Vobfus 分析

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (696)

语言

en	528
zh	68
de	34
ru	20
es	14

国家/地区

us	400
cn	140
ru	54
fr	24
gb	10

演员

Vobfus	6
TrickBot	4
Expiro	3
MyKings	2
Liberty Front Press	1

利益

类型

Not Defined	240
Operating System	40
Content Management System	34
Web Server	28
Router Operating System	18

供应商

Not Defined	244
Microsoft	44
Apache	20
Linux	14
ZyXEL	10

产品

Microsoft Windows	18
Linux Kernel	14
Microsoft IIS	12
phpMyAdmin	10
Apache HTTP Server	8

漏洞

#	漏洞	Base	Temp	0day	今天	易	修正	EPSS	CTI	CVE
1	LogicBoard CMS away.php Redirect	6.3	6.1	$0-$5k	$0-$5k	Not Defined	Unavailable	0.00000	3.72
2	Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash 信息公开	5.3	5.2	$5k-$25k	$0-$5k	High	Workaround	0.02016	0.02	CVE-2007-1192
3	Basilix Webmail login.php3 权限升级	7.3	7.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00000	0.02
4	DZCP deV!L`z Clanportal config.php 权限升级	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00943	0.89	CVE-2010-0966
5	Microsoft IIS 跨网站脚本	5.2	4.7	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00548	0.21	CVE-2017-0055
6	nginx 权限升级	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00241	3.34	CVE-2020-12440
7	Apache HTTP Server mod_rewrite Redirect	6.7	6.7	$25k-$100k	$5k-$25k	Not Defined	Not Defined	0.00258	0.04	CVE-2020-1927
8	Apache Log4j SMTP Appender SMTPS 弱身份验证	3.7	3.7	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00191	0.03	CVE-2020-9488
9	Dropbear SSH dropbearconvert 权限升级	8.0	7.7	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00956	0.02	CVE-2016-7407
10	Dropbear SSH 权限升级	8.5	8.2	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02911	0.04	CVE-2016-7406
11	Basti2web Book Panel books.php SQL注入	7.3	7.0	$0-$5k	$0-$5k	High	Official Fix	0.00064	0.02	CVE-2009-4889
12	Maran PHP Shop prod.php SQL注入	7.3	7.3	$0-$5k	$0-$5k	High	Unavailable	0.00137	0.03	CVE-2008-4879
13	OpenSSH Authentication Username 信息公开	5.3	4.8	$5k-$25k	$0-$5k	High	Official Fix	0.10737	0.13	CVE-2016-6210
14	Lars Ellingsen Guestserver guestbook.cgi 跨网站脚本	4.3	4.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00169	0.04	CVE-2005-4222
15	lighttpd mod_alias_physical_handler mod_alias.c 目录遍历	7.4	7.2	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00493	0.02	CVE-2018-19052
16	Microsoft IIS IP/Domain Restriction 权限升级	6.5	5.7	$25k-$100k	$0-$5k	Unproven	Official Fix	0.00817	0.38	CVE-2014-4078
17	Next.js 目录遍历	5.0	4.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00213	0.00	CVE-2020-5284
18	Serendipity exit.php 权限升级	6.3	6.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00000	0.25
19	Eclipse Jetty 权限升级	6.5	6.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00072	0.03	CVE-2020-27216
20	Apple iOS API Core Text Bomb 拒绝服务	7.5	7.2	$25k-$100k	$0-$5k	High	Official Fix	0.02483	0.00	CVE-2018-4100

