	verified	High
23	XXX.XXX.XXX.XXX		Xxx	Xxxxxxxxx Xxxxxxxxx	verified	High
24	XXX.XXX.XXX.XX		Xxx	Xxxxxxxxx Xxxxxxxxx	verified	High
25	XXX.XXX.XXX.XXX		Xxx	Xxxxxxxxx Xxxxxxxxx	verified	High
26	XXX.XXX.XXX.XX		Xxx	Xxxxxxxxx Xxxxxxxxx	verified	High
27	XXX.XXX.XXX.XX		Xxx	Xxxxxxxxx Xxxxxxxxx	verified	High
28	XXX.XXX.XXX.XXX		Xxx	Xxxxxxxxx Xxxxxxxxx	verified	High
29	XXX.XXX.XXX.XXX		Xxx	Xxxxxxxxx Xxxxxxxxx	verified	High
30	XXX.XXX.XXX.XXX		Xxx	Xxxxxxxxx Xxxxxxxxx	verified	High
31	XXX.XXX.XXX.XXX		Xxx	Xxxxxxxxx Xxxxxxxxx	verified	High

TTP - Tactics, Techniques, Procedures (22)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Vulnerabilities	Access Vector	Type	Confidence
1	T1006	CWE-22	Pathname Traversal	predictive	High
2	T1055	CWE-74	Injection	predictive	High
3	T1059	CWE-88, CWE-94, CWE-1321	Cross Site Scripting	predictive	High
4	T1059.007	CWE-79, CWE-80	Cross Site Scripting	predictive	High
5	T1068	CWE-264, CWE-269, CWE-284	Execution with Unnecessary Privileges	predictive	High
6	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxxxxx Xxxxxxxx	predictive	High
7	TXXXX	CWE-XX, CWE-XX	Xxxxxxx Xxxxxxxxx	predictive	High
8	TXXXX.XXX	CWE-XXX	Xxxx Xxxxxxxx	predictive	High
9	TXXXX	CWE-XXX, CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	High
10	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	High
11	TXXXX.XXX	CWE-XXXX	Xxxxxxxxxxx Xxxxxxx Xxxxxxxxxx Xxxxxxxxxx	predictive	High
12	TXXXX	CWE-XX	Xxx Xxxxxxxxx	predictive	High
13	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	High
14	TXXXX	CWE-XXX, CWE-XXX	Xxx.xxx Xxxxxxxxxxxxxxxx: Xxxxxxxx Xx Xxxxxxxxxxxxx Xxxx	predictive	High
15	TXXXX.XXX	CWE-XXX	Xxxxxxxxxx Xxxxxxxxx	predictive	High
16	TXXXX.XXX	CWE-XXX	Xxxxxxxxxxxx	predictive	High
17	TXXXX	CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	High
18	TXXXX.XXX	CWE-XXX	Xxxxxxxx	predictive	High
19	TXXXX	CWE-XXX	Xxxxxxxxxxxxx	predictive	High
20	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	X2xx Xxxxxxxxxxxxxxxx: Xxxx Xxxxxxxxxxxx Xxxxxxx Xxxxxxxxxx	predictive	High
21	TXXXX.XXX	CWE-XXX	Xxxxxxxxxxxx Xxxxxx	predictive	High
22	TXXXX	CWE-XXX	Xxxxxxxxxxx Xxxxxx	predictive	High

IOA - Indicator of Attack (429)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Class	Indicator	Type	Confidence
1	File	.procmailrc	predictive	Medium
2	File	/.ssh/authorized_keys2	predictive	High
3	File	/about.php	predictive	Medium
4	File	/admin-ajax.php?action=eps_redirect_save	predictive	High
5	File	/admin.php	predictive	Medium
6	File	/admin/	predictive	Low
7	File	/Admin/add-student.php	predictive	High
8	File	/admin/api/theme-edit/	predictive	High
9	File	/admin/photo.php	predictive	High
10	File	/anony/mjpg.cgi	predictive	High
