hightestEmerging Threat
GALLIUM IOCs
Detects artifacts associated with GALLIUM cyber espionage group as reported by Microsoft Threat Intelligence Center in the December 2019 report.
windowsprocess_creation
2024-11-23
Emerging Threats
Actor2020
GALLIUM
2Rules
3References
1Folders
2024-11-23Latest
Summary
GALLIUM is tracked here as a threat actor, intrusion set, or campaign with 2 Sigma detections spanning 2020. Coverage centers on windows / dns-server-analytic, windows / process_creation.
Related Detections
Search this threathightestEmerging Threat
GALLIUM Artefacts - Builtin
Detects artefacts associated with activity group GALLIUM - Microsoft Threat Intelligence Center indicators released in December 2019.
windowsdns-server-analytic
2023-01-02
References