{ "count": 803, "indicators": [ { "ioc_value": "http:\/\/107.173.9.85\/httpswww.microsoft.comen-usmicrosoft-365wordms.officeurl=word&ocid=cmmiqc2gd00Plans-and-pricing.php", "ioc_type": "url", "category": "Malware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 19:46:45", "last_seen": "2026-08-06 19:46:45" }, { "ioc_value": "teams.meet-microsoft.com", "ioc_type": "other", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 14:41:34", "last_seen": "2026-08-06 14:49:02" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/exchange\/client-developer\/exchange-web-services\/impersonation-and-ews-in-exchange", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/powershell\/module\/microsoft.powershell.core\/about\/about_history?view=powershell-7.5", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/previous-versions\/visualstudio\/visual-studio-2015\/extensibility\/specifying-file-handlers-for-file-name-extensions?view=vs-2015", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/azure\/azure-resource-manager\/managed-applications\/approve-just-in-time-access", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/exchange\/email-addresses-and-address-books\/address-lists\/address-lists?view=exchserver-2019", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/powershell\/module\/exchange\/email-addresses-and-address-books\/get-globaladdresslist", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/azure\/active-directory\/devices\/concept-primary-refresh-token", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/ms694363.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/en-us\/library\/aa394582.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/windows\/win32\/winrm\/portal", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/previous-versions\/windows\/it-pro\/windows-server-2003\/cc786431(v=ws.10)", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/windows\/desktop\/dd979526.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/windows\/desktop\/bb968806.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows\/security\/identity-protection\/access-control\/local-accounts", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/windows\/desktop\/aa365738.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/07\/14\/analysis-of-storm-0558-techniques-for-unauthorized-email-access\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2021\/10\/25\/nobelium-targeting-delegated-administrative-privileges-to-facilitate-broader-attacks\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/library\/security\/ms14-068.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/windows-server\/networking\/windows-time-service\/windows-time-service-top", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/blogs.msdn.microsoft.com\/mithuns\/2010\/03\/24\/image-file-execution-options-ifeo\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/windows-hardware\/drivers\/debugger\/gflags-overview", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/ms536471.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/windows-hardware\/drivers\/debugger\/registry-entries-for-silent-process-exit", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows\/security\/threat-protection\/security-policy-settings\/audit-policy", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows-server\/administration\/windows-commands\/auditpol", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/previous-versions\/windows\/it-pro\/windows-server-2012-r2-and-2012\/cc754051(v=ws.11)", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows\/security\/threat-protection\/auditing\/advanced-security-audit-policy-settings", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/previous-versions\/windows\/it-pro\/windows-server-2012-r2-and-2012\/cc725622(v=ws.11)", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/previous-versions\/windows\/it-pro\/windows-10\/security\/threat-protection\/security-policy-settings\/allow-log-on-through-remote-desktop-services", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/windows\/desktop\/ProcThread\/process-creation-flags", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/library\/cc787851.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/previous-versions\/windows\/it-pro\/windows-server-2008-R2-and-2008\/cc753662(v=ws.11)", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "http:\/\/support.microsoft.com\/kb\/314984", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/archive\/blogs\/jepayne\/monitoring-what-matters-windows-event-forwarding-for-everyone-even-if-you-already-have-a-siem", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/previous-versions\/windows\/it-pro\/windows-server-2012-R2-and-2012\/dn311461(v=ws.11)", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/archive\/blogs\/jepayne\/tracking-lateral-movement-part-one-special-groups-and-specific-service-accounts", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/previous-versions\/windows\/it-pro\/windows-server-2008-R2-and-2008\/dd941614(v=ws.10)", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/08\/02\/midnight-blizzard-conducts-targeted-social-engineering-over-microsoft-teams\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows\/win32\/sysinfo\/32-bit-and-64-bit-application-data-in-the-registry", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/powershell\/scripting\/learn\/remoting\/running-remote-commands?view=powershell-7.1", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/support.microsoft.com\/en-us\/topic\/partners-offer-delegated-administration-26530dc0-ebba-415b-86b1-b55bc06b073e?ui=en-us&rs=en-us&ad=us", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows\/security\/threat-protection\/auditing\/event-4720", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/windows\/desktop\/cc144185.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/azure\/active-directory\/fundamentals\/add-users-azure-active-directory", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/entra\/identity-platform\/app-objects-and-service-principals?tabs=browser", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/gallery.technet.microsoft.com\/scriptcenter\/Kerberos-Golden-Ticket-b4814285", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/powershell\/module\/microsoft.powershell.management\/clear-eventlog", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/windows-server\/administration\/windows-commands\/klist", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/system.diagnostics.eventlog.clear.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/windows-server\/administration\/windows-commands\/wevtutil", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows\/security\/threat-protection\/auditing\/event-4738", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/rest\/api\/storageservices\/list-blobs", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2017\/05\/04\/windows-defender-atp-thwarts-operation-wilysupply-software-supply-chain-cyberattack\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/previous-versions\/windows\/it-pro\/windows-server-2003\/cc759554(v=ws.10)", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/windowsserver\/ee236407.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows-server\/administration\/windows-commands\/fsutil-behavior", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/dotnet\/api\/system.directoryservices.activedirectory.domain.getalltrustrelationships?redirectedfrom=MSDN&view=netframework-4.7.2#System_DirectoryServices_ActiveDirectory_Domain_GetAllTrustRelationships", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/windows\/win32\/api\/securitybaseapi\/nf-securitybaseapi-duplicatetoken", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/blogs.technet.microsoft.com\/askpfeplat\/2016\/04\/18\/the-importance-of-kb2871997-and-kb2928120-for-credential-protection\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/windows\/desktop\/ms644959.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/windows\/desktop\/ms644953.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/entra\/identity\/managed-identities-azure-resources\/how-to-use-vm-token", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/wdsi\/threats\/malware-encyclopedia-description?Name=TrojanSpy:Win32\/Ursnif.gen!I&threatId=-2147336918", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/azure\/active-directory\/develop\/quickstart-register-app", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/azure\/active-directory\/develop\/v2-oauth2-auth-code-flow", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/azure\/active-directory\/develop\/active-directory-v2-protocols", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/en-us\/vba\/office-shared-vba\/articles\/getting-started-with-vba-in-office", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/windows-hardware\/drivers\/install\/catalog-files", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/windows\/desktop\/ms686701.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/ms537359.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2018\/03\/01\/finfisher-exposed-a-researchers-tale-of-defeating-traps-tricks-and-complex-virtual-machines\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/windows\/desktop\/aa388208.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows\/win32\/api\/winternl\/nf-winternl-ntqueryinformationprocess", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/blogs.technet.microsoft.com\/eduardonavarro\/2008\/07\/11\/sips-subject-interface-package-and-authenticode\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/windows\/win32\/printdocs\/addmonitor", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/powershell\/module\/exchange\/?view=exchange-ps#mailboxes", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/09\/22\/malicious-oauth-applications-used-to-compromise-email-servers-and-spread-spam\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/entra\/identity\/authentication\/howto-mfa-app-passwords", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/previous-versions\/windows\/it-pro\/windows-server-2012-r2-and-2012\/cc771525(v=ws.11)", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2022\/08\/24\/magicweb-nobeliums-post-compromise-trick-to-authenticate-as-anyone\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/azure\/active-directory\/hybrid\/choose-ad-authn", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2023\/10\/03\/defending-new-vectors-threat-actors-attempt-sql-server-to-cloud-lateral-movement\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/web.archive.org\/web\/20250419140549\/https:\/\/msrc.microsoft.com\/update-guide\/en-US\/advisory\/CVE-2017-8625", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/windows\/desktop\/ms649053.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/previous-versions\/windows\/desktop\/htmlhelp\/microsoft-html-help-1-4-sdk", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/windows\/desktop\/ms681951.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/windows\/win32\/api\/winbase\/nf-winbase-logonuserw", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/windows\/desktop\/ms524405", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/windows\/desktop\/ms644670", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/previous-versions\/windows\/it-pro\/windows-server-2012-r2-and-2012\/dn581922(v%3Dws.11)", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/cc422924.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/support.microsoft.com\/en-us\/help\/18539\/windows-7-change-default-programs", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/technet.microsoft.com\/bb490717.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "http:\/\/msdn.microsoft.com\/en-us\/library\/bb166549.