Actor2019

Bear APT Activity

1Rules

1References

1Folders

2023-03-08Latest

Summary

Bear APT Activity is tracked here as a threat actor, intrusion set, or campaign with 1 Sigma detection spanning 2019. Coverage centers on windows / process_creation.

Related Detections

Search this threat

Emerging Threatcriticalstable

Potential Russian APT Credential Theft Activity

Detects Russian group activity as described in Global Threat Report 2019 by Crowdstrike

WindowsProcess Creation

TA0006 · Credential AccessT1552.001 · Credentials In FilesT1003.003 · NTDSdetection.emerging-threats

Florian Roth (Nextron Systems)Thu Feb 212019

References

Resolving title…

documentcloud.org