New Knowledge Pack Released (KP-2023-002)
ID: b1ea17ff-9865-5938-808a-c317be81e8b0
STIX ID: report--b1ea17ff-9865-5938-808a-c317be81e8b0
Feed Name: Dragos Blog
Dragos KP-2023-002 release notes: this Knowledge Pack adds 280+ characterizations and 560 detections for Dragos Platform 2.x, improving visibility for building automation and industrial control protocols (BACnet, LonTalk, ROC Plus, FINS). It includes new detections for AMS Device Manager and SEL device login activity, identifies indicators linked to DUSTTUNNEL/PIPEDREAM, ASPX web shells, Telerik vulnerability exploitation, Brute Ratel usage, SoftEther VPN misuse, and hardware from FCC Section 2 vendors, plus various other OT-focused detections and playbook updates.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.