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/windows-server\/administration\/windows-commands\/assoc", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/powershell\/module\/msonline\/get-msolrolemember?view=azureadps-1.0", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/troubleshoot\/azure\/virtual-machines\/serial-console-overview", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/support.microsoft.com\/en-us\/kb\/249873", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows\/desktop\/api\/dpapi\/nf-dpapi-cryptunprotectdata", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows-hardware\/drivers\/install\/installing-an-unsigned-driver-during-development-and-test", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/previous-versions\/windows\/hardware\/design\/dn653559(v=vs.85)?redirectedfrom=MSDN", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows-hardware\/drivers\/install\/the-testsigning-boot-configuration-option", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/windows\/win32\/secauthn\/network-provider-api", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/windows\/win32\/api\/npapi\/nf-npapi-nplogonnotify", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/msrc-blog.microsoft.com\/2010\/08\/21\/microsoft-security-advisory-2269637-released\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/powershell\/module\/microsoft.powershell.management\/register-wmievent?view=powershell-5.1", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "http:\/\/msdn.microsoft.com\/en-US\/library\/ms682600", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows\/win32\/wmisdk\/managed-object-format--mof-", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/en-US\/library\/aa375365", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/wdsi\/threats\/malware-encyclopedia-description?name=Backdoor:Win32\/Lamin.A", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/previous-versions\/windows\/it-pro\/windows-server-2012-r2-and-2012\/hh831740(v=ws.11)", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows\/desktop\/etw\/consuming-events", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/techcommunity.microsoft.com\/t5\/core-infrastructure-and-security\/demystifying-ransomware-attacks-against-microsoft-defender\/ba-p\/1928947", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/library\/cc754820.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/sysinternals\/downloads\/reghide", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2022\/01\/26\/evolved-phishing-device-registration-trick-adds-to-phishers-toolbox-for-victims-without-mfa", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/azure\/virtual-network\/virtual-networks-overview", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/previous-versions\/windows\/it-pro\/windows-server-2012-r2-and-2012\/hh994565(v%3Dws.11)", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/learn.microsoft.com\/dotnet\/api\/system.reflection.assembly.load", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/rest\/api\/compute\/virtual-machines\/update", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/windows\/security\/identity-protection\/user-account-control\/how-user-account-control-works", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/previous-versions\/\/fd7hxfdd(v=vs.85)?redirectedfrom=MSDN", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/openspecs\/windows_protocols\/ms-fscc\/6e3f7352-d11c-4d76-8c39-2516a9df36e8", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/troubleshoot\/windows-server\/remote\/remove-entries-from-remote-desktop-connection-computer", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/windows\/win32\/api\/winbase\/nf-winbase-winexec", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/previous-versions\/\/cc723564(v=technet.10)?redirectedfrom=MSDN#XSLTsection127121120120", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/blogs.technet.microsoft.com\/motiba\/2018\/02\/23\/detecting-kerberoasting-activity-using-azure-security-center\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "http:\/\/msdn.microsoft.com\/en-us\/library\/aa376977", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/support.microsoft.com\/help\/310593\/description-of-the-runonceex-registry-key", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/dotnet\/standard\/threading\/mutexes", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows\/security\/threat-protection\/auditing\/event-4768", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/social.technet.microsoft.com\/wiki\/contents\/articles\/23559.kerberos-pre-authentication-why-it-should-not-be-disabled.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/learn.microsoft.com\/powershell\/module\/microsoft.powershell.core\/about\/about_preference_variables?view=powershell-7.3#debugpreference", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/previous-versions\/windows\/it-pro\/windows-server-2012-R2-and-2012\/dn800668(v=ws.11)", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/windows\/desktop\/ms724878.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/sql\/odbc\/odbcconf-exe?view=sql-server-2017", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/blogs.msdn.microsoft.com\/kebab\/2014\/04\/28\/executing-powershell-scripts-from-c\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/powershell\/module\/microsoft.powershell.core\/about\/about_history?view=powershell-7", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2016\/06\/01\/hacking-team-breach-a-cyber-jurassic-park\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/technet.microsoft.com\/library\/cc961760.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/scriptcenter\/dd742419.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:31" }, { "ioc_value": "https:\/\/blogs.microsoft.com\/on-the-issues\/2019\/03\/27\/new-steps-to-protect-customers-from-hacking\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/blogs.microsoft.com\/on-the-issues\/2020\/10\/28\/cyberattacks-phosphorus-t20-munich-security-conference\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2020\/04\/02\/attack-matrix-kubernetes\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/library\/bb490996.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2021\/01\/20\/deep-dive-into-the-solorigate-second-stage-activation-from-sunburst-to-teardrop-and-raindrop\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows-server\/administration\/windows-commands\/expand", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2025\/03\/11\/new-xcsset-malware-adds-new-obfuscation-persistence-techniques-to-infect-xcode-projects\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/en-us\/library\/aa939914", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/library\/cc732643.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/windows-server\/administration\/windows-commands\/clip", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/en-us\/library\/04za0hca.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/en-us\/library\/ms649012", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/en-us\/library\/tzat5yw6.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows-server\/administration\/windows-commands\/ftp", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/06\/13\/the-many-lives-of-blackcat-ransomware\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/learn.microsoft.com\/windows-hardware\/drivers\/install\/overview-of-registry-trees-and-keys", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/learn.microsoft.com\/windows\/win32\/api\/psapi\/nf-psapi-enumdevicedrivers", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/itpro\/windows\/keep-secure\/how-user-account-control-works", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/learn.microsoft.com\/windows-server\/administration\/windows-commands\/driverquery", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/en-us\/library\/ms679687.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-US\/magazine\/2009.07.uac.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/wdsi\/threats\/malware-encyclopedia-description?Name=Backdoor:Win32\/Truvasys.A!dha", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/sysinternals\/downloads\/sdelete", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/windows-server\/administration\/windows-commands\/diskpart", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/microsoft-365\/security\/defender-endpoint\/configure-contextual-file-folder-exclusions-microsoft-defender-antivirus", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2020\/06\/18\/inside-microsoft-threat-protection-mapping-attack-chains-from-cloud-to-endpoint\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/technet.microsoft.com\/library\/cc732443.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/support.microsoft.com\/en-us\/topic\/cipher-exe-security-tool-for-the-encrypting-file-system-56c85edd-85cf-ac07-f2f7-ca2d35dab7e4", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/support.microsoft.com\/en-us\/kb\/197571", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/en-us\/library\/dn280412", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/wdsi\/threats\/malware-encyclopedia-description?Name=Backdoor:Win32\/Coroxy.A&ThreatID=2147766831", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/library\/bb490866.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/wdsi\/threats\/malware-encyclopedia-description?Name=Backdoor:Win64\/KnuckleTouch.A!dha&threatId=-2147067254", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/previous-versions\/windows\/it-pro\/windows-10\/security\/threat-protection\/security-policy-settings\/audit-policy", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/previous-versions\/windows\/it-pro\/windows-10\/security\/threat-protection\/auditing\/advanced-security-audit-policy-settings", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows-server\/administration\/windows-commands\/wevtutil", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/windows-server\/administration\/windows-commands\/auditpol", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows-server\/administration\/windows-commands\/pubprn", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/windows\/client-management\/client-tools\/quick-assist", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/sysinternals\/bb897553.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/cloudblogs.microsoft.com\/microsoftsecure\/2018\/03\/01\/finfisher-exposed-a-researchers-tale-of-defeating-traps-tricks-and-complex-virtual-machines\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/cc228086.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/cc237008.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/dd207691.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/cc245496.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/library\/bb490921.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/azure\/virtual-network\/virtual-network-tap-overview", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/wdsi\/threats\/malware-encyclopedia-description?Name=Trojan:Win32\/Totbrick", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/learn.microsoft.com\/troubleshoot\/windows-client\/deployment\/dynamic-link-library", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/azure\/active-directory\/hybrid\/whatis-fed", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/library\/bb491010.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/blogs.technet.microsoft.com\/timmcmic\/2015\/06\/08\/exchange-and-office-365-mail-forwarding-2\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/sysinternals\/downloads\/sysmon", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/azure\/storage\/common\/storage-security-guide", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/wdsi\/threats\/malware-encyclopedia-description?Name=Backdoor:Win32\/Wingbird.A!dha", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/library\/bb490864.