New Knowledge Pack Released (KP-2022-003-A)
ID: 0c7bf26c-3b76-5285-8041-9154cef649ef
STIX ID: report--0c7bf26c-3b76-5285-8041-9154cef649ef
Feed Name: Dragos Blog
Threat Score
**Dragos Knowledge Pack update:** This release delivers over 200 characterizations and 400 detections for ICS/OT environments, including Modbus TCP parsing improvements and analytics for threats such as Log4J/Log4Shell, CRASHOVERRIDE (IEC104 module activity), BLACKENERGY-associated file transfers, Stealbit YARA for LockBit 2.0 exfiltration, JA3/JA3S TLS fingerprints for Meterpreter, and Windows services created from unusual directories; available to Dragos Platform customers via the Customer Portal.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.