IOC - Indicator of Compromise (47)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP地址	Hostname	参与者	Identified	类型	可信度
1	13.107.21.200		Vobfus	2022-04-14	verified	高
2	18.211.9.206	ec2-18-211-9-206.compute-1.amazonaws.com	Vobfus	2022-04-14	verified	中
3	23.20.239.12	ec2-23-20-239-12.compute-1.amazonaws.com	Vobfus	2022-04-14	verified	中
4	37.48.65.148		Vobfus	2022-04-29	verified	高
5	45.202.208.234		Vobfus	2022-05-05	verified	高
6	46.166.182.115		Vobfus	2022-04-29	verified	高
7	52.137.90.34		Vobfus	2021-07-17	verified	高
8	64.32.8.67	customer.sharktech.net	Vobfus	2022-04-29	verified	高
9	67.225.218.50	lb01.parklogic.com	Vobfus	2022-04-14	verified	高
10	69.50.208.17		Vobfus	2023-04-25	verified	高
11	XX.XX.XX.XXX		Xxxxxx	2022-04-14	verified	高
12	XX.XX.XXX.XXX	xxxx.xxxxxxxxx.xxx	Xxxxxx	2022-04-14	verified	高
13	XX.XX.XX.XXX		Xxxxxx	2022-04-29	verified	高
14	XX.XX.XX.XX		Xxxxxx	2021-07-17	verified	高
15	XX.XXX.XXX.XX		Xxxxxx	2023-04-25	verified	高
16	XXX.XX.X.XX		Xxxxxx	2022-04-14	verified	高
17	XXX.XX.X.XX		Xxxxxx	2022-04-14	verified	高
18	XXX.XX.XXX.XX		Xxxxxx	2022-04-14	verified	高
19	XXX.XX.XX.XXX		Xxxxxx	2022-04-14	verified	高
20	XXX.XX.XX.XXX		Xxxxxx	2022-04-14	verified	高
21	XXX.XX.XX.XX		Xxxxxx	2022-04-14	verified	高
22	XXX.XX.XXX.XXX	xxx-xxx-xx-xxx-xxx.xxxxxxx-x.xxxxxxxxx.xxx	Xxxxxx	2022-04-14	verified	中
23	XXX.XXX.X.XXX	xxxxxxxx-xx-xx.xxxxx.xxx	Xxxxxx	2022-04-14	verified	高
24	XXX.XXX.X.XXX	xxxxxxxx-xx-xxx.xxxxx.xxx	Xxxxxx	2022-04-29	verified	高
25	XXX.XXX.X.XXX	xxxxxxxx-xx-xxx.xxxxx.xxx	Xxxxxx	2022-04-14	verified	高
26	XXX.XXX.XX.XX	xxxxxxxx-xx-xx.xxxxx.xxx	Xxxxxx	2022-04-14	verified	高
27	XXX.XXX.XX.XXX	xxxxxxxx-xx-xx.xxxxx.xxx	Xxxxxx	2022-04-14	verified	高
28	XXX.XXX.XX.XX	xxxxxxxx-xx-xxx.xxxxx.xxx	Xxxxxx	2022-04-29	verified	高
29	XXX.XXX.XX.XXX	xxxxxxxx-xx-xx.xxxxx.xxx	Xxxxxx	2022-04-14	verified	高
30	XXX.XXX.XX.XXX	xxxxxxxx-xx-xxx.xxxxx.xxx	Xxxxxx	2022-04-14	verified	高
31	XXX.XXX.XX.XX	xxxxxxxx-xx-xx.xxxxx.xxx	Xxxxxx	2022-04-14	verified	高
32	XXX.XXX.XX.XXX	xxxxxxxx-xx-xx.xxxxx.xxx	Xxxxxx	2022-04-14	verified	高
33	XXX.XXX.XXX.XXX	xx.xx.xxxx.xxx.xxxxxx.xx-xxxxxxx.xxx	Xxxxxx	2023-01-16	verified	高
34	XXX.XXX.XXX.XXX		Xxxxxx	2022-04-29	verified	高
35	XXX.XXX.XXX.XXX		Xxxxxx	2021-07-17	verified	高
36	XXX.XXX.XXX.XXX		Xxxxxx	2021-07-17	verified	高
37	XXX.XX.XXX.XX		Xxxxxx	2022-04-14	verified	高
38	XXX.XXX.XXX.XXX	xxxx.xxxxxx.xxx	Xxxxxx	2021-07-17	verified	高
39	XXX.XXX.XXX.XX	xxxxxx-xx-xxx-xxx-xxx-xx.xxxxxx.xx-xxxx.xxx	Xxxxxx	2022-04-29	verified	高
40	XXX.XXX.XXX.XX		Xxxxxx	2022-04-14	verified	高
41	XXX.XXX.XXX.XXX	xxxxx.xxxxxxxxxx.xxx	Xxxxxx	2022-04-29	verified	高
42	XXX.XX.XX.XX		Xxxxxx	2022-04-12	verified	高
43	XXX.XX.XXX.XXX	x-xxxx.x-xxxxxx.xxx	Xxxxxx	2022-04-14	verified	高
44	XXX.XXX.XX.XXX		Xxxxxx	2022-04-29	verified	高
45	XXX.XX.XXX.XX		Xxxxxx	2022-04-12	verified	高
46	XXX.XX.XX.XX		Xxxxxx	2022-04-14	verified	高
47	XXX.XXX.XXX.XX	xxxx-xx.xxxxxxxxxxxx.xxx	Xxxxxx	2022-04-14	verified	高