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/technet.microsoft.com\/library\/cc770880.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2021\/09\/27\/foggyweb-targeted-nobelium-malware-leads-to-persistent-backdoor\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/windows\/desktop\/ms633574.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/05\/19\/rise-in-xorddos-a-deeper-look-at-the-stealthy-ddos-malware-targeting-linux-devices\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/windows\/desktop\/ms633584.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/windows\/desktop\/ms633591.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/library\/cc732952.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2020\/12\/10\/widespread-malware-campaign-seeks-to-silently-inject-ads-into-search-results-affects-multiple-browsers\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows\/win32\/secauthz\/access-control-lists", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/windows\/desktop\/secauthz\/dacls-and-aces", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows\/security\/threat-protection\/auditing\/audit-other-object-access-events", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/cli\/azure\/ad\/user?view=azure-cli-latest", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/technet.microsoft.com\/library\/dd315590.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/powershell\/module\/msonline\/get-msolrole?view=azureadps-1.0", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/sysinternals\/bb963902", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/social.technet.microsoft.com\/Forums\/en-US\/e5bca729-52e7-4fcb-ba12-3225c564674c\/scheduled-tasks-history-retention-settings?forum=winserver8gen", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/azure\/active-directory\/develop\/access-tokens", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/library\/bb490947.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows\/win32\/sysinfo\/registry-key-security-and-access-rights?redirectedfrom=MSDN", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/windows-server\/administration\/windows-commands\/bootcfg", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows-hardware\/drivers\/install\/hklm-system-currentcontrolset-services-registry-tree", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows-server\/administration\/windows-commands\/bcdedit", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/support.microsoft.com\/en-us\/windows\/start-your-pc-in-safe-mode-in-windows-10-92c27cff-db89-8644-1ce4-b3e5e56fe234", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/exchange\/transport-agents-exchange-2013-help", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/techcommunity.microsoft.com\/t5\/microsoft-365-defender-blog\/hunt-for-compromised-azure-subscriptions-using-microsoft\/ba-p\/3607121", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/azure\/cloud-adoption-framework\/ready\/azure-setup-guide\/organize-resources", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/09\/14\/peach-sandstorm-password-spray-campaigns-enable-intelligence-collection-at-high-value-targets\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/rest\/api\/compute\/virtualmachines\/get", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/exchange\/security-and-compliance\/mail-flow-rules\/mail-flow-rules", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/support.microsoft.com\/en-us\/office\/manage-email-messages-by-using-rules-c24f5dea-9465-4df4-ad17-a50704d66c59", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/powershell\/module\/exchange\/new-inboxrule?view=exchange-ps", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/powershell\/module\/exchange\/set-inboxrule?view=exchange-ps", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/windows\/security\/threat-protection\/use-windows-event-forwarding-to-assist-in-intrusion-detection", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/techcommunity.microsoft.com\/t5\/security-compliance-and-identity\/rule-your-inbox-with-microsoft-cloud-app-security\/ba-p\/299154", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/learn.microsoft.com\/dotnet\/framework\/app-domains\/application-domains", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/windows\/security\/threat-protection\/auditing\/event-4697", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/technet.microsoft.com\/library\/bb490939.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/aa362813.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/azure\/aks\/concepts-identity", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/windows\/win32\/wmisdk\/wmi-start-page?redirectedfrom=MSDN", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/library\/cc785125.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/techcommunity.microsoft.com\/t5\/windows-it-pro-blog\/wmi-command-line-wmic-utility-deprecation-next-steps\/ba-p\/4039242", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/wdsi\/threats\/malware-encyclopedia-description?Name=Ransom:Win32\/PlayCrypt.PA&ThreatID=2147830341", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows-server\/administration\/windows-commands\/msiexec", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows\/win32\/msi\/alwaysinstallelevated", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/technet.microsoft.com\/library\/cc958811.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/dotnet\/api\/system.drawing.graphics.copyfromscreen?view=netframework-4.8", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2021\/07\/14\/microsoft-delivers-comprehensive-solution-to-battle-rise-in-consent-phishing-emails\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/blogs.technet.microsoft.com\/mmpc\/2017\/01\/25\/detecting-threat-actors-in-recent-german-industrial-attacks-with-windows-defender-atp\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/microsoft-365\/security\/office-365-security\/anti-spoofing-protection?view=o365-worldwide", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/learn.microsoft.com\/microsoft-365\/security\/intelligence\/fileless-threats", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/social.technet.microsoft.com\/wiki\/contents\/articles\/12229.windows-system-services-fundamentals.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/library\/bb491007.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/windows\/win32\/termserv\/about-terminal-services", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows-server\/administration\/windows-commands\/gpresult", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/blogs.technet.microsoft.com\/musings_of_a_technical_tam\/2012\/02\/13\/group-policy-basics-part-1-understanding-the-structure-of-a-group-policy-object\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/windows-server\/administration\/windows-commands\/attrib", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/04\/11\/guidance-for-investigating-attacks-using-cve-2022-21894-the-blacklotus-campaign\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/powershell\/module\/microsoft.powershell.core\/about\/about_profiles?view=powershell-6", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/office365\/securitycompliance\/detect-and-remediate-outlook-rules-forms-attack", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/powershell\/module\/microsoft.powershell.core\/about\/about_profiles", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/blogs.technet.microsoft.com\/office365security\/defending-against-rules-and-forms-injection\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/11\/16\/token-tactics-how-to-prevent-detect-and-respond-to-cloud-token-theft\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2022\/01\/15\/destructive-malware-targeting-ukrainian-organizations\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 8, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/previous-versions\/windows\/it-pro\/windows-server-2012-R2-and-2012\/cc753551(v=ws.11)", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/archive\/blogs\/gauravseth\/the-world-of-jscript-javascript-ecmascript", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/en-us\/library\/50614e95.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/scripting\/winscript\/windows-script-interfaces", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/windows\/win32\/com\/translating-to-jscript", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/windows\/win32\/api\/processthreadsapi\/nf-processthreadsapi-createprocessa", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows\/win32\/api\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/dotnet.microsoft.com\/learn\/dotnet\/what-is-dotnet-framework", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2022\/04\/12\/tarrask-malware-uses-scheduled-tasks-for-defense-evasion\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/windows\/desktop\/aa379571.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/ms679833.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/support.microsoft.com\/help\/243330\/well-known-security-identifiers-in-windows-operating-systems", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/office365\/admin\/add-users\/about-admin-roles?view=o365-worldwide", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/technet.microsoft.com\/library\/ee617241.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/ms677982.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/azure\/storage\/blobs\/lifecycle-management-policy-configure?tabs=azure-portal", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows\/win32\/printdocs\/addprintprocessor", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/learn.microsoft.com\/windows-hardware\/drivers\/print\/introduction-to-print-processors", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/11\/17\/dev-0569-finds-new-ways-to-deliver-royal-ransomware-various-payloads\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/library\/cc940106.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/windows\/desktop\/aa374733.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/windows\/win32\/setupapi\/run-and-runonce-registry-keys", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/windows\/desktop\/ms725475.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/library\/cc772408.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows-server\/identity\/securing-privileged-access\/securing-privileged-access-reference-material?redirectedfrom=MSDN", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2025\/12\/09\/shai-hulud-2-0-guidance-for-detecting-investigating-and-defending-against-the-supply-chain-attack\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/cloudblogs.microsoft.com\/microsoftsecure\/2018\/03\/07\/behavior-monitoring-combined-with-machine-learning-spoils-a-massive-dofoil-coin-mining-campaign\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/powershell\/module\/Microsoft.PowerShell.Core\/About\/about_PowerShell_exe?view=powershell-5.1", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "http:\/\/msdn.microsoft.com\/en-us\/library\/dd183341", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/windows\/desktop\/ms680573.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/security-insider\/intelligence-reports\/russian-threat-actors-dig-in-prepare-to-seize-on-war-fatigue", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2025\/02\/12\/the-badpilot-campaign-seashell-blizzard-subgroup-conducts-multiyear-global-access-operation\/?ref=thestack.technology", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/library\/bb490968.