Network Attack Library

Detection Supported

Brute force attacks are a way for attackers to gain account access through trial and error when a password, encryption key, or hidden webpage is unknown.

Detection Supported

C2 beaconing is a type of malicious communication between a command and control server and malware on an infected host.

Detection Supported

Cross-site scripting is an application-layer attack exploiting communications between users and applications to gain access to sensitive data or take over applications.

Detection Supported

Cryptomining malware, or 'cryptojacking,' is a malware attack that co-opts the target's computing resources to mine cryptocurrency.

Detection Supported

In a DCSync attack, threat actors pretend to be a domain controller (DC) to get user credentials from another DC.

Detection Supported

A denial-of-service attack is a tactic for overloading a machine or network to make it unavailable by sending more traffic than the target can handle, causing it to fail.

Detection Supported

DNS tunneling is a difficult-to-detect attack that routes DNS requests to the attackers server, allowing them to get data.

Detection Supported

HTTP request smuggling is a web application attack that hijacks HTTP requests to bypass security measures.

Detection Supported

Port scanning is a method attackers use to scope out their target environment by sending packets to specific ports on a host and using the responses to find vulnerabilities and understand running services.

Detection Supported

Ransomware is a type of malicious software which encrypts files, making them inaccessible until a ransom is paid.

Detection Supported

Remote services exploitation is a technique that hijacks remote access tools to access a network's internal systems.

Detection Supported

A SQL injection is a common hacking technique which can compromise a database.