Tool
tool:ip_scanner
Scanning utility observed during the attackers’ renewed activity in the network.
Scanning utility observed during the attackers’ renewed activity in the network.
“they ran an IP scanner”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | INVOLVES | Retail credit-card breach | Explicit | 15 |
Retail credit-card breach INVOLVES IP scanner
During the attackers’ renewed activity, the team observed them running an IP scanner and logging into multiple IP addresses.
Explicit Confidence 98% · Matt Bromiley EP 15 Details
“they ran an IP scanner and then hard-coded and were able to log into all these IPs”