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/blogs.microsoft.com\/on-the-issues\/2020\/12\/13\/customers-protect-nation-state-cyberattacks\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/10\/27\/raspberry-robin-worm-part-of-larger-ecosystem-facilitating-pre-ransomware-activity\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 8, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/library\/bb490880.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/azure\/active-directory\/develop\/active-directory-configurable-token-lifetimes", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/library\/bb490886.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/msrc-blog.microsoft.com\/2020\/12\/13\/customer-guidance-on-recent-nation-state-cyber-attacks\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/library\/cc771049.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/library\/cc755121.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/openspecs\/windows_protocols\/ms-shllink\/c41e062d-f764-4f13-bd4f-ea812ab9a4d1", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/security-updates\/securityadvisories\/2010\/2269637", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/library\/bb490991.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/windows\/win32\/sbscs\/manifests?redirectedfrom=MSDN", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/windows\/win32\/dlls\/dynamic-link-library-redirection?redirectedfrom=MSDN", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:18", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/previous-versions\/windows\/it-pro\/windows-server-2012-R2-and-2012\/hh875546(v=ws.11)", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/download.microsoft.com\/download\/2\/2\/5\/225BFE3E-E1DE-4F5B-A77B-71200928D209\/Platinum%20feature%20article%20-%20Targeted%20attacks%20in%20South%20and%20Southeast%20Asia%20April%202016.pdf", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:30" }, { "ioc_value": "https:\/\/portal.msrc.microsoft.com\/security-guidance\/advisory\/ADV170021", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2019\/12\/12\/gallium-targeting-global-telecom\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/docs.microsoft.com\/windows\/threat-protection\/windows-defender-exploit-guard\/enable-attack-surface-reduction", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/business\/security-insider\/wp-content\/uploads\/2023\/05\/Iran-turning-to-cyber-enabled-influence-operations-for-greater-effect-05022023.pdf", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/library\/cc733026.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/05\/09\/ransomware-as-a-service-understanding-the-cybercrime-gig-economy-and-how-to-protect-yourself\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 9, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2025\/07\/22\/disrupting-active-exploitation-of-on-premises-sharepoint-vulnerabilities\/#storm-2603", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/en-us\/library\/windows\/desktop\/ms687317(v=vs.85).aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2021\/11\/16\/evolving-trends-in-iranian-threat-actor-activity-mstic-presentation-at-cyberwarcon-2021", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/en-us\/library\/windows\/desktop\/ms694331(v=vs.85).aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows\/desktop\/com\/dcom-security-enhancements-in-windows-xp-service-pack-2-and-windows-server-2003-service-pack-1", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2020\/09\/10\/strontium-detecting-new-patters-credential-harvesting\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 9, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/technet.microsoft.com\/library\/cc771387.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/msrc-blog.microsoft.com\/2019\/08\/05\/corporate-iot-a-path-to-intrusion\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2024\/10\/31\/chinese-threat-actor-storm-0940-uses-credentials-from-password-spray-attacks-from-a-covert-network\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/library\/dn408187.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2024\/02\/14\/staying-ahead-of-threat-actors-in-the-age-of-ai\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/windows\/desktop\/ms721766.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "http:\/\/support.microsoft.com\/kb\/2962486", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows\/security\/information-protection\/secure-the-windows-10-boot-process", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/blogs.technet.microsoft.com\/srd\/2017\/08\/09\/moving-beyond-emet-ii-windows-defender-exploit-guard\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2024\/09\/26\/storm-0501-ransomware-attacks-expanding-to-hybrid-cloud-environments\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2025\/08\/27\/storm-0501s-evolving-techniques-lead-to-cloud-based-ransomware\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "http:\/\/msdn.microsoft.com\/en-US\/library\/ms682586", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/unified-secops-platform\/microsoft-threat-actor-naming", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/query.prod.cms.rt.microsoft.com\/cms\/api\/am\/binary\/RW1aFyW", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "http:\/\/technet.microsoft.com\/en-us\/magazine\/2008.06.srp.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/library\/ee791851.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/technet.microsoft.com\/library\/cc938799.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/docs.microsoft.com\/windows-server\/networking\/windows-time-service\/windows-time-service-tools-and-settings", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/blogs.microsoft.com\/on-the-issues\/2020\/09\/10\/cyberattacks-us-elections-trump-biden\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/05\/24\/volt-typhoon-targets-us-critical-infrastructure-with-living-off-the-land-techniques\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/technet.microsoft.com\/library\/dd252791.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/10\/25\/octo-tempest-crosses-boundaries-to-facilitate-extortion-encryption-and-destruction\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/blogs.technet.microsoft.com\/askcore\/2013\/03\/24\/alternate-data-streams-in-ntfs\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows-server\/identity\/securing-privileged-access\/securing-privileged-access-reference-material#a-nameesaebmaesae-administrative-forest-design-approach", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/itpro\/windows\/keep-secure\/credential-guard", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/support.microsoft.com\/help\/303972\/how-to-grant-the-replicating-directory-changes-permission-for-the-micr", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/technet.microsoft.com\/library\/jj865668.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/support.microsoft.com\/en-us\/kb\/967715", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/library\/cc771759(v=ws.10).aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/blogs.microsoft.com\/on-the-issues\/2017\/12\/19\/microsoft-facebook-disrupt-zinc-malware-attack-protect-customers-internet-ongoing-cyberthreats\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/library\/cc772540(v=ws.10).aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/technet.microsoft.com\/library\/cc755321.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/technet.microsoft.com\/library\/cc794757.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/technet.microsoft.com\/library\/cc835085.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/msrc-blog.microsoft.com\/2021\/06\/25\/new-nobelium-activity\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2021\/05\/28\/breaking-down-nobeliums-latest-early-stage-toolset\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2021\/03\/04\/goldmax-goldfinder-sibot-analyzing-nobelium-malware\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/library\/cc732713.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/library\/cc731150.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2018\/12\/03\/analysis-of-cyberattack-on-u-s-think-tanks-non-profits-public-sector-by-unidentified-attackers\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/answers.microsoft.com\/windows\/forum\/windows_10-security\/part-of-windows-10-or-really-malware\/af715663-a34a-423c-850d-2a46f369a54c", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/docs.microsoft.com\/windows\/device-security\/security-policy-settings\/create-a-token-object", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/docs.microsoft.com\/windows\/device-security\/security-policy-settings\/replace-a-process-level-token", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2025\/03\/05\/silk-typhoon-targeting-it-supply-chain\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/windows\/desktop\/dn742497.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2021\/03\/02\/hafnium-targeting-exchange-servers\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2022\/03\/22\/dev-0537-criminal-actor-targeting-organizations-for-data-exfiltration-and-destruction\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 9, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/windows\/desktop\/bb968799.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/09\/08\/microsoft-investigates-iranian-attacks-against-the-albanian-government\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2021\/05\/27\/new-sophisticated-email-based-attack-from-nobelium\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/msrc-blog.microsoft.com\/2021\/02\/18\/microsoft-internal-solorigate-investigation-final-update\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/library\/dn535501.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2020\/12\/18\/analyzing-solorigate-the-compromised-dll-file-that-started-a-sophisticated-cyberattack-and-how-microsoft-defender-helps-protect\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/library\/dn487450.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/en-us\/library\/cc144156.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows\/security\/threat-protection\/security-policy-settings\/password-must-meet-complexity-requirements", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/security-insider\/threat-landscape\/pistachio-tempest", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "http:\/\/msdn.microsoft.com\/en-us\/library\/ms682425", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/en-us\/library\/ff919712.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/query.prod.cms.rt.microsoft.com\/cms\/api\/am\/binary\/RWMFIi?id=101738", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/technet.microsoft.com\/en-us\/library\/cc754272(v=ws.11).aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2022\/02\/04\/actinium-targets-ukrainian-organizations\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/previous-versions\/system-center\/operations-manager-2005\/cc180803(v=technet.10)", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/docs.microsoft.com\/windows\/desktop\/etw\/event-tracing-portal", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/08\/15\/disrupting-seaborgiums-ongoing-phishing-operations\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/12\/07\/star-blizzard-increases-sophistication-and-evasion-in-ongoing-attacks\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 9, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2022\/06\/02\/exposing-polonium-activity-and-infrastructure-targeting-israeli-organizations\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/cloudblogs.microsoft.com\/microsoftsecure\/2016\/03\/22\/new-feature-in-office-2016-can-block-macros-and-help-prevent-infection\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/technet.microsoft.com\/library\/jj852168.