Analytics BIOC Low
✕

Non-browser access to a pastebin-like site

Non-browser access to a pastebin-like site.

Module:
Platform Analytics
Data source:
Palo Alto Networks Url Logs
ATT&CK tactics: Command and Control (TA0011)
ATT&CK techniques: Web Service (T1102)
Attacker's goals:

Data exfiltration or attack tool staging.

Investigative actions:

Examine the host to verify that the host was not part of infiltration or data exfiltration from the organization. Verify that the host doesn't have sensitive company data that can be easily exfiltrated.

Test period:
N/A (single event)
Deduplication:
1 Day
4 variations:
  • Non-browser or an uncommon browser access to a pastebin-like site Informational (parent: Low)
  • Non-browser access to google sheets API Low
  • Non-browser failed access to a pastebin-like site Low
  • Rare non-browser access to a pastebin-like site Medium (parent: Low)