criticaltestEmerging Threat
OilRig APT Activity
Detects OilRig activity as reported by Nyotron in their March 2018 report
windowsprocess_creation
2023-03-08
Emerging Threats
Actor2018
OilRig
4Rules
1References
1Folders
2023-03-08Latest
Summary
OilRig is tracked here as a threat actor, intrusion set, or campaign with 4 Sigma detections spanning 2018. Coverage centers on windows / process_creation, windows / registry_event, windows / security +1.
Related Detections
Search this threatcriticaltestEmerging Threat
OilRig APT Registry Persistence
Detects OilRig registry persistence as reported by Nyotron in their March 2018 report
windowsregistry_event
2023-03-08
criticaltestEmerging Threat
OilRig APT Schedule Task Persistence - Security
Detects OilRig schedule task persistence as reported by Nyotron in their March 2018 report
windowssecurity
2023-03-08
criticaltestEmerging Threat
OilRig APT Schedule Task Persistence - System
Detects OilRig schedule task persistence as reported by Nyotron in their March 2018 report
windowssystem
2023-03-08
References