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/technet.microsoft.com\/library\/dn221960.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/query.prod.cms.rt.microsoft.com\/cms\/api\/am\/binary\/RWxPuf", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2024\/05\/28\/moonstone-sleet-emerges-as-new-north-korean-threat-actor-with-new-bag-of-tricks\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2024\/05\/15\/threat-actors-misusing-quick-assist-in-social-engineering-attacks-leading-to-ransomware\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2016\/07\/14\/reverse-engineering-dubnium-stage-2-payload-analysis\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2016\/06\/20\/reverse-engineering-dubniums-flash-targeting-exploit\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2016\/06\/09\/reverse-engineering-dubnium-2\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2021\/12\/06\/nickel-targeting-government-organizations-across-latin-america-and-europe", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/learn.microsoft.com\/en-us\/microsoft-365\/security\/intelligence\/microsoft-threat-actor-naming?view=o365-worldwide", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 10, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/06\/14\/cadet-blizzard-emerges-as-a-novel-and-distinct-russian-threat-actor\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/blogs.technet.microsoft.com\/mmpc\/2016\/12\/14\/twin-zero-day-attacks-promethium-and-neodymium-target-individuals-in-europe\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 9, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "http:\/\/download.microsoft.com\/download\/E\/B\/0\/EB0F50CC-989C-4B66-B7F6-68CD3DC90DE3\/Microsoft_Security_Intelligence_Report_Volume_21_English.pdf", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/technet.microsoft.com\/library\/dn408187.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/docs.microsoft.com\/windows\/access-protection\/credential-guard\/credential-guard-manage", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/docs.microsoft.com\/windows\/access-protection\/credential-guard\/credential-guard-how-it-works", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/msdn.microsoft.com\/library\/windows\/desktop\/ff919712.aspx", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/07\/06\/the-five-day-job-a-blackbyte-ransomware-intrusion-case-study\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/10\/14\/new-prestige-ransomware-impacts-organizations-in-ukraine-and-poland\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 8, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/technet.microsoft.com\/library\/security\/4053440", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 5, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2020\/09\/24\/gadolinium-detecting-empires-cloud\/", "ioc_type": "url", "category": "ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 7, "first_seen": "2026-08-06 13:09:17", "last_seen": "2026-08-06 14:48:29" }, { "ioc_value": "portal.msrc.microsoft.com", "ioc_type": "other", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:10:28", "last_seen": "2026-08-06 14:48:26" }, { "ioc_value": "docs.microsoft.com", "ioc_type": "other", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:10:28", "last_seen": "2026-08-06 14:48:26" }, { "ioc_value": "msrc-blog.microsoft.com", "ioc_type": "other", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:10:28", "last_seen": "2026-08-06 14:48:26" }, { "ioc_value": "www.microsoft.com", "ioc_type": "other", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:10:28", "last_seen": "2026-08-06 14:48:26" }, { "ioc_value": "msrc.microsoft.com", "ioc_type": "other", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:10:28", "last_seen": "2026-08-06 14:48:26" }, { "ioc_value": "learn.microsoft.com", "ioc_type": "other", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 6, "first_seen": "2026-08-06 13:10:28", "last_seen": "2026-08-06 14:48:26" }, { "ioc_value": "account.microsoft.com.accountprotect.ml", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:10", "last_seen": "2026-08-06 14:47:31" }, { "ioc_value": "329345-microsoft.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:08:06", "last_seen": "2026-08-06 14:47:26" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2026\/05\/18\/storm-2949-turned-compromised-identity-into-cloud-wide-breach\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2025\/04\/23\/understanding-the-threat-landscape-for-kubernetes-and-containerized-assets\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/wdsi\/threats\/malware-encyclopedia-description?Name=Worm%3AWin32%2FFadok.A", "ioc_type": "url", "category": "Malware Families", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:03", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2025\/05\/27\/new-russia-affiliated-actor-void-blizzard-targets-critical-sectors-for-espionage\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2026\/05\/19\/exposing-fox-tempest-a-malware-signing-service-operation\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/blogs.microsoft.com\/on-the-issues\/2026\/05\/19\/disrupting-fox-tempest-a-cybercrime-service\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/portal\/threat\/encyclopedia\/entry.aspx?Name=Backdoor%3aWin32%2fZegost.BW", "ioc_type": "url", "category": "Malware Families", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:03", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2026\/07\/31\/captivecrunch-midnight-blizzard-targets-travelers-worldwide-for-malware-delivery-and-credential-theft\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2025\/10\/09\/investigating-targeted-payroll-pirate-attacks-affecting-us-universities\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/wdsi\/threats\/malware-encyclopedia-description?Name=Trojan:Win32\/Shipup.G", "ioc_type": "url", "category": "Malware Families", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:03", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/wdsi\/threats\/malware-encyclopedia-description?Name=Trojan%3AWin32%2FShipup.K", "ioc_type": "url", "category": "Malware Families", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:03", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/wdsi\/threats\/malware-encyclopedia-description?Name=Worm:Win32\/Shipup.A", "ioc_type": "url", "category": "Malware Families", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:03", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2025\/10\/06\/investigating-active-exploitation-of-cve-2025-10035-goanywhere-managed-file-transfer-vulnerability\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/wdsi\/threats\/malware-encyclopedia-description?Name=Win32%2Fsirefef", "ioc_type": "url", "category": "Malware Families", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:03", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2024\/11\/22\/microsoft-shares-latest-intelligence-on-north-korean-and-chinese-threat-actors-at-cyberwarcon\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2026\/03\/11\/contagious-interview-malware-delivered-through-fake-developer-job-interviews\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/blogs.microsoft.com\/on-the-issues\/2025\/02\/27\/disrupting-cybercrime-abusing-gen-ai\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2025\/02\/13\/storm-2372-conducts-device-code-phishing-campaign\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2020\/04\/28\/ransomware-groups-continue-to-target-healthcare-critical-services-heres-how-to-reduce-risk\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2025\/04\/03\/threat-actors-leverage-tax-season-to-deploy-tax-themed-phishing-campaigns\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2025\/04\/08\/exploitation-of-clfs-zero-day-leads-to-ransomware-activity\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2026\/03\/12\/storm-2561-uses-seo-poisoning-to-distribute-fake-vpn-clients-for-credential-theft\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:34" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2022\/05\/09\/ransomware-as-a-service-understanding-the-cybercrime-gig-economy-and-how-to-protect-yourself", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/12\/28\/financially-motivated-threat-actors-misusing-app-installer\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2021\/12\/11\/guidance-for-preventing-detecting-and-hunting-for-cve-2021-44228-log4j-2-exploitation", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/08\/24\/flax-typhoon-using-legitimate-software-to-quietly-access-taiwanese-organizations\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2022\/02\/04\/actinium-targets-ukrainian-organizations", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/blogs.microsoft.com\/on-the-issues\/2023\/02\/03\/dtac-charlie-hebdo-hack-iran-neptunium\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/business\/security-insider\/threat-briefs\/iran-response-for-charlie-hebdo-attacks\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/10\/18\/multiple-north-korean-threat-actors-exploiting-the-teamcity-cve-2023-42793-vulnerability\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2022\/07\/27\/untangling-knotweed-european-private-sector-offensive-actor-using-0-day-exploits\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2024\/07\/29\/ransomware-operators-exploit-esxi-hypervisor-vulnerability-for-mass-encryption\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2017\/03\/27\/detecting-and-mitigating-elevation-of-privilege-exploit-for-cve-2017-0005\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/wdsi\/threats\/malware-encyclopedia-description?Name=Exploit:Python\/CVE-2024-1709.A!dha&ThreatID=2147903327", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/11\/09\/microsoft-shares-threat-intelligence-at-cyberwarcon-2023\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2021\/11\/18\/iranian-targeting-of-it-sector-on-the-rise\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/techcommunity.microsoft.com\/t5\/microsoft-defender-xdr-blog\/monthly-news-december-2023\/ba-p\/3998431", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/04\/11\/dev-0196-quadreams-kingspawn-malware-used-to-target-civil-society-in-europe-north-america-the-middle-east-and-southeast-asia\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2021\/07\/15\/protecting-customers-from-a-private-sector-offensive-actor-using-0-day-exploits-and-devilstongue-malware\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/techcommunity.microsoft.com\/t5\/microsoft-security-experts-blog\/defender-experts-chronicles-a-deep-dive-into-storm-0867\/ba-p\/3911769", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/techcommunity.microsoft.com\/blog\/microsoftsecurityexperts\/phish-click-breach-hunting-for-a-sophisticated-cyber-attack\/4267916", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "http:\/\/www.microsoft.com\/security\/blog\/2022\/06\/13\/the-many-lives-of-blackcat-ransomware\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/10\/25\/dev-0832-vice-society-opportunistic-ransomware-campaigns-impacting-us-education-sector\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2022\/08\/15\/disrupting-seaborgiums-ongoing-phishing-operations", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2021\/03\/04\/goldmax-goldfinder-sibot-analyzing-nobelium-malware", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2020\/03\/05\/human-operated-ransomware-attacks-a-preventable-disaster\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/blogs.microsoft.com\/on-the-issues\/2020\/11\/13\/health-care-cyberattacks-covid-19-paris-peace-forum\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2024\/01\/25\/midnight-blizzard-guidance-for-responders-on-nation-state-attack\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/techcommunity.microsoft.com\/t5\/microsoft-365-defender-blog\/monthly-news-july-2023\/ba-p\/3860740", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/12\/15\/mccrash-cross-platform-ddos-botnet-targets-private-minecraft-servers\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/06\/08\/detecting-and-mitigating-a-multi-stage-aitm-phishing-and-bec-campaign\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2025\/05\/29\/defending-against-evolving-identity-attack-techniques\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/blogs.microsoft.com\/on-the-issues\/2024\/10\/03\/protecting-democratic-institutions-from-cyber-threats\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2024\/01\/17\/new-ttps-observed-in-mint-sandstorm-campaign-targeting-high-profile-individuals-at-universities-and-research-orgs\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/04\/18\/nation-state-threat-actor-mint-sandstorm-refines-tradecraft-to-attack-high-value-targets\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/09\/07\/profiling-dev-0270-phosphorus-ransomware-operations\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2021\/03\/02\/hafnium-targeting-exchange-servers", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "http:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/10\/27\/raspberry-robin-worm-part-of-larger-ecosystem-facilitating-pre-ransomware-activity\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/blogs.microsoft.com\/on-the-issues\/2023\/12\/07\/russia-ukraine-digital-threat-celebrity-cameo-mtac\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/blogs.microsoft.com\/on-the-issues\/2024\/06\/02\/russia-cyber-bots-disinformation-2024-paris-olympics\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2022\/07\/14\/north-korean-threat-actor-targets-small-and-midsize-businesses-with-h0lygh0st-ransomware\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/techcommunity.microsoft.com\/t5\/microsoft-defender-xdr-blog\/monthly-news-november-2023\/ba-p\/3970796", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/blogs.microsoft.com\/on-the-issues\/2023\/12\/13\/cybercrime-cybersecurity-storm-1152-fraudulent-accounts\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/msrc-blog.microsoft.com\/2021\/03\/05\/microsoft-exchange-server-vulnerabilities-mitigations-march-2021", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2020\/11\/30\/threat-actor-leverages-coin-miner-techniques-to-stay-under-the-radar-heres-how-to-spot-them", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2021\/07\/29\/bazacall-phony-call-centers-lead-to-exfiltration-and-ransomware\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/msrc-blog.microsoft.com\/2021\/03\/02\/multiple-security-updates-released-for-exchange-server", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/12\/06\/dev-0139-launches-targeted-attacks-against-the-cryptocurrency-industry\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/blogs.technet.microsoft.com\/msrc\/2013\/02\/22\/recent-cyberattacks\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "http:\/\/download.microsoft.com\/download\/2\/2\/5\/225BFE3E-E1DE-4F5B-A77B-71200928D209\/Platinum%20feature%20article%20-%20Targeted%20attacks%20in%20South%20and%20Southeast%20Asia%20April%202016.pdf", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2024\/08\/30\/north-korean-threat-actor-citrine-sleet-exploiting-chromium-zero-day\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/blogs.technet.microsoft.com\/mmpc\/2016\/04\/26\/digging-deep-for-platinum\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2025\/07\/22\/disrupting-active-exploitation-of-on-premises-sharepoint-vulnerabilities\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/blogs.technet.microsoft.com\/mmpc\/2016\/06\/09\/reverse-engineering-dubnium-2", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2024\/12\/04\/frequent-freeloader-part-i-secret-blizzard-compromising-storm-0156-infrastructure-for-espionage\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/blogs.microsoft.com\/on-the-issues\/2018\/08\/20\/we-are-taking-new-steps-against-broadening-threats-to-democracy\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/09\/12\/malware-distributor-storm-0324-facilitates-ransomware-access\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "http:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/03\/13\/dev-1101-enables-high-volume-aitm-campaigns-with-open-source-phishing-kit\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/msrc.microsoft.com\/blog\/2023\/09\/results-of-major-technical-investigations-for-storm-0558-key-acquisition\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/blogs.microsoft.com\/on-the-issues\/2023\/07\/11\/mitigation-china-based-threat-actor\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/msrc.microsoft.com\/blog\/2023\/07\/microsoft-mitigates-china-based-threat-actor-storm-0558-targeting-of-customer-email\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2017\/01\/25\/detecting-threat-actors-in-recent-german-industrial-attacks-with-windows-defender-atp\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/cloudblogs.microsoft.com\/microsoftsecure\/2018\/12\/03\/analysis-of-cyberattack-on-u-s-think-tanks-non-profits-public-sector-by-unidentified-attackers\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2021\/07\/13\/microsoft-discovers-threat-actor-targeting-solarwinds-serv-u-software-with-0-day-exploit\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/techcommunity.microsoft.com\/t5\/microsoft-365-defender-blog\/monthly-news-november-2023\/ba-p\/3970796", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2024\/12\/11\/frequent-freeloader-part-ii-russian-actor-secret-blizzard-using-tools-of-other-groups-to-attack-ukraine\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2021\/09\/15\/analyzing-attacks-that-exploit-the-mshtml-cve-2021-40444-vulnerability", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2022\/09\/08\/microsoft-investigates-iranian-attacks-against-the-albanian-government\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2021\/11\/16\/evolving-trends-in-iranian-threat-actor-activity-mstic-presentation-at-cyberwarcon-2021\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/msrc-blog.microsoft.com\/2022\/02\/28\/analysis-resources-cyber-threat-activity-ukraine\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/02\/04\/actinium-targets-ukrainian-organizations\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/blogs.technet.microsoft.com\/mmpc\/2016\/12\/09\/windows-10-protection-detection-and-response-against-recent-attacks\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/12\/12\/threat-actors-misuse-oauth-applications-to-automate-financially-driven-attacks\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/security-insider\/microsoft-digital-defense-report-2023", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2016\/12\/14\/twin-zero-day-attacks-promethium-and-neodymium-target-individuals-in-europe\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/query.prod.cms.rt.microsoft.com\/cms\/api\/am\/binary\/RWMFIi", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/04\/07\/mercury-and-dev-1084-destructive-attack-on-hybrid-environment\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:12:59", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2021\/10\/11\/iran-linked-dev-0343-targeting-defense-gis-and-maritime-sectors\/", "ioc_type": "url", "category": "Threat Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:13:00", "last_seen": "2026-08-06 14:45:33" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-010", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-011", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ168115", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-052", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-021", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ246972", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ247869", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/www.microsoft.com\/technet\/support\/kb.asp?ID=249599", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-051", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-019", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-003", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/www.microsoft.com\/technet\/support\/kb.asp?ID=261257", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-002", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/www.microsoft.com\/technet\/support\/kb.asp?ID=251108", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ237927", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/www.microsoft.com\/technet\/support\/kb.asp?ID=255676", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-013", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-027", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/q157\/6\/73.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/q163\/8\/75.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/q160\/6\/50.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-022", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/q160\/6\/01.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/q163\/1\/43.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ238600", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/q142\/6\/53.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ242294", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-028", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-041", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ238453", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-029", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-012", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-002", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-038", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ244613", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-053", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-012", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ238349", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ243649", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-029", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ241407", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ242559", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-047", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ234905", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ216141", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-039", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/q231\/3\/68.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-019", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-006", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/q196\/2\/70.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/q214\/8\/02.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ233323", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/q192\/2\/96.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ247333", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1998\/ms98-019", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/q158\/3\/20.