mediumtestEmerging Threat
DLL Names Used By SVR For GraphicalProton Backdoor
Hunts known SVR-specific DLL names.
windowsimage_load
2023-12-18
Emerging Threats
Actor2023
Cozy Bear
3Rules
1References
1Folders
2023-12-18Latest
Summary
Cozy Bear is tracked here as a threat actor, intrusion set, or campaign with 3 Sigma detections spanning 2023. Coverage centers on windows / image_load, windows / security, windows / taskscheduler.
Related Detections
Search this threathightestEmerging Threat
Scheduled Tasks Names Used By SVR For GraphicalProton Backdoor
Hunts for known SVR-specific scheduled task names
windowssecurity
2023-12-18
hightestEmerging Threat
Scheduled Tasks Names Used By SVR For GraphicalProton Backdoor - Task Scheduler
Hunts for known SVR-specific scheduled task names
windowstaskscheduler
2023-12-18
References