criticaltestEmerging Threat
OceanLotus Registry Activity
Detects registry keys created in OceanLotus (also known as APT32) attacks
windowsregistry_event
2023-09-28
APT32 Oceanlotus is tracked here as a threat actor, intrusion set, or campaign with 1 Sigma detection spanning 2018. Coverage centers on windows / registry_event.
Detects registry keys created in OceanLotus (also known as APT32) attacks