T1210 Exploitation of Remote Services
Adversaries may exploit remote services to gain unauthorized access to internal systems once inside of a network. MITRE ATT&CK
4 Sigma rules T1210 on attack.mitre.org
Sigma rules tagged with it
criticalWannaCry Ransomware ActivityFlorian Roth (Nextron Systems), Tom U. @c_APT_ure (collection), oscd.community, Jonhnathan Ribeiro · Windows
highExploitation Attempt Of CVE-2020-1472 - Execution of ZeroLogon PoC@Kostastsale, TheDFIRReport · Windows
highHackTool - SharpWSUS/WSUSpendu Execution@Kostastsale, Nasreddine Bencherchali (Nextron Systems) · Windows