11	File	/apply.cgi	predictive	Medium
12	File	/auth	predictive	Low
13	File	/catcompany.php	predictive	High
14	File	/cms/category/list	predictive	High
15	File	/dashboard/view-chair-list.php	predictive	High
16	File	/Default/Bd	predictive	Medium
17	File	/ebics-server/ebics.aspx	predictive	High
18	File	/egroupware/index.php	predictive	High
19	File	/etc/hosts	predictive	Medium
20	File	/filemanager/upload.php	predictive	High
21	File	/GponForm/device_Form?script/	predictive	High
22	File	/GponForm/fsetup_Form	predictive	High
23	File	/GponForm/usb_restore_Form?script/	predictive	High
24	File	/hrm/employeeview.php	predictive	High
25	File	/html/device-id	predictive	High
26	File	/includes/decorators/global-translations.jsp	predictive	High
27	File	/index.php	predictive	Medium
28	File	/product_list.php	predictive	High
29	File	/secure/QueryComponent!Default.jspa	predictive	High
30	File	/see_more_details.php	predictive	High
31	File	/server-status	predictive	High
32	File	/setSystemAdmin	predictive	High
33	File	/uncpath/	predictive	Medium
34	File	/usr/local/WowzaStreamingEngine/bin/	predictive	High
35	File	/WEB-INF/web.xml	predictive	High
36	File	a2dp_aac_decoder.cc	predictive	High
37	File	actbar3.ocx	predictive	Medium
38	File	adclick.php	predictive	Medium
39	File	addentry.php	predictive	Medium
40	File	admin.php	predictive	Medium
41	File	admin/executar_login.php	predictive	High
42	File	admin/mcart_xls_import.php	predictive	High
43	File	admin/setting.php	predictive	High
44	File	admin/src/containers/InputModalStepperProvider/index.js	predictive	High
45	File	admin/users/add	predictive	High
46	File	administrator/components/com_media/helpers/media.php	predictive	High
47	File	admin_ranks.php	predictive	High
48	File	ajax-actions.php	predictive	High
49	File	ajaxRequest/methodCall.do	predictive	High
50	File	xxxxxx/xxxxxxxxx.xxx	predictive	High
51	File	xxxxxxx.xxx	predictive	Medium
52	File	xxxxxxxxxxx/xxxxxxxxx/xxxxxxxxxxxx.xxx	predictive	High
53	File	xxxxx.xxx	predictive	Medium
54	File	xxxx.xxx.xxx	predictive	Medium
55	File	xxxx.xx	predictive	Low
56	File	xxxxx-xxx.x	predictive	Medium
57	File	xxxxxxx.xxxx	predictive	Medium
58	File	xxxxxxx.xx	predictive	Medium
59	File	xxxxxx.x	predictive	Medium
60	File	xxxxxxxxx.xxx	predictive	High
61	File	xxxxx.xxx	predictive	Medium
62	File	xxxx/xxxxxxxxxxxxx.xxx	predictive	High
63	File	xxxxxx.xxx	predictive	Medium
64	File	xxx_xxxx.xx	predictive	Medium
65	File	xxxx.x	predictive	Low
66	File	xxxxxxxx.xxx	predictive	Medium
67	File	xxxx.xxx	predictive	Medium
68	File	xxxxxxxx.xxx	predictive	Medium
69	File	xxx-xxx/xxxxxxxxxxxx.xxx/xxxxxxxxxxxx	predictive	High
70	File	xxx-xxx/xxxxx/xxxxx.xxx	predictive	High
