hightestEmerging Threat
Potential Conti Ransomware Database Dumping Activity Via SQLCmd
Detects a command used by conti to dump database
windowsprocess_creation
2023-05-04
Emerging Threats
Malware2021
Conti
4Rules
5References
1Folders
2023-05-04Latest
Summary
Conti is tracked here as a malware family or toolset with 4 Sigma detections spanning 2021. Coverage centers on windows / process_creation.
Related Detections
Search this threatcriticaltestEmerging Threat
Potential Conti Ransomware Activity
Detects a specific command used by the Conti ransomware group
windowsprocess_creation
2023-02-13
hightestEmerging Threat
Conti NTDS Exfiltration Command
Detects a command used by conti to exfiltrate NTDS
windowsprocess_creation
2022-10-09
hightestEmerging Threat
Conti Volume Shadow Listing
Detects a command used by conti to find volume shadow backups
windowsprocess_creation
2021-08-09
References