Sapir Federovsky

Reported Context (1)

Documented the NtVer + AAC + User filter shape as an ldapnomnom fingerprint in her TROOPERS24 talk. Detecting Active Directory LDAP Ping: Correlating Netlogon Logs and Event 5156

People (1)

MITRE ATT&CK (1)

Vendors (1)

Products (2)

Tools (4)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.