TTP - Tactics, Techniques, Procedures (21)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	漏洞	访问向量	类型	可信度
1	T1006	CWE-21, CWE-22, CWE-23	Path Traversal	predictive	高
2	T1055	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	高
3	T1059	CWE-94	Argument Injection	predictive	高
4	T1059.007	CWE-79, CWE-80	Cross Site Scripting	predictive	高
5	T1068	CWE-264, CWE-269, CWE-284	Execution with Unnecessary Privileges	predictive	高
6	TXXXX.XXX	CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	高
7	TXXXX	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	高
8	TXXXX.XXX	CWE-XXX	Xxxx Xxxxxxxx	predictive	高
9	TXXXX	CWE-XXX, CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	高
10	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	高
11	TXXXX	CWE-XX	Xxx Xxxxxxxxx	predictive	高
12	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	高
13	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
14	TXXXX	CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	高
15	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
16	TXXXX.XXX	CWE-XXX	Xxxxxxxx	predictive	高
17	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
18	TXXXX.XXX	CWE-XX	Xxxxxxxxxxxxx	predictive	高
19	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	高
20	TXXXX.XXX	CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	高
21	TXXXX.XXX	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	高

IOA - Indicator of Attack (357)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	分类	Indicator	类型	可信度
1	File	/adfs/ls	predictive	中
2	File	/admin/inquiries/view_details.php	predictive	高
3	File	/api/RecordingList/DownloadRecord?file=	predictive	高
4	File	/api/sys/set_passwd	predictive	高
5	File	/app/controller/Books.php	predictive	高
6	File	/bin/boa	predictive	中
7	File	/cgi-bin/wapopen	predictive	高
8	File	/cgi-bin/wlogin.cgi	predictive	高
9	File	/config/getuser	predictive	高
10	File	/context/%2e/WEB-INF/web.xml	predictive	高
11	File	/dev/urandom	predictive	中
12	File	/etc/ajenti/config.yml	predictive	高
13	File	/etc/quantum/quantum.conf	predictive	高
14	File	/etc/shadow	predictive	中
15	File	/exec/	predictive	低
16	File	/forum/away.php	predictive	高
17	File	/getcfg.php	predictive	中
18	File	/goform/dir_setWanWifi	predictive	高
19	File	/HNAP1	predictive	低
20	File	/mgmt/tm/util/bash	predictive	高
21	File	/MIME/INBOX-MM-1/	predictive	高
22	File	/modules/projects/vw_files.php	predictive	高
23	File	/opt/tms/bin/cli	predictive	高
24	File	/out.php	predictive	中
25	File	/plain	predictive	低
26	File	/server-status	predictive	高
27	File	/setSystemAdmin	predictive	高
28	File	/staff/tools/custom-fields	predictive	高
29	File	/tmp/phpglibccheck	predictive	高
30	File	/uncpath/	predictive	中
