Detecting Post-Compromise Threat Activity Using the CHIRP IOC Detection Tool

🗓️ 15 Apr 2021 12:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 291 Views

Detecting Post-Compromise Threat Activity Using CHIRP IOC Detection Tool. CISA releases CHIRP, a forensics collection tool, to help find indicators of compromise (IOCs) for APT activity detailed in AA20-352A and AA21-008A Alerts. CHIRP scans for signs of compromise within on-premises environment.

Source	Link
facebook	www.facebook.com/sharer/sharer.php
twitter	www.twitter.com/intent/tweet
linkedin	www.linkedin.com/sharing/share-offsite/
	www.
whitehouse	www.whitehouse.gov/briefing-room/statements-releases/2021/04/15/fact-sheet-imposing-costs-for-harmful-foreign-activities-by-the-russian-government/
us-cert	www.us-cert.cisa.gov/remediating-apt-compromised-networks
cisa	www.cisa.gov/supply-chain-compromise
us-cert	www.us-cert.cisa.gov/ncas/alerts/aa20-352a
us-cert	www.us-cert.cisa.gov/ncas/alerts/aa21-008a
github	www.github.com/cisagov/Sparrow

15 Apr 2021 12:00Current

9.3High risk

Vulners AI Score9.3