hightestEmerging Threat
Diamond Sleet APT DLL Sideloading Indicators
Detects DLL sideloading activity seen used by Diamond Sleet APT
windowsimage_load
2023-10-24
Emerging Threats
Actor2023
Diamond Sleet
6Rules
1References
1Folders
2023-10-24Latest
Summary
Diamond Sleet is tracked here as a threat actor, intrusion set, or campaign with 6 Sigma detections spanning 2023. Coverage centers on windows / dns_query, windows / file_event, windows / image_load +3.
Related Detections
Search this threathightestEmerging Threat
Diamond Sleet APT DNS Communication Indicators
Detects DNS queries related to Diamond Sleet APT activity
windowsdns_query
2023-10-24
hightestEmerging Threat
Diamond Sleet APT File Creation Indicators
Detects file creation activity that is related to Diamond Sleet APT activity
windowsfile_event
2023-10-24
hightestEmerging Threat
Diamond Sleet APT Process Activity Indicators
Detects process creation activity indicators related to Diamond Sleet APT
windowsprocess_creation
2023-10-24
criticaltestEmerging Threat
Diamond Sleet APT Scheduled Task Creation
Detects registry event related to the creation of a scheduled task used by Diamond Sleet APT during exploitation of Team City CVE-2023-42793 vulnerability
windowssecurity
2023-10-24
References