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-021", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-054", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-033", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1998\/ms98-007", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1998\/ms98-018", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/q103\/8\/61.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ233335", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/q176\/7\/94.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-022", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-008", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/www.microsoft.com\/Windows\/ie\/security\/freiburg.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/q168\/6\/17.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ173039", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/www.microsoft.com\/Windows\/Ie\/security\/dotless.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-036", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1998\/ms98-016", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/www.microsoft.com\/windows\/ie\/security\/powerpoint.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/q191\/2\/00.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1998\/ms98-011", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/q163\/8\/52.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-011", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/q176\/6\/97.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-023", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-024", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/www.microsoft.com\/technet\/support\/kb.asp?ID=263307", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ234557", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-036", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-023", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ248399", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/www.microsoft.com\/technet\/support\/kb.asp?ID=262694", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-007", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ240308", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ241900", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ246094", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/q140\/5\/57.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ241901", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-050", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-032", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ241902", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-044", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-015", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ243638", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-042", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-014", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ238329", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-034", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/Q195\/7\/33.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-025", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ236359", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-024", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1998\/ms98-017", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-046", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/Q179\/1\/57.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ231304", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-014", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/Q189\/2\/62.ASP", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1998\/ms98-006", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-013", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/Q192\/7\/74.ASP", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-048", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-031", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ248183", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-049", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-056", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ248185", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ249108", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-057", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-004", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/Q188\/5\/71.ASP", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/www.microsoft.com\/technet\/support\/kb.asp?ID=260205", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-028", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/q187\/5\/03.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-030", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/Q241\/5\/62.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1998\/ms98-004", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ185959", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-025", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ242542", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/Q229\/9\/72.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/www.microsoft.com\/technet\/support\/kb.asp?ID=262767", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ231457", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/q189\/5\/29.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-034", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-020", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-040", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-016", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/q138\/0\/01.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-043", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-015", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ231605", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-018", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ246731", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-033", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ249973", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-001", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-026", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ246401", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-005", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/q146\/6\/04.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-061", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ237923", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-027", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ238606", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ240346", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-058", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-031", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ230677", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-016", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/Q247\/9\/75.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-045", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ248749", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-059", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/q222\/1\/59.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ246045", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-030", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-055", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ241361", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-008", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-037", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ237185", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-026", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ249082", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ230681", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-035", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-060", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-017", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ231450", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-018", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ231452", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2000\/ms00-009", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:25" }, { "ioc_value": "http:\/\/www.microsoft.com\/technet\/support\/kb.asp?ID=180963", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "http:\/\/technet.microsoft.com\/en-us\/library\/cc722469.aspx", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "http:\/\/www.microsoft.com\/technet\/archive\/winntas\/deploy\/confeat\/06wntpcc.mspx?mfr=true", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ214840", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-004", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ217004", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-005", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ184346", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ140818", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:32", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "http:\/\/support.microsoft.com\/support\/kb\/articles\/q189\/2\/71.asp", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-009", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1998\/ms98-020", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ154087", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:32", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ154174", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:32", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ148188", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:32", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ146965", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:32", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ155056", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:32", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-006", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ190288", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1998\/ms98-009", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-007", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "http:\/\/www.microsoft.com\/technet\/support\/kb.asp?ID=137853", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-010", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-001", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1998\/ms98-008", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "http:\/\/support.microsoft.com\/kb\/q178381\/", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1998\/ms98-013", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ162567", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:32", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1998\/ms98-003", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ193233", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1998\/ms98-014", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1998\/ms98-015", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ197003", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "http:\/\/support.microsoft.com\/default.aspx?scid=kb%3B%5BLN%5D%3BQ188348", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1999\/ms99-003", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/1998\/ms98-002", "ioc_type": "url", "category": "Vulnerabilities", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 4, "first_seen": "2026-08-06 13:10:33", "last_seen": "2026-08-06 14:44:24" }, { "ioc_value": "officesmicrosoft.com", "ioc_type": "other", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:10", "last_seen": "2026-08-06 14:43:51" }, { "ioc_value": "mc.officesmicrosoft.com", "ioc_type": "other", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:10", "last_seen": "2026-08-06 