Lucene search
This script is Copyright (C) 2013-2024 and is owned by Tenable, Inc. or an Affiliate thereof.WMI_APT1_RUNNING.NBINHistoryFeb 19, 2013 - 12:00 a.m.
Malicious Process Detection: APT1 Software Running
2013-02-1900:00:00
This script is Copyright (C) 2013-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
10
The md5sum of one or more running processes on the remote Windows host matches the signature distributed by Mandiant of software known to be involved in corporate cyber espionage by a unit called APT1.
Verify that the remote processes are legitimate and authorized in your environment.
Binary data wmi_apt1_running.nbin