New Knowledge Pack Released (KP-2023-003)
ID: ce3185c4-0568-5bef-8b71-5977ad349267
STIX ID: report--ce3185c4-0568-5bef-8b71-5977ad349267
Feed Name: Dragos Blog
Dragos Knowledge Pack KP-2023-003 release notes: updates include improved asset identification for IEC-61850 and multiple vendors (ABB, GE, SEL, Emerson, etc.), new behavioral detections such as DNS tunneling patterns (noting Cobalt Strike BEACON DNS use) and a CCleaner User-Agent detection, plus two dashboards (Threat Detection and Platform Auditing) to help operators monitor detections and platform activity.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.