criticaltestEmerging Threat
Turla Group Commands May 2020
Detects commands used by Turla group as reported by ESET in May 2020
windowsprocess_creation
2025-10-19
Emerging Threats
Actor2017, 2014
Turla
5Rules
5References
2Folders
2025-10-19Latest
Summary
Turla is tracked here as a threat actor, intrusion set, or campaign with 5 Sigma detections spanning 2017, 2014. Coverage centers on windows / process_creation, windows / system, windows / pipe_created.
Related Detections
Search this threatcriticaltestEmerging Threat
Turla Group Lateral Movement
Detects automated lateral movement by Turla group
windowsprocess_creation
2022-10-09
criticaltestEmerging Threat
Turla PNG Dropper Service
This method detects malicious services mentioned in Turla PNG dropper report by NCC Group in November 2018
windowssystem
2021-11-30
hightestEmerging Threat
Turla Service Install
This method detects a service install of malicious services mentioned in Carbon Paper - Turla report by ESET
windowssystem
2021-11-30
criticaltestEmerging Threat
Turla Group Named Pipes
Detects a named pipe used by Turla group samples
windowspipe_created
2021-11-27
References