22334A7227544B1E

Were you targeted by SUNBURST? Image credit: NASA

Robust Indicators of Compromise for SUNBURST

| | 22334A7227544B1E, avsvmcloud, avsvmcloud.com, CNAME, Cobalt Strike, dns, Indicators, IOC, NetBIOS, Palo Alto, paloaltonetworks, SolarStorm, SolarWinds, STAGE2, SUNBURST
There has been a great deal of confusion regarding what network based Indicators of Compromise (IOC) SolarWinds Orion customers can use to self assess whether or not they have been targeted after ...
NETRESEC Network Security Blog
Sunburst stages 1 to 3 (passive, associated and active)

Finding Targeted SUNBURST Victims with pDNS

| | 1dbecfd99ku6fi2e5fjb, 2039AFE13E5307A1, 22334A7227544B1E, 4n4vte5gmor7j9lpegsf, 5qbtj04rcbp3tiq8bo6t, associated, avsvmcloud, C2, deftsecurity, DNSSEC, E258332529826721, ext, flag, freescanonline, Netresec, pDNS, SolarWinds, Solorigate, STAGE2, SUNBURST, SunburstDomainDecoder, thedoccloud
Our SunburstDomainDecoder tool can now be used to identify SUNBURST victims that have been explicitly targeted by the attackers. The only input needed is passive DNS (pDNS) data for avsvmcloud.com subdomains. Companies ...
NETRESEC Network Security Blog