T1595 Active Scanning
Adversaries may execute active reconnaissance scans to gather information that can be used during targeting. MITRE ATT&CK
2 Sigma rules T1595 on attack.mitre.org
Its sub-techniques
T1595.001Active Scanning: Scanning IP Blocks
Sigma rules tagged with it
highPUA - PingCastle Execution From Potentially Suspicious ParentNasreddine Bencherchali (Nextron Systems), X__Junior (Nextron Systems) · Windows