Analytics BIOC
Informational
✕
Failed Login For a Long Username With Special Characters
A long username containing special characters failed to log in to the domain.
- Module:
- Platform Analytics
- Data source:
- Palo Alto Networks Firewall EAL Logs, XDR Agent
ATT&CK tactics: Initial Access (TA0001)
ATT&CK techniques: Exploit Public-Facing Application (T1190)
Attacker's goals:
An attacker is trying to get code execution on internet-facing assets through command injection.
Investigative actions:
Check the host and/or user triggering these failed attempts: Is the host running internet-facing services? Are we looking at sanction vulnerability scanning?
- Test period:
- N/A (single event)
- Deduplication:
- 1 Day