71	File	xxxxx-xxxxxxxxx-xxxxxxxxxx-xxxxxxx-xxxx-xxxxx.xxx	predictive	High
72	File	xxxxx.xxxxxxxxx.xxx	predictive	High
73	File	xxx.xxx	predictive	Low
74	File	xxx-xxx/xxxxxxxxx/xxxx/xxxxxxxx.xxxx	predictive	High
75	File	xxxxxxxx_xxxxxxxxxxxxxxxxxxxxxxxxxxxx.xxx	predictive	High
76	File	xxxx/xxxxx.xxxx	predictive	High
77	File	xxxxxx.xxx	predictive	Medium
78	File	xxxxxxxxxxxx.xxxx	predictive	High
79	File	xxxxxxx.xxx	predictive	Medium
80	File	xxxxxxx.xxx	predictive	Medium
81	File	xxxxx.xxx	predictive	Medium
82	File	xxxxxxxx.xxx	predictive	Medium
83	File	xxxx/xxxxxxxxxxxxxxx.xxx	predictive	High
84	File	xxxxxxx.xxx/xxxxxxxxx.xxx	predictive	High
85	File	xxxxxx.xxx	predictive	Medium
86	File	xxxxxx.xxx	predictive	Medium
87	File	xxxxxxxxx.xxx	predictive	High
88	File	xxxxxxxxx.xxx	predictive	High
89	File	xxxxxxxx.xxx	predictive	Medium
90	File	xxxxxxxx_xxxxxx.xxxx	predictive	High
91	File	xxxxxxx/xxxx/xxxx/xxxx.x	predictive	High
92	File	xxxxxxx/xxxx/xxxxxx_xxxxxxx.x	predictive	High
93	File	xxxxxxx/xxx/xxx_xxxxxxx.x	predictive	High
94	File	xxxxx.xxx	predictive	Medium
95	File	xxxxxxx.xxx	predictive	Medium
96	File	xxxxxx/xxx/xxxxxxx.xxx	predictive	High
97	File	xxxxxxx.xxx	predictive	Medium
98	File	xxxx_xxx_xxx.xxx	predictive	High
99	File	xxxxx.xxx	predictive	Medium
100	File	xxxxxxxxxxxxxxxx/xxxxxxxxxxxxxx.xx	predictive	High
101	File	xxxx/xxxxxxxxxx/xxxxxx-xxxxxxx.x	predictive	High
102	File	xxxxxx.xxx	predictive	Medium
103	File	xxx/xxxx/xxxxxx/xxxxxx_xxxxxxx.x	predictive	High
104	File	xxx/xxxxxxxx/xxxx_xxxxx_xxxxxxx.x	predictive	High
105	File	xxx/xxxxxxxx/xxx.x	predictive	High
106	File	xxx/xxxxxxxx/xxx_xxxxxxxxxxxx.xx	predictive	High
107	File	xxx/xxxx/xxxx.x	predictive	High
108	File	xxx.xxx	predictive	Low
109	File	xxxx.xxx	predictive	Medium
110	File	xxxxxxxxxxxx.xxx	predictive	High
111	File	xxxxxxx.xxx	predictive	Medium
112	File	xxxxx.xxx	predictive	Medium
113	File	xxxxx.xxx	predictive	Medium
114	File	xxxxxxx.xxx	predictive	Medium
115	File	xxxxxxxxx/xx/xxxxxxxxxxxx.xxx	predictive	High
116	File	xxxxxxxxx/xxxx-xxxxxxx-xxx.xxx	predictive	High
117	File	xxxxxxx.xxx	predictive	Medium
118	File	xxxxx.xxx	predictive	Medium
119	File	xxxxxxx.xx	predictive	Medium
120	File	xx.xxx	predictive	Low
121	File	xxxxxx/xxxxx_xxxx_xxxxxxx	predictive	High
122	File	xxxx.xxx	predictive	Medium
123	File	xxxx_xxxxxx.x	predictive	High
124	File	xxxx_xxxxxxx.xxx.xxx	predictive	High
125	File	xxxxxx.xxx	predictive	Medium
126	File	xxxxxxxxxxxxx/xxx/xxx/xxxxxxxxxx/xxxxxxx/xxxxxxxxxx.xxxx	predictive	High
127	File	xxxx/xxxxxxxxxxxxxxxxxxxxxxxx.xx	predictive	High
128	File	xxxxxxxxxxxxxxxxxx.xxx	predictive	High
129	File	xxxxxxxxxxxxxxxxxxxxx.xxx	predictive	High
