CmdID

CmdID / Techniques / T1595

T1595.001 Active Scanning: Scanning IP Blocks

Adversaries may scan victim IP blocks to gather information that can be used during targeting. MITRE ATT&CK

1 Sigma rule T1595.001 on attack.mitre.org

Part of

MITRE ATT&CK

T1595Active Scanning

Sigma rules tagged with it

process creation, the highest levels first

highGrixba Malware Reconnaissance Activityyxinmiracle, Swachchhanda Shrawan Poudel (Nextron Systems) · Windows