31	File	/WebMstr7/servlet/mstrWeb	predictive	高
32	File	/webpages/data	predictive	高
33	File	/wp-admin/options.php	predictive	高
34	File	/wp-content/plugins/updraftplus/admin.php	predictive	高
35	File	/wp-content/plugins/woocommerce/templates/emails/plain/	predictive	高
36	File	/wp-json/oembed/1.0/embed?url	predictive	高
37	File	/xyhai.php?s=/Auth/editUser	predictive	高
38	File	/_next	predictive	低
39	File	account.asp	predictive	中
40	File	actionHandler/ajax_managed_services.php	predictive	高
41	File	adclick.php	predictive	中
42	File	xxx_xxxxxxx.xxx	predictive	高
43	File	xxxxx.xxxxxxxxxxxxxx.xxx	predictive	高
44	File	xxxxx.xxxxxxxxxx.xxx	predictive	高
45	File	xxxxx.xxx	predictive	中
46	File	xxxxx/xxxxx.xxxxx	predictive	高
47	File	xxxxxxxxxxxxx/xxxxxxxxxx/xxx_xxxxx/xxxxxxx/xxxxx.xxx	predictive	高
48	File	xxxxx\xxxxx\xxxxxxx\xxxxxxxx.xxx	predictive	高
49	File	xxxxxx.xxx	predictive	中
50	File	xxxx-xxxxxxx.xxx	predictive	高
51	File	xxxx/xxx/xxxx/xxxxxxxxxxx	predictive	高
52	File	xxxxxxxxxxx.xxx	predictive	高
53	File	xxxxx_xxxxxx.xxx	predictive	高
54	File	xxxxxx/xxxxxxxxx.xxx	predictive	高
55	File	xxxxxxxxx/xxxxxxxxxxxxx	predictive	高
56	File	xxx/xxxxxxx/xxxxx/xxx/xxxxxxx/xxxxxx/xxx/xxxxxxxxx/xxxxxxx/xxxxxxxxx.xxx	predictive	高
57	File	xxx/xxxxx/xxxxxx/xxxxx/xxxxx.xxx	predictive	高
58	File	xxxxxxxxxxxxxx.xxx	predictive	高
59	File	xxxxxx.xxx	predictive	中
60	File	xxxx-xxxx.x	predictive	中
61	File	xxxxxxx.xxxx	predictive	中
62	File	xxxxxxxxxxxxxx.xxx	predictive	高
63	File	xxxxxx.xxxxxxx.xxx	predictive	高
64	File	xxxxxxx.xx	predictive	中
65	File	xxx/xxxxxx_xxxxxxx.xxx	predictive	高
66	File	xxxxx.xxx	predictive	中
67	File	xxxx.x	predictive	低
68	File	x:\xxxx	predictive	低
69	File	x:\xxxxx\	predictive	中
70	File	xxx_xxxx.x	predictive	中
71	File	xxxx_xxxxxxx.xxx	predictive	高
72	File	xxx-xxx/	predictive	中
73	File	xxx-xxx/xxxxxxx.xx	predictive	高
74	File	xxx-xxx/xxxxxx	predictive	高
75	File	xxx-xxx/xxxx_xxx.xxx	predictive	高
76	File	xxxxx.xxxxx.xxx	predictive	高
77	File	xxxxxxxxxx_xxxxx.xxx	predictive	高
78	File	xxx.xxx	predictive	低
79	File	xxx.xxx	predictive	低
80	File	xxxxxxxx_xxxxxxx.xxx	predictive	高
81	File	xxxxxxxx_xxxxxxxxxxxxxxxxx.xxx	predictive	高
82	File	xxxxxxxxxxxxxxxxxxxx.xxxx	predictive	高
83	File	xxxxxx.xxx.xxx	predictive	高
84	File	xxxxxx_xxxxxxx.xxx	predictive	高
85	File	xxxxxxx/xxx_xxxxxxx.xxx	predictive	高
86	File	xxxxxx.x	predictive	中
87	File	xxxx/xxxxxxxxxxxxxxx.xxx	predictive	高
88	File	xxxxxxxxxxxxxxx/	predictive	高
89	File	xxxxx_xxxx.x	predictive	中
90	File	xxxxxxx.xxx	predictive	中
91	File	xxxxxxxxx.xxx	predictive	高
92	File	xxxxxxxxxxxxxxx.xxx	predictive	高
93	File	xxxxxxxxxxxxxxxxxxxxxx	predictive	高
94	File	xxxxxxxx_xxx.xxx	predictive	高
95	File	xxxxxxx/xxx/xxxxxxxx.x	predictive	高