130	File	xxxx_xxxx.x	predictive	Medium
131	File	xx/xxx/xxx-xxxx.x	predictive	High
132	File	xxxxxx_xxxxx_xxxxxx.x	predictive	High
133	File	xxx/xxxxxx.xxx	predictive	High
134	File	xxxxxxx/xxxxxxx/xxxxxxxx.xxx.xxx	predictive	High
135	File	xxxxxxxx/xxxx/xxxxx-xxxxx.xxx	predictive	High
136	File	xxxxxxxx/xxxxx.xxx.xxx	predictive	High
137	File	xxxxx.xxx.xxx	predictive	High
138	File	xxxxx.xx	predictive	Medium
139	File	xxxxx.xxx	predictive	Medium
140	File	xxxxxxx.xxx	predictive	Medium
141	File	xxxxxxxxxxx-xxxxxxx-xxxx.xxxx.xxx	predictive	High
142	File	xxxxxxxxx.xxx	predictive	High
143	File	xxxxxxxxxx.xxx	predictive	High
144	File	xxxxxx.x	predictive	Medium
145	File	xxxxxxxxxx/xxx/xxxxxx_xxxx.xxx	predictive	High
146	File	xxx/xxxxxx/xxxx_xx.xx	predictive	High
147	File	xxxxxxxxxx/xxxx.x	predictive	High
148	File	xxxxxxxxxx/xxxxx.x	predictive	High
149	File	xxxxxxxxxx/xxxx.x	predictive	High
150	File	xxxxxxxxx/xxxxxxx/xxxxxx/xxxxxxxxxx.xxx	predictive	High
151	File	xxxxxx-xxx.xx	predictive	High
152	File	xxx\xxxxxxx\xxxxxxxxxxxx\xxxxxxxxxxx_xxxx_xxxxx.xxx	predictive	High
153	File	xxxxxx.x	predictive	Medium
154	File	xxxxx_xxx.xxx	predictive	High
155	File	xxxx/xxxxx.xxx	predictive	High
156	File	xxxx.xxx	predictive	Medium
157	File	xxxxxxxxxxxx.xxx	predictive	High
158	File	xxxxxxxx/xxxx?xxxxxx=xx	predictive	High
159	File	xxxxxxxxx.xxx	predictive	High
160	File	xxxxxxxx/xxxxxxxxxxx.xx	predictive	High
161	File	xxx_xxxxx.x	predictive	Medium
162	File	xxx_xxx_xxxxxx.x	predictive	High
163	File	xxx_xxxxx_xxxx.x	predictive	High
164	File	xxxxx.xxx	predictive	Medium
165	File	xxx/xxxxxx/xx_xxxxxx.x	predictive	High
166	File	xxxx.xxxx	predictive	Medium
167	File	xxxxxxxx/xxxxxxxx.xxx	predictive	High
168	File	xxxx_xxxxxx.xxx	predictive	High
169	File	xxxx.xxxxxx.xx	predictive	High
170	File	xxx_xxxx_xxx_xxxxxxxxxx.x	predictive	High
171	File	xxxxxxx.xxx	predictive	Medium
172	File	xxxx-xxxxxx\xx\xxxxxx.xxx	predictive	High
173	File	xxxx/xxx/xxxx/xxxx/xxx/xxxxxxx/xxxxxx/xxxxxxxxxxxxxxxxxxxx/xxxx/xxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	High
174	File	xxxxxxxx/xxxxxx/xxxxxxxxx/xxxxxx/xxxxxxx_xxxxx.xxxx	predictive	High
175	File	xxx.xxxxxxxxxx.xxx	predictive	High
176	File	xxxxx.xxxx.xxx	predictive	High
177	File	xxxxxxxx.xxxxx	predictive	High
178	File	xxxxxxxxxxxxxx.xxx	predictive	High
179	File	xxx.xxx	predictive	Low
180	File	xxxx.xxx	predictive	Medium
181	File	xxxxxxxxxxxxxxxxxx.xxx	predictive	High
182	File	xxxxxxx/xxx/xxxxx/xxxxx.xxxxxx.xxx	predictive	High
183	File	xxxxxxxx.xxxxx.xxx	predictive	High
184	File	xxxxx_xxx.xxx	predictive	High
185	File	xxxxx_xxxxxx.xxx	predictive	High
186	File	xxxxxxx/xxxxxxx.x	predictive	High
187	File	xxxxxxx.xxx	predictive	Medium
