Use Case

Description

Issue ID

Reference ID

Added the following analytics:

Alerts

To learn more, go to UseCases Alerts.

KB-List

To learn more, go to UseCases Knowledge Base (KB) Lists.

The application now includes:

New dashboard package LP_AntiMalware and the search template LP_Antimalware has now been added to visualize the AntiMalware events.

The LP_COBALT STRIKE dashboard package and the LP_Cobalt Strike Default Named Pipes Detected alert's query have been enhanced.

The application now includes the dashboard package LP_COBALT STRIKE and alert packages LP_Suspicious Process Execution Without DLL, LP_CobaltStrike Process Injection Detected, LP_Meterpreter or Cobalt Strike Getsystem Service Start Detected, and LP_Suspicious Share Pattern in Service to visualize and detect the Cobalt Strike malware. Also, the LP_Cobalt Strike Default Named Pipes Detected alert's query has been enhanced.

Changes in UseCases v5.0.1

If you have any queries or require assistance, please feel free to contact our support team:

Email: servicedesk@logpoint.com
Phone: +45 7060 6100

Best regards,