Decision for 192.6.161.135

Enforcement

Not required

Reasons

• Detected activity is a limited amount of firewall scenarios.
• Threat activity was observed from a single node only.

MITRE ATT&CK Mappings

• Tactics: Credential Access / Execution
• Techniques: T1059, T1078, T1110

Evidence

• Last observed: 2 hours ago
• Nodes observed: 1
• Severity: HIGH
• TTL remaining: 6d 22h