188	File	xxxxxxxx.xx	predictive	Medium
189	File	xxxxx.x	predictive	Low
190	File	xxxx.xxx	predictive	Medium
191	File	xxxxxxxx.xxx	predictive	Medium
192	File	xxxxxxxxxx.xxx	predictive	High
193	File	xxxxxxx_xxxx.xxx	predictive	High
194	File	xxxxxxxxx/xxxxxxxxxxx/xxxxxxxxxxxxxxxxx.xxx	predictive	High
195	File	xxxxxxxx.x	predictive	Medium
196	File	xxxx_xxxx.xxx	predictive	High
197	File	xxxxxxxx.xxx	predictive	Medium
198	File	xxxxx/xx/xxxxxxxxx/	predictive	High
199	File	xxxxxxxx.xxx	predictive	Medium
200	File	xxxxxxx_xxx_xxxxx_xxxxxx.xxxx	predictive	High
201	File	xxxxxxx.x	predictive	Medium
202	File	xxxxxxxxx/xxxxx/xxxxxxxx/xxxx.xxxx.xxx	predictive	High
203	File	xxxxxx.xxx	predictive	Medium
204	File	xxxxxx_xxxx.xxx	predictive	High
205	File	xxx.xxx	predictive	Low
206	File	xxxx.xxx	predictive	Medium
207	File	xxxx_xxxx_xxxx	predictive	High
208	File	xxxxx/xxxxx.xxx	predictive	High
209	File	xxxx.xxx	predictive	Medium
210	File	xxxxxxxxxxxxxxxx.xxx	predictive	High
211	File	xxxxxxxxxxxxxx.xxx	predictive	High
212	File	xxxxxxxxxxxxxxx.xxx	predictive	High
213	File	xxxx_xxxxxxx_xxxxxxxx.xxx	predictive	High
214	File	xxxxxxxxxxxxxxxx.xx	predictive	High
215	File	xxxx.xxx	predictive	Medium
216	File	xxxxxxxxx/xxxx/xxxxxxxxxxxxxxxx.x	predictive	High
217	File	xxxxxxxxxxxxxx.xxx	predictive	High
218	File	xxxxxxxxxx.x	predictive	Medium
219	File	xxxxxx.x	predictive	Medium
220	File	xxxxxxxxxxx.xxx	predictive	High
221	File	xxxxxxxxxxxxxxx.xxx	predictive	High
222	File	xxxxxxxxx.xxx	predictive	High
223	File	xxxxxx.xxx	predictive	Medium
224	File	xxxxxxxxx.xxx	predictive	High
225	File	xxxxxxx.xxx	predictive	Medium
226	File	xxxx-xxxxxxxx.xxx	predictive	High
227	File	xxxx-xxxx_xxxx_xxxxxxx.xxx	predictive	High
228	File	xxxxx.xxx	predictive	Medium
229	File	xxxxxxxxx.xxx	predictive	High
230	File	xxxxxx.xxx	predictive	Medium
231	File	xxxxxxxxxxxx/xxxxxx_xxxxxx.xxx	predictive	High
232	File	xxx/xxx/xxx-xxx/xxxx.xxx	predictive	High
233	File	xxxxxxx.xxx	predictive	Medium
234	File	xxxxxxxxxxxxxxxxxxx.xxxx	predictive	High
235	File	xxx_xxxx.xxxx	predictive	High
236	File	xxxxxxx.xxx	predictive	Medium
237	File	xxxxxxx.xxx	predictive	Medium
238	File	xxxxx-xxxx/xxx/xxxx/xxxx/xxx/xxxxx/xxxxxx/xxxxxxxxxx/xxxxxxxxxxxxxxx.xxxx	predictive	High
239	File	xxxxxxx.xxx	predictive	Medium
240	File	xxx.xxx	predictive	Low
241	File	xx-xxxxx/xxxxx.xxx	predictive	High
242	File	xx-xxxxx/xxxxxxxx/xxxxx-xx-xxxxx-xxxx-xxxxx.xxx	predictive	High
243	File	xx-xxxxx/xxxx.xxx	predictive	High
244	File	xx-xxxxx-xxxxxx.xxx	predictive	High
245	File	xx-xxxxxxxx/xxxxx-xx-xxxxx.xxx	predictive	High
246	File	xx-xxxxxxxx/xxxxx-xx-xxxxxx-xxxxxx.xxx	predictive	High
