Actor2021

Kaseya Supply Chain

1Rules

5References

1Folders

2022-05-20Latest

Summary

Kaseya Supply Chain is tracked here as a threat actor, intrusion set, or campaign with 1 Sigma detection spanning 2021. Coverage centers on windows / process_creation.

Related Detections

Search this threat

Emerging Threatcriticaltest

REvil Kaseya Incident Malware Patterns

Detects process command line patterns and locations used by REvil group in Kaseya incident (can also match on other malware)

WindowsProcess Creation

TA0002 · ExecutionT1059 · Command and Scripting InterpreterG0115 · GOLD SOUTHFIELDdetection.emerging-threats

Florian Roth (Nextron Systems)Sat Jul 032021

References