LetsDefend Monitoring Alert
WannaCry Ransomware Detected
Mar, 15, 2023, 02:41 PM
Event ID: 128
Event Time: Mar, 15, 2023, 02:41 PM
Rule Name: SOC178 - WannaCry Ransomware Detected
Alert Type: Ransomware
MITRE Technique:
T1486 - Impact - Data Encrypted for Impact,
T1566 - Initial Access - Phishing,
T1059.001 - Execution - Command and Scripting Interpreter: PowerShell,
T1059 - Execution - Command and Scripting Interpreter,
Severity: Critical
Incident Responder