247	File	xx-xxxxxxxx/xxxxxxxxx.xxx	predictive	High
248	File	xx-xxxxxxxx/xxxx.xxx	predictive	High
249	File	xx-xxxxxxxx/xxxx-xxx/xxxxxxxxx/xxxxx-xx-xxxx-xxxxx-xxxxxxxxxx.xxx	predictive	High
250	File	xx-xxxxx.xxx	predictive	Medium
251	File	xxx/xxxx_xxxxxx.xxx	predictive	High
252	File	xxx.xxx	predictive	Low
253	File	__xxxx_xxxxxxxx.xxx	predictive	High
254	File	~/xxxxxxx/xxxxxxxxxxxxxxxx.xxx	predictive	High
255	File	~/xxxxxx-xxxxxxx-xxxxxxx.xxx	predictive	High
256	Library	/xxx/xxxxx/xxxxxxxxx.xx	predictive	High
257	Library	/_xxx_xxx/xxxxx.xxx	predictive	High
258	Library	xxxxxx.xxx	predictive	Medium
259	Library	xxxxx.xxx	predictive	Medium
260	Library	xxxxx.xxx	predictive	Medium
261	Library	xxxx.xxx	predictive	Medium
262	Library	xxxxxx.xxx	predictive	Medium
263	Library	xxx/xx/xx.xxx	predictive	High
264	Library	xxxxxxxxxxxxxxxxx	predictive	High
265	Library	xxxxxxxxxx/xxxxxx_xxxxxxxxx.x	predictive	High
266	Library	xxxxxxxx.xxx	predictive	Medium
267	Library	xxxxxxxxxxxxxxxx.xxx	predictive	High
268	Library	xxxxxxxxxxxxxx.xxxxxxx.xxxxxxxxxxxxxxx.xxx	predictive	High
269	Library	xxxxxx-xx/xxx/xxx-xxxxxx-xxxxx-xx.xxx	predictive	High
270	Library	xx/xxx.xxx.xxx	predictive	High
271	Library	xxxxxx.xxx	predictive	Medium
272	Library	xxx/xxxxxxx.xxxxxx.xxx/xxx/xxxxxxxxxxxxx.xx	predictive	High
273	Library	xxxxxx/xxxxxxx/xxxx.xxx	predictive	High
274	Library	xxxxxx.xxx	predictive	Medium
275	Library	xxxxxxx.xxx/xxxxxx.xxx	predictive	High
276	Argument	$xxxx	predictive	Low
277	Argument	$_xxxxxx['xxx_xxxx']	predictive	High
278	Argument	xxxxxxx	predictive	Low
279	Argument	xxxxxxx	predictive	Low
280	Argument	xxxxx	predictive	Low
281	Argument	xxxxx	predictive	Low
282	Argument	xxxxxxxxx	predictive	Medium
283	Argument	xxxxxxxxxxxxxx	predictive	High
284	Argument	xxxxxxx	predictive	Low
285	Argument	xxxxxxxx	predictive	Medium
286	Argument	xxxxx	predictive	Low
287	Argument	xxxxxx	predictive	Low
288	Argument	xxxxx_xxxx	predictive	Medium
289	Argument	xxx_xxx	predictive	Low
290	Argument	xxxxxxxxxx_xxxx	predictive	High
291	Argument	xxx	predictive	Low
292	Argument	xxxxxxxxx	predictive	Medium
293	Argument	xxxxx	predictive	Low
294	Argument	xxx_xx	predictive	Low
295	Argument	xxx	predictive	Low
296	Argument	xxx	predictive	Low
297	Argument	xxxxxx	predictive	Low
298	Argument	xxxxxxxxxxxx/xxxxxxx	predictive	High
299	Argument	xxxxxxx	predictive	Low
300	Argument	xxxxxxxxxx	predictive	Medium
301	Argument	xxxxxx	predictive	Low
302	Argument	xxxxxx_xx	predictive	Medium
303	Argument	xxxx	predictive	Low
304	Argument	xxxxxxxxxxx	predictive	Medium
305	Argument	xxxxxxxxx	predictive	Medium
306	Argument	xxxxxxxxxxxx	predictive	Medium
307	Argument	xxx_xxxx	predictive	Medium