14:43:51" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2021\/08\/26\/widespread-credential-phishing-campaign-abuses-open-redirector-links\/", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:09", "last_seen": "2026-08-06 14:43:50" }, { "ioc_value": "dl-microsoft.com", "ioc_type": "other", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:08", "last_seen": "2026-08-06 14:43:49" }, { "ioc_value": "https:\/\/www.virustotal.com\/gui\/domain\/update--microsoft.com\/detection", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:08", "last_seen": "2026-08-06 14:43:49" }, { "ioc_value": "https:\/\/www.virustotal.com\/gui\/domain\/dynamicrosoft.com\/relations", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:08", "last_seen": "2026-08-06 14:43:48" }, { "ioc_value": "dynamicrosoft.com", "ioc_type": "other", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:08", "last_seen": "2026-08-06 14:43:48" }, { "ioc_value": "https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2018-0802", "ioc_type": "url", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:07", "last_seen": "2026-08-06 14:43:47" }, { "ioc_value": "officeclient-microsoft.com", "ioc_type": "other", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:07", "last_seen": "2026-08-06 14:43:47" }, { "ioc_value": "reports-telemetry-microsoft.com", "ioc_type": "other", "category": "Domains\/URLs", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:11:07", "last_seen": "2026-08-06 14:43:47" }, { "ioc_value": "helpsecurity-microsoft.com", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:10:22", "last_seen": "2026-08-06 14:43:03" }, { "ioc_value": "securityhelp-microsoft.com", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:10:22", "last_seen": "2026-08-06 14:43:02" }, { "ioc_value": "security.m365-microsoft.com", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:10:22", "last_seen": "2026-08-06 14:43:02" }, { "ioc_value": "security.email-microsoft.com", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:10:22", "last_seen": "2026-08-06 14:43:02" }, { "ioc_value": "security-help-microsoft.com", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:10:22", "last_seen": "2026-08-06 14:43:02" }, { "ioc_value": "support.m365-microsoft.com", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:10:22", "last_seen": "2026-08-06 14:43:02" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2025\/01\/16\/new-star-blizzard-spear-phishing-campaign-targets-whatsapp-accounts\/", "ioc_type": "url", "category": "Mobile ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:20", "last_seen": "2026-08-06 14:41:54" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/03\/22\/dev-0537-criminal-actor-targeting-organizations-for-data-exfiltration-and-destruction\/", "ioc_type": "url", "category": "Mobile ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:20", "last_seen": "2026-08-06 14:41:54" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2020\/10\/08\/sophisticated-new-android-malware-marks-the-latest-evolution-of-mobile-ransomware\/", "ioc_type": "url", "category": "Mobile ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:20", "last_seen": "2026-08-06 14:41:54" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows\/win32\/procthread\/processes-and-threads", "ioc_type": "url", "category": "Mobile ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 3, "first_seen": "2026-08-06 13:09:20", "last_seen": "2026-08-06 14:41:54" }, { "ioc_value": "https:\/\/support.microsoft.com\/en-us\/help\/930167\/how-to-report-a-phishing-web-site", "ioc_type": "url", "category": "Cryptocurrency", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:09:04", "last_seen": "2026-08-06 14:41:39" }, { "ioc_value": "bingads.microsoft.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:44", "last_seen": "2026-08-06 14:41:13" }, { "ioc_value": "authenticateonmicrosoft.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:42", "last_seen": "2026-08-06 14:41:10" }, { "ioc_value": "app.dynamicrosoft.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:40", "last_seen": "2026-08-06 14:41:08" }, { "ioc_value": "advertising.microsoft.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:38", "last_seen": "2026-08-06 14:41:05" }, { "ioc_value": "adsdk.microsoft.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:37", "last_seen": "2026-08-06 14:41:04" }, { "ioc_value": "ads.microsoft.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:37", "last_seen": "2026-08-06 14:41:04" }, { "ioc_value": "admicrosoft.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:37", "last_seen": "2026-08-06 14:41:04" }, { "ioc_value": "019252-microsoft.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:34", "last_seen": "2026-08-06 14:40:59" }, { "ioc_value": "freepointsmicrosoft.com", "ioc_type": "other", "category": "Scam", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 2, "first_seen": "2026-08-06 13:08:27", "last_seen": "2026-08-06 14:40:53" }, { "ioc_value": "https:\/\/wwwMicrosoft.com\/en-us\/wdsi\/threats\/malware-encyclopedia-description?Name=Ransom%3AWin64%2FKnight.ZB!MTB", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/07\/14\/holyghost-north-korean-threat-actor-uses-custom-ransomware-in-attacks\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:02", "last_seen": "2026-08-06 13:13:02" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/wdsi\/threats\/malware-encyclopedia-description?Name=ransom:win32\/wadhrama.c&ThreatID=2147730655", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/blogs.technet.microsoft.com\/mmpc\/2016\/05\/26\/link-lnk-to-ransom\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/blogs.technet.microsoft.com\/mmpc\/2015\/01\/13\/crowti-update-cryptowall-3-0\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/download.microsoft.com\/download\/f\/8\/1\/f816b8b6-bee3-41e5-b6cc-e925a5688f61\/Microsoft_Digital_Defense_Report_2020_September.pdf", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2022\/06\/13\/the-many-lives-of-blackcat-ransomware\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/07\/05\/hive-ransomware-gets-upgrades-in-rust\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/techcommunity.microsoft.com\/t5\/security-compliance-and-identity\/part-1-lockbit-2-0-ransomware-bugs-and-database-recovery\/ba-p\/3254354", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2022\/07\/05\/hive-ransomware-gets-upgrades-in-rust\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/techcommunity.microsoft.com\/t5\/security-compliance-and-identity\/part-2-lockbit-2-0-ransomware-bugs-and-database-recovery\/ba-p\/3254421", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2022\/05\/09\/ransomware-as-a-service-understanding-the-cybercrime-gig-economy-and-how-to-protect-yourself\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/www.microsoft.com\/security\/blog\/2022\/04\/13\/dismantling-zloader-how-malicious-ads-led-to-disabled-security-tools-and-ransomware\/", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "https:\/\/query.prod.cms.rt.microsoft.com\/cms\/api\/am\/binary\/RE54L7v", "ioc_type": "url", "category": "Ransomware Actors", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:13:01", "last_seen": "2026-08-06 13:13:01" }, { "ioc_value": "Microsoft.com", "ioc_type": "other", "category": "Threat Reports", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:12:36", "last_seen": "2026-08-06 13:12:36" }, { "ioc_value": "programme-hup.m365-microsoft.com", "ioc_type": "other", "category": "Ransomware", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:10:24", "last_seen": "2026-08-06 13:10:24" }, { "ioc_value": "https:\/\/msrc-blog.microsoft.com\/2017\/08\/09\/moving-beyond-emet-ii-windows-defender-exploit-guard\/", "ioc_type": "url", "category": "ICS ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:09:23", "last_seen": "2026-08-06 13:09:23" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows-server\/identity\/ad-ds\/plan\/security-best-practices\/attractive-accounts-for-credential-theft", "ioc_type": "url", "category": "ICS ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:09:23", "last_seen": "2026-08-06 13:09:23" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows-server\/identity\/ad-ds\/plan\/security-best-practices\/implementing-least-privilege-administrative-models", "ioc_type": "url", "category": "ICS ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:09:23", "last_seen": "2026-08-06 13:09:23" }, { "ioc_value": "Microsoft.Compute", "ioc_type": "other", "category": "ICS ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:09:23", "last_seen": "2026-08-06 13:09:23" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/microsoft-365\/compliance\/use-sharing-auditing?view=o365-worldwide#sharepoint-sharing-events", "ioc_type": "url", "category": "ICS ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:09:23", "last_seen": "2026-08-06 13:09:23" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows\/win32\/sysinfo\/registry", "ioc_type": "url", "category": "ICS ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:09:23", "last_seen": "2026-08-06 13:09:23" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows\/win32\/amsi\/antimalware-scan-interface-portal", "ioc_type": "url", "category": "ICS ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:09:23", "last_seen": "2026-08-06 13:09:23" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/powershell\/module\/microsoft.powershell.core\/about\/about_logging_windows?view=powershell-7", "ioc_type": "url", "category": "ICS ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:09:23", "last_seen": "2026-08-06 13:09:23" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows\/security\/threat-protection\/auditing\/basic-audit-logon-events", "ioc_type": "url", "category": "ICS ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:09:23", "last_seen": "2026-08-06 13:09:23" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows\/win32\/fileio\/file-management", "ioc_type": "url", "category": "ICS ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:09:23", "last_seen": "2026-08-06 13:09:23" }, { "ioc_value": "https:\/\/docs.microsoft.com\/sysinternals\/downloads\/sysmon#event-id-9-rawaccessread", "ioc_type": "url", "category": "ICS ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:09:23", "last_seen": "2026-08-06 13:09:23" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows-server\/storage\/nfs\/nfs-overview", "ioc_type": "url", "category": "ICS ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:09:23", "last_seen": "2026-08-06 13:09:23" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows\/win32\/taskschd\/tasks", "ioc_type": "url", "category": "ICS ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:09:23", "last_seen": "2026-08-06 13:09:23" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/dotnet\/framework\/windows-services\/introduction-to-windows-service-applications", "ioc_type": "url", "category": "ICS ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:09:23", "last_seen": "2026-08-06 13:09:23" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/windows\/win32\/api\/libloaderapi\/nf-libloaderapi-loadlibrarya", "ioc_type": "url", "category": "ICS ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:09:23", "last_seen": "2026-08-06 13:09:23" }, { "ioc_value": "https:\/\/docs.microsoft.com\/en-us\/dotnet\/api\/system.reflection.module", "ioc_type": "url", "category": "ICS ATT&CK", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:09:23", "last_seen": "2026-08-06 13:09:23" }, { "ioc_value": "emailnotifications.m365-microsoft.com", "ioc_type": "other", "category": "Phishing", "threat_score": "0.50", "confidence_score": "0.50", "sighting_count": 1, "first_seen": "2026-08-06 13:08:24", "last_seen": "2026-08-06 13:08:24" } ] }