Emerging Threats
Actor2019
Operation Wocao
2Rules
4References
1Folders
2022-11-27Latest
Summary
Operation Wocao is tracked here as a threat actor, intrusion set, or campaign with 2 Sigma detections spanning 2019. Coverage centers on windows / process_creation, windows / security.
Related Detections
Search this threatEmerging Threathightest
Operation Wocao Activity - Security
Detects activity mentioned in Operation Wocao report
Windowssecurity
TA0004 · Privilege EscalationTA0003 · PersistenceTA0007 · DiscoveryT1012 · Query Registry+7
Florian Roth (Nextron Systems)+1Fri Dec 202019
Emerging Threathightest
Operation Wocao Activity
Detects activity mentioned in Operation Wocao report
WindowsProcess Creation
TA0004 · Privilege EscalationTA0003 · PersistenceTA0007 · DiscoveryT1012 · Query Registry+7
Florian Roth (Nextron Systems)+1Fri Dec 202019
References