308	Argument	xxxxxx xx xxxx xxx	predictive	High
309	Argument	xxxx	predictive	Low
310	Argument	xxxxx	predictive	Low
311	Argument	xx_xx	predictive	Low
312	Argument	xxxx	predictive	Low
313	Argument	xxxxxxxx	predictive	Medium
314	Argument	xxxxxxxx	predictive	Medium
315	Argument	xxxxx	predictive	Low
316	Argument	xxxxxxxxx/xxxxxxxx	predictive	High
317	Argument	xxxx_xxxxxx[xxxxx]	predictive	High
318	Argument	xxxxxxx	predictive	Low
319	Argument	xxxx	predictive	Low
320	Argument	xxxxxxxx	predictive	Medium
321	Argument	xxxxxxx	predictive	Low
322	Argument	xxxx	predictive	Low
323	Argument	x_xxxxxxxxxx	predictive	Medium
324	Argument	xxx_xxxx	predictive	Medium
325	Argument	xxxxxx_xxxx_xxx	predictive	High
326	Argument	xxxxxx_xxxxxxxxxxxxxxxxxxxxxxxxxx	predictive	High
327	Argument	xxxx	predictive	Low
328	Argument	xxxx	predictive	Low
329	Argument	xxxx/xxxxxxx	predictive	Medium
330	Argument	xxxxxxxx	predictive	Medium
331	Argument	xxxx	predictive	Low
332	Argument	xxxx_xx	predictive	Low
333	Argument	xxxx_xxxxx	predictive	Medium
334	Argument	xx	predictive	Low
335	Argument	xx	predictive	Low
336	Argument	xxxxxxxxxx	predictive	Medium
337	Argument	xxxxxxx	predictive	Low
338	Argument	xxxxxxxxx	predictive	Medium
339	Argument	xxxxx	predictive	Low
340	Argument	xxxxxxx_xxxx	predictive	Medium
341	Argument	xxxxxxx_xxxx	predictive	Medium
342	Argument	xxxxxx	predictive	Low
343	Argument	xxxx_xx	predictive	Low
344	Argument	xxxxx	predictive	Low
345	Argument	xx_xxx	predictive	Low
346	Argument	xxx	predictive	Low
347	Argument	xxxxxxxx	predictive	Medium
348	Argument	xxxx_xx	predictive	Low
349	Argument	xxx_xxxxxx[xxxxxxx_xxx	predictive	High
350	Argument	xxxxxxx/xxxxxx_xx	predictive	High
351	Argument	xxxxx	predictive	Low
352	Argument	xxx	predictive	Low
353	Argument	xxx_xxxx	predictive	Medium
354	Argument	x_xxxxxx_xxxxx_xxxx	predictive	High
355	Argument	xxxx	predictive	Low
356	Argument	xxxx_xxxx	predictive	Medium
357	Argument	xxx	predictive	Low
358	Argument	xx	predictive	Low
359	Argument	xxxxxxx/xxxx/xxxxxxxx	predictive	High
360	Argument	xxxxxxx	predictive	Low
361	Argument	x_xx	predictive	Low
362	Argument	xxxxxxxx	predictive	Medium
363	Argument	xxxx_xxxx	predictive	Medium
364	Argument	xxxxxxxxxxxxx	predictive	High
365	Argument	xx_xxxx	predictive	Low
366	Argument	xxxx_xxx_xx/xxxx_xxx_xxxx/xxxx_xxx_xx/xxx_xxxx_xxxx	predictive	High
367	Argument	xxxx	predictive	Low
368	Argument	xxxxxxxx_xx	predictive	Medium
369	Argument	xxxxxxxxx_	predictive	Medium
370	Argument	xxxxxxxx	predictive	Medium
371	Argument	xxxxxxxx	predictive	Medium
372	Argument	xxxx xxxxx	predictive	Medium
373	Argument	xxxxxx_xx	predictive	Medium
374	Argument	xxxxxxxx	predictive	Medium
375	Argument	xxxxxx	predictive	Low
