Vendor: CrowdStrike
June 14, 2023 · View on GitHub
Product: Falcon
Use-Case: Cryptomining
| Rules | Models | MITRE ATT&CK® TTPs | Event Types | Parsers |
|---|---|---|---|---|
| 2 | 0 | 1 | 1 | 1 |
| Event Type | Rules | Models |
|---|---|---|
| process-created | T1496 - Resource Hijacking ↳ A-EPA-Shadow-Mining-name: Process ending with 'miner.exe' has been run on this asset ↳ EPA-Shadow-Mining-name: Process ending with 'miner.exe' has been run |