...
DETECTION-SUMMARY-X_yyyyMMdd.txt
| Session ID | 検証結果 |
|---|---|
| 18922621726 | 58483(1) |
| 18922621734 | 1_54794_2(1),58706(1) |
snort
AUDITDATA-SNORT-X_yyyyMMdd.txt
...
| Session ID \ 検証 | 1日後 | 8日後 | 15日後 | 22日後 | 29日後 | 36日後 | 43日後 | 50日後 |
|---|---|---|---|---|---|---|---|---|
| 18922621721 | Email.Exploit.Efail-6543463-0(2) | Email.Exploit.Efail-6543463-0(2) | Email.Exploit.Efail-6543463-0(2) | Email.Exploit.Efail-6543463-0(2) | Email.Exploit.Efail-6543463-0(2) | Email.Exploit.Efail-6543463-0(2) | Email.Exploit.Efail-6543463-0(2) | Email.Exploit.Efail-6543463-0(2) |
| 18922621727 | Email.Exploit.Efail-6543463-0 | Email.Exploit.Efail-6543463-0 | Email.Exploit.Efail-6543463-0 | Email.Exploit.Efail-6543463-0 | Email.Exploit.Efail-6543463-0 | Email.Exploit.Efail-6543463-0 | Email.Exploit.Efail-6543463-0 | Email.Exploit.Efail-6543463-0 |
| 18922621732 | - | - | Win.Trojan.Hide-1 | Win.Trojan.Hide-1 | Win.Trojan.Hide-1 | Win.Trojan.Hide-1 | Win.Trojan.Hide-1 | Win.Trojan.Hide-1 |
ZERODAY-CLAMAV-X_yyyyMMdd.txt
| Doc.Dropper.EmotetUpdate1020-9778523-0 | 1 |
ZERODAY_COUNT-CLAMAV-X_yyyyMMdd.txt
| ClamAV_new | 0 |
| ClamAV_2_8 | 01 |
Shellcode
| Session ID | shellcode ID |
|---|---|
| 18922621718 | 11 |
| 18922621729 | 12 |
...