96	File	xxxxxxx/xxxxxxxxxx/xxxx/xxxx.x	predictive	高
97	File	xxxxxxx/xxx/xxx/xxxxx.x	predictive	高
98	File	xxxxxxx/xxx/xxxxxxxx/xxxxxxx/xxxxxxxx/xxxxxxxx_xxxxx.x	predictive	高
99	File	xxxxxxx/xxx/xxxxxx/xxxx_xxxxxxxxxx.x	predictive	高
100	File	xxxxx.xxx	predictive	中
101	File	xxxx/xxxxxxxxxx/xxxxxx-xxx.x	predictive	高
102	File	xxxxx.xxx	predictive	中
103	File	xxxx.xxx	predictive	中
104	File	xxx/xxxx/xxxxxx/xxxxxx_xxxxxxx.x	predictive	高
105	File	xxxxxxxxxxx.xxxxx.xxx	predictive	高
106	File	xxx_xxxx.x	predictive	中
107	File	xxxxxxxxxxxxxxxxxxxxxxxxxx.xxx	predictive	高
108	File	xxxxxx.xxx	predictive	中
109	File	xx/xxxxxx/xxxxxx.x	predictive	高
110	File	xx/xxxxxxxxx/xxxx_xx.x	predictive	高
111	File	xx/xxxxxxx.x	predictive	中
112	File	xxx_xxxxxx.x	predictive	中
113	File	xxxxxx.xxx	predictive	中
114	File	xxxx.xxx	predictive	中
115	File	xxxx.xxx	predictive	中
116	File	xxxxxxxxx.xxx	predictive	高
117	File	xxxxxxxxx.xx	predictive	中
118	File	xxxxxx.xxx	predictive	中
119	File	xxxxxx.xxx	predictive	中
120	File	xxxx.xxx	predictive	中
121	File	xxxxxxxxxx.xxx	predictive	高
122	File	xxxx/xxxxxxxxxxxxxxxxxxxxxxxx.xx	predictive	高
123	File	xxxx_xxxx.x	predictive	中
124	File	x-xxxx.xxx	predictive	中
125	File	xxxxxxxxx.xxx	predictive	高
126	File	xxx/xxxxxx.xxx	predictive	高
127	File	xxx/xxxxxxxxxxx/xxxxxxx.xxx	predictive	高
128	File	xxxxxxx.xxx	predictive	中
129	File	xxxxxxxx/xxxx.xxx	predictive	高
130	File	xxxxx.xxx	predictive	中
131	File	xxxxx.xxx	predictive	中
132	File	xxxx.xxx.xxx	predictive	中
133	File	xxxxxx.xxx	predictive	中
134	File	xxxxxxx.xxxxx	predictive	高
135	File	xxxx_xxxx.xxx	predictive	高
136	File	xxxx_xxxx.xxx	predictive	高
137	File	xx/xxx_xxxxxxx.xx.xxx	predictive	高
138	File	xxxxxx.x	predictive	中
139	File	xxxxxx/xxxxx/xxxx.x	predictive	高
140	File	xxxxx.xxx	predictive	中
141	File	xxxxxx.xxx	predictive	中
142	File	xxxxxxxxx/xxxxxx.xxx.xxx	predictive	高
143	File	xxxxx.xxx	predictive	中
144	File	xxxxx.xxx	predictive	中
145	File	xxxxx.xxxx	predictive	中
146	File	xxxxxxxx.xx	predictive	中
147	File	xxxx.xxx	predictive	中
148	File	xxxxxxxx.xxx	predictive	中
149	File	xxxxxxx_xxx.xxx	predictive	高
150	File	xx/xxx.x	predictive	中
151	File	xxxxxxx/xxx_xxxxxxxx.xxx	predictive	高
152	File	xxx_xxxxx.x	predictive	中
153	File	xxx_xxxxx_xxxxxx_xxxxx.xxx	predictive	高
154	File	xxx_xxxxxxxx.xxx	predictive	高
155	File	xxx_xxxxx_xxxxx.x	predictive	高
156	File	xxx_xxxxx_xxxx.x	predictive	高
157	File	xxxxxxx/xxxxx.x	predictive	高
158	File	xxxxxxxx.xxx	predictive	中
159	File	xxxxxxxxx/xxxxxxxxxxxxxx:x.x.x	predictive	高
160	File	xxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	高
161	File	xxx/xxxxx.xxxx	predictive	高
162	File	xxxxx/xxxxxxxx.xxx.xxx	predictive	高
