MISP
/
misp-galaxy
mirror of https://github.com/MISP/misp-galaxy
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: [o365-exchange-techniques] Actions on Intent added (finalized)

pull/401/head
Alexandre Dulaunoy 2019-05-12 18:25:01 +02:00
parent 5d1565152c
commit 678b2a5621
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 40 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

40
clusters/o365-exchange-techniques.json
View File

@ -329,6 +329,46 @@
},
"uuid": "a69da576-7ed2-4b29-8c4a-6c16bd2c2a54",
"value": "On-Prem Exchange - Delegation"
},
{
"description": "O365 - MailSniper: Search Mailbox for content",
"meta": {
"kill_chain": [
"tactics:Actions on Intent"
]
},
"uuid": "ae6eb93b-503f-49b5-98db-3f282551facb",
"value": "O365 - MailSniper: Search Mailbox for content"
},
{
"description": "O365 - Search for Content with eDiscovery",
"meta": {
"kill_chain": [
"tactics:Actions on Intent"
]
},
"uuid": "8ac66795-5e59-4993-973b-b6efd78fb1c8",
"value": "O365 - Search for Content with eDiscovery"
},
{
"description": "O365 - Exfiltration email using EWS APIs with PowerShell",
"meta": {
"kill_chain": [
"tactics:Actions on Intent"
]
},
"uuid": "4d67a417-169c-47d0-a7fa-d710b9e2f611",
"value": "O365 - Exfiltration email using EWS APIs with PowerShell"
},
{
"description": "O365 - Download documents and email",
"meta": {
"kill_chain": [
"tactics:Actions on Intent"
]
},
"uuid": "1ccc00f8-d4b5-4c72-a7c0-a53127497a7c",
"value": "O365 - Download documents and email"
}
],
"version": 1