criticalstableEmerging Threat
APT29 2018 Phishing Campaign CommandLine Indicators
Detects indicators of APT 29 (Cozy Bear) phishing-campaign as reported by mandiant
windowsprocess_creation
2023-03-08
Emerging Threats
Actor2018
APT29 CozyBear
2Rules
3References
1Folders
2023-03-08Latest
Summary
APT29 CozyBear is tracked here as a threat actor, intrusion set, or campaign with 2 Sigma detections spanning 2018. Coverage centers on windows / file_event, windows / process_creation.
Related Detections
Search this threatcriticalstableEmerging Threat
APT29 2018 Phishing Campaign File Indicators
Detects indicators of APT 29 (Cozy Bear) phishing-campaign as reported by mandiant
windowsfile_event
2023-02-20
References