163	File	xxxxxxxxxxx.xxx	predictive	高
164	File	xxxxxxxxxxxxxxx.xxx	predictive	高
165	File	xxxxxxx.xxx	predictive	中
166	File	xxxxxxxx.xx	predictive	中
167	File	xxxx.xxx	predictive	中
168	File	xxxxxxxx.xxx	predictive	中
169	File	xxxxxxx.xx	predictive	中
170	File	xxx_xxxxxxxxxxxx.xxx	predictive	高
171	File	xxxxxxxxxx.xxx	predictive	高
172	File	xxxxx_xxxxx.xxx	predictive	高
173	File	xxxx.xxx	predictive	中
174	File	xxxxxxx.xxx	predictive	中
175	File	xxxxxxxxxx.xxx	predictive	高
176	File	xxxxxxxx_xxxx.xxx	predictive	高
177	File	xxx/xxxxxxx/xxxxxx/xxxx/xxxxx/xxxxxxx/xxxxxx/xxxxx/xxx%xxxxxxxxxxxxx.xx.xxx	predictive	高
178	File	xxxx.xxx	predictive	中
179	File	xxx.x	predictive	低
180	File	xxxxxx.xx	predictive	中
181	File	xxxxxx_xxx_xxxxxx.xxx	predictive	高
182	File	xxxxxxxxxxx.xxx	predictive	高
183	File	xxxxxxxx.xxx	predictive	中
184	File	xxxxx.xxx	predictive	中
185	File	xxxx.xxx	predictive	中
186	File	xxxxx/xxxxxxxx/xxxxxxxxx.xxx	predictive	高
187	File	xxxxxxxxx/xxxxx/xxxx/xxx_xxxxxxx/xxxxxxx/xxxxxxx.xxx	predictive	高
188	File	xxxxx/xxxx-xxxxxx.x	predictive	高
189	File	xx/xxx/xxxxxxxx	predictive	高
190	File	xxxxxxx.xxx/xxxxxxx.xxxxxxxxxxxx/xxxxxxx/xxxxxxxxx/xxxxxxxxx.xxxx.xx	predictive	高
191	File	xxx.xxx	predictive	低
192	File	xxxxxxxxx.x	predictive	中
193	File	xxxxx_xx.xxx	predictive	中
194	File	xxxx.xxx	predictive	中
195	File	xxxxxxx.xxx	predictive	中
196	File	xxxxxxx.xxx	predictive	中
197	File	xxxx_xxxxx.xxx	predictive	高
198	File	xxxxxx.xxx	predictive	中
199	File	xxxxxxx.x	predictive	中
200	File	xxx\_xxxxxxx\_xxxxxxx.xxx	predictive	高
201	File	xxxxxxxx.xxx	predictive	中
202	File	xx-xxxxx/xxxxx.xxx?xxxx=xx_xxxxxxx_xxxx_xxxxxx.xxx&xxxxxxx=x	predictive	高
203	File	xx-xxxxx/xxxxxxxxx.xxx	predictive	高
204	File	xx-xxxxx.xxx	predictive	中
205	File	xxxxxxxxxx.xxx	predictive	高
206	File	xxxxx.x	predictive	低
207	File	xxxxx.xxx	predictive	中
208	File	xxxxxx.xxx	predictive	中
209	File	xxxxxxxxxxx.xxx	predictive	高
210	File	xxxxxxxxxxxx.xxx	predictive	高
211	Library	/xxx/xxx/xxx/xxxx/xxxxxxxxxx/xxxxx/xxxxxx.xxx	predictive	高
212	Library	/xxx/xxx/xxx/xxxx/xxxxxxxxxx/xxxxx/xxxxxxxxxx.xxx	predictive	高
213	Library	/_xxx_xxx/xxxxx.xxx	predictive	高
214	Library	xxxxxx.xxx	predictive	中
215	Library	xxxxxx/xxx/xxxxxxxxx/xxx/xxx_xxx.x	predictive	高
216	Library	xxxxxxxxx.xxxxxxxxxx.xxxxxxxxxxx.xxx.xxx	predictive	高
217	Library	xxxxxx-xx/xxx/xxx-xxxxxx-xxxxx-xx.xxx	predictive	高
218	Library	xx/xxx.xxx.xxx	predictive	高
219	Library	xxxxxx/xxxxxxx/xxxx.xxx	predictive	高
220	Library	xxxxx.xxx	predictive	中
221	Library	xxxxxx.xxx	predictive	中
222	Library	xxxxxxx.xxx/xxxxxx.xxx	predictive	高
223	Argument	-x	predictive	低
224	Argument	-x/-x	predictive	低