376	Argument	xxxxxx	predictive	Low
377	Argument	xxxxxxxxxxxxxxxxxxx	predictive	High
378	Argument	xxxxxx	predictive	Low
379	Argument	xxxxxxxxx/xxxxxxxxxxx	predictive	High
380	Argument	xxxxxxx	predictive	Low
381	Argument	xxxxxxx	predictive	Low
382	Argument	xxx	predictive	Low
383	Argument	xxx_xxxx	predictive	Medium
384	Argument	xxxx_xxx_xxxx	predictive	High
385	Argument	xxxx	predictive	Low
386	Argument	xxxx.xxx/xxxx.xxx	predictive	High
387	Argument	xxxxxxxx	predictive	Medium
388	Argument	xxx	predictive	Low
389	Argument	xxxx	predictive	Low
390	Argument	xxxxxx	predictive	Low
391	Argument	xxxxxxxxxx[xxxx]	predictive	High
392	Argument	xxxxx_xx	predictive	Medium
393	Argument	xxxxx	predictive	Low
394	Argument	xxxxx	predictive	Low
395	Argument	xxxxx	predictive	Low
396	Argument	xxxx	predictive	Low
397	Argument	xxxx_xx	predictive	Low
398	Argument	xx_xxxx_xxx	predictive	Medium
399	Argument	xxx	predictive	Low
400	Argument	xxxx	predictive	Low
401	Argument	xxxxxxxx	predictive	Medium
402	Argument	xxxxxxxx	predictive	Medium
403	Argument	xxxxxxxx/xxxxxxxx	predictive	High
404	Argument	xxxx_xx	predictive	Low
405	Argument	xxxxxxxxxxxx	predictive	Medium
406	Argument	xxx_xxxxxx_xxxxxxx_xx_xxx	predictive	High
407	Argument	\xxx\	predictive	Low
408	Argument	\xxxxxx\	predictive	Medium
409	Argument	_xxxxxxx	predictive	Medium
410	Argument	__xxxxxx	predictive	Medium
411	Input Value	"><xxxxxx>xxxxx(/xxx/)</xxxxxx>	predictive	High
412	Input Value	'xx''='	predictive	Low
413	Input Value	../	predictive	Low
414	Input Value	/%xx	predictive	Low
415	Input Value	xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx' xxx xxxx=xxxx xxx 'xxxx'='xxxx	predictive	High
416	Input Value	</xxxxx><xxx xxx=xx xxxxxxx=xxxxx(x)>	predictive	High
417	Input Value	xxxxx' xxx (xxxxxx xxxx xxxx (xxxxxx(xxxxx(x)))xxxx) xxx 'xxxx'='xxxx&xxxxxxxx=xxxxxxxxxx	predictive	High
418	Input Value	xxxxxxxx	predictive	Medium
419	Pattern	xx	predictive	Low
420	Pattern	x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|.\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|	predictive	High
421	Pattern	xxxxxxxxxxxxx	predictive	High
422	Pattern	\|xx\|xx\|xx\|	predictive	Medium
423	Pattern	\|xx\|	predictive	Low
424	Network Port	xxx/xxx	predictive	Low
425	Network Port	xxx/xxxx	predictive	Medium
426	Network Port	xxx/xxxx	predictive	Medium
427	Network Port	xxx/xxx (xxx)	predictive	High
428	Network Port	xxx/xxx (xxxx)	predictive	High
429	Network Port	xxx xxxxxx xxxx	predictive	High

References (2)

The following list contains external sources which discuss the actor and the associated activities:

◂ PreviousOverviewNext ▸

Do you know our Splunk app?

Download it now for free!