225	Argument	?xxxx_xxxx=xxxxxxx.xxx/xxxx=xxxxxx/xxx=xxx+/xxx/.xxxxxxxx/xxxxxxx=//xxxxxxxxxxxxxx.xxx=x	predictive	高
226	Argument	xx/xx	predictive	低
227	Argument	xxxxxxxx_xxxx	predictive	高
228	Argument	xxxxxxx	predictive	低
229	Argument	xxxxx	predictive	低
230	Argument	xxxxxx_xxxx	predictive	中
231	Argument	xxxxxxxxxxxxxx	predictive	高
232	Argument	xxxx	predictive	低
233	Argument	xxxxxxxx	predictive	中
234	Argument	xxxxxxxx	predictive	中
235	Argument	xxxx_xxx	predictive	中
236	Argument	xxxxxx	predictive	低
237	Argument	xxx_xxx	predictive	低
238	Argument	xxxxxxxxxx_xxxx	predictive	高
239	Argument	xxx_xxx	predictive	低
240	Argument	xxxx_xxx_xxxx	predictive	高
241	Argument	xxx	predictive	低
242	Argument	xxxxxxxx	predictive	中
243	Argument	xxx_xx	predictive	低
244	Argument	xxx	predictive	低
245	Argument	xxxxxxxxx	predictive	中
246	Argument	xxxx_xx	predictive	低
247	Argument	xxxxxxx	predictive	低
248	Argument	xxxxxx	predictive	低
249	Argument	xxxxxx[xxxxxxx_xxx]	predictive	高
250	Argument	xxxxxx_xxxxxxx[xxxx][xxxxxxx][]	predictive	高
251	Argument	xxxxxxxxxxxxxxxx	predictive	高
252	Argument	xxx_x_xxx	predictive	中
253	Argument	xx_xxxxxxxxxxxxx_xx	predictive	高
254	Argument	xxxxxxxxxxxx	predictive	中
255	Argument	xxxx	predictive	低
256	Argument	xxx	predictive	低
257	Argument	xxx	predictive	低
258	Argument	xxxxxxxx[xxxx_xxx]	predictive	高
259	Argument	xxxxx xxxx	predictive	中
260	Argument	xxxxxxxxxxx	predictive	中
261	Argument	xxxxx_xxxx_xxxx	predictive	高
262	Argument	xx_xxxxxxx	predictive	中
263	Argument	xxxx	predictive	低
264	Argument	xxxxxxxxxx	predictive	中
265	Argument	xxxxxxxx	predictive	中
266	Argument	xxxxxxx	predictive	低
267	Argument	xxx	predictive	低
268	Argument	xxxxx_xx	predictive	中
269	Argument	xxxxxxxx	predictive	中
270	Argument	xxxx	predictive	低
271	Argument	xxxx	predictive	低
272	Argument	xxxx	predictive	低
273	Argument	xx_xxxx_xx/xx_xxxx_xx	predictive	高
274	Argument	xx	predictive	低
275	Argument	xxxxxxxxxx	predictive	中
276	Argument	xxxxxxxxx	predictive	中
277	Argument	xx_xxx	predictive	低
278	Argument	xx_xxxx	predictive	低
279	Argument	xxxxx	predictive	低
280	Argument	xxxxx.xxx?xxxxxx=xxx_xxxxxxx/xxxx=xxxxxxx/xx=x/xxxxxxxx=xxxxx	predictive	高
281	Argument	xxx	predictive	低
282	Argument	xxxxxxxx_xxx	predictive	中
283	Argument	xxxxxxx	predictive	低
284	Argument	xxxx	predictive	低
285	Argument	xxx_xxxxxxx_xxx	predictive	高
286	Argument	xx_xxxxxx	predictive	中
287	Argument	xxxx_xxxx	predictive	中
288	Argument	xx_xxxxxxxx	predictive	中
289	Argument	xxxxxxxxx_xxxxxxxx_xxxx	predictive	高
290	Argument	xxxxxxxxx_xxxx_xxxx	predictive	高
291	Argument	xxxxxxx_xxxx	predictive	中
292	Argument	xxxx	predictive	低
293	Argument	xxxx_xxxx	predictive	中
294	Argument	xxxxxx_xxx	predictive	中
295	Argument	x_xx	predictive	低
296	Argument	xxxxxxxx	predictive	中
297	Argument	xxxxxxxx	predictive	中
298	Argument	xxxx[xxxxxxxxxxxxxxxxx]	predictive	高
299	Argument	xxxx_xxxx	predictive	中
300	Argument	xxxx_xx_xx_xxx	predictive	高
301	Argument	xxx_xxxx	predictive	中
302	Argument	xxxxx_xxxx_xxxx	predictive	高
303	Argument	xxxxxxx_xxx	predictive	中
304	Argument	xxxxxxxxxx[x]	predictive	高
305	Argument	xx_xxxx	predictive	低
306	Argument	xxxxxxxx_xxxxx	predictive	高
307	Argument	xx_xxxx	predictive	低
308	Argument	xxxxxx	predictive	低
309	Argument	xxxxxxxx	predictive	中
310	Argument	xxxxxxxx	predictive	中
311	Argument	xxxxxxxx	predictive	中
312	Argument	xxxxxxxx	predictive	中
313	Argument	xxxxxx_xxxx	predictive	中
314	Argument	xxxxxxx	predictive	低
315	Argument	xxxxxx	predictive	低
316	Argument	xxxxxxx	predictive	低
317	Argument	xxxxxxxx	predictive	中
318	Argument	xxxx	predictive	低
319	Argument	xxxxxxxxxxx_xxxx	predictive	高
320	Argument	xxxxxxxxxxxxxxxxxxxx	predictive	高
321	Argument	xxxxxx	predictive	低
322	Argument	xxxxxxx	predictive	低
323	Argument	xxxxxx	predictive	低
324	Argument	xxxxxxxxxx	predictive	中
325	Argument	xxx_xxxxx/xxxx_xxxxx/xxxx_xxxxx	predictive	高
326	Argument	xxxxxxxx	predictive	中
327	Argument	xxx	predictive	低
328	Argument	xxxxx	predictive	低
329	Argument	xxxxxxxxxxx	predictive	中
330	Argument	xxxx	predictive	低
331	Argument	x_xxxxxx	predictive	中
332	Argument	xxxxxxxxxxx/xxxxxxxxx	predictive	高
333	Argument	xxx	predictive	低
334	Argument	xxx	predictive	低
335	Argument	xxxx	predictive	低
336	Argument	xxxx	predictive	低
337	Argument	xxxxxxxx	predictive	中
338	Argument	xxxxxxxx/xxxx	predictive	高
339	Argument	xxxxx	predictive	低
340	Argument	xxxx_xxxxxxx	predictive	中
341	Argument	xxxx->xxxxxxx	predictive	高
342	Argument	xx-xxxxxx_xxxx	predictive	高
343	Argument	_xxxxx_xxxxxxx_xxxxxxxxx_xxxxxxx-xxx	predictive	高
344	Input Value	%xxxxxx+-x+x+xx.x.xx.xxx%xx%xx	predictive	高
345	Input Value	../	predictive	低
346	Input Value	../..	predictive	低
347	Input Value	.xxx	predictive	低
348	Input Value	/%xx	predictive	低
349	Input Value	::$xxxxx_xxxxxxxxxx	predictive	高
350	Input Value	xxxx -x xxxxxxxx=xxxxxx.xxxxxxx xxxx://xxx.xxx.x.x/xxxxxx.xxx	predictive	高
351	Input Value	xxxxxx	predictive	低
352	Pattern	() {	predictive	低
353	Pattern	x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|.\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|	predictive	高
354	Network Port	xxxx	predictive	低
355	Network Port	xxx/xxxx	predictive	中
356	Network Port	xxx/xxxx	predictive	中
357	Network Port	xxx xxxxxx xxxx	predictive	高

参考 (11)

The following list contains external sources which discuss the actor and the associated activities:

◂ 上一步一览下一步 ▸

Do you know our Splunk app?

Download it now for free!