Combined display of all available logs of RCATs. You can narrow down the view by selecting a log type, the username (case-sensitive), or the affected page (also case-sensitive).
- 15:24, 26 January 2023 SourMilk talk contribs created page Disk Content Wipe (Created page with "Category:Disk Wipe Adversaries may erase the contents of storage devices on specific systems or in large numbers in a network to interrupt availability to system and network resources.")
- 15:24, 26 January 2023 SourMilk talk contribs created page Category:Disk Wipe (Created page with "Category:Impact Adversaries may wipe or corrupt raw disk data on specific systems or in large numbers in a network to interrupt availability to system and network resources. With direct write access to a disk, adversaries may attempt to overwrite portions of disk data. Adversaries may opt to wipe arbitrary portions of disk data and/or wipe disk structures like the master boot record (MBR). A complete wipe of all disk sectors may be attempted.")
- 15:23, 26 January 2023 SourMilk talk contribs created page External Defacement (Created page with "Category:Defacement An adversary may deface systems external to an organization in an attempt to deliver messaging, intimidate, or otherwise mislead an organization or users. External Defacement may ultimately cause users to distrust the systems and to question/discredit the system’s integrity. Externally-facing websites are a common victim of defacement; often targeted by adversary and hacktivist groups in order to push a political message or spread propaganda. Ex...")
- 15:23, 26 January 2023 SourMilk talk contribs created page Internal Defacement (Created page with "Category:Defacement An adversary may deface systems internal to an organization in an attempt to intimidate or mislead users, thus discrediting the integrity of the systems. This may take the form of modifications to internal websites, or directly to user systems with the replacement of the desktop wallpaper. Disturbing or offensive images may be used as a part of Internal Defacement in order to cause user discomfort, or to pressure compliance with accompanying messa...")
- 15:22, 26 January 2023 SourMilk talk contribs created page Category:Defacement (Created page with "Category:Impact Adversaries may modify visual content available internally or externally to an enterprise network, thus affecting the integrity of the original content. Reasons for Defacement include delivering messaging, intimidation, or claiming (possibly false) credit for an intrusion. Disturbing or offensive images may be used as a part of Defacement in order to cause user discomfort, or to pressure compliance with accompanying messages.") Tag: Visual edit: Switched
- 15:21, 26 January 2023 SourMilk talk contribs deleted page Defacement (content was: "Category:Impact Adversaries may modify visual content available internally or externally to an enterprise network, thus affecting the integrity of the original content. Reasons for Defacement include delivering messaging, intimidation, or claiming (possibly false) credit for an intrusion. Disturbing or offensive images may be used as a part of Defacement in order to cau...", and the only contributor was "SourMilk" (talk))
- 15:21, 26 January 2023 SourMilk talk contribs created page Defacement (Created page with "Category:Impact Adversaries may modify visual content available internally or externally to an enterprise network, thus affecting the integrity of the original content. Reasons for Defacement include delivering messaging, intimidation, or claiming (possibly false) credit for an intrusion. Disturbing or offensive images may be used as a part of Defacement in order to cause user discomfort, or to pressure compliance with accompanying messages.")
- 15:21, 26 January 2023 SourMilk talk contribs created page Runtime Data Manipulation (Created page with "Category:Data Manipulation Adversaries may modify systems in order to manipulate the data as it is accessed and displayed to an end user, thus threatening the integrity of the data. By manipulating runtime data, adversaries may attempt to affect a business process, organizational understanding, and decision making.")
- 15:20, 26 January 2023 SourMilk talk contribs created page Transmitted Data Manipulation (Created page with "Category:Data Manipulation Adversaries may alter data en route to storage or other systems in order to manipulate external outcomes or hide activity, thus threatening the integrity of the data. By manipulating transmitted data, adversaries may attempt to affect a business process, organizational understanding, and decision making.")
- 15:20, 26 January 2023 SourMilk talk contribs deleted page Data Manipulation (content was: "Category:Impact Adversaries may insert, delete, or manipulate data in order to influence external outcomes or hide activity, thus threatening the integrity of the data. By manipulating data, adversaries may attempt to affect a business process, organizational understanding, or decision making.", and the only contributor was "SourMilk" (talk))
- 15:19, 26 January 2023 SourMilk talk contribs created page Category:Data Manipulation (Created page with "Category:Impact Adversaries may insert, delete, or manipulate data in order to influence external outcomes or hide activity, thus threatening the integrity of the data. By manipulating data, adversaries may attempt to affect a business process, organizational understanding, or decision making.")
- 15:19, 26 January 2023 SourMilk talk contribs created page Stored Data Manipulation (Created page with "Category:Data Manipulation")
- 15:18, 26 January 2023 SourMilk talk contribs created page Data Manipulation (Created page with "Category:Impact Adversaries may insert, delete, or manipulate data in order to influence external outcomes or hide activity, thus threatening the integrity of the data. By manipulating data, adversaries may attempt to affect a business process, organizational understanding, or decision making.")
- 15:17, 26 January 2023 SourMilk talk contribs created page Data Encrypted (Created page with "Category:Impact Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources. They can attempt to render stored data inaccessible by encrypting files or data on local and remote drives and withholding access to a decryption key. This may be done in order to extract monetary compensation from a victim in exchange for decryption or a decryption key (ransomware) or to render data per...")
- 15:17, 26 January 2023 SourMilk talk contribs created page Data Destruction (Created page with "Category:Impact Adversaries may destroy data and files on specific systems or in large numbers on a network to interrupt availability to systems, services, and network resources. Data destruction is likely to render stored data irrecoverable by forensic techniques through overwriting files or data on local and remote drives. Common operating system file deletion commands such as del and rm often only remove pointers to files without wiping the contents of the files t...")
- 15:16, 26 January 2023 SourMilk talk contribs created page Account Access Removal (Created page with "Category:Impact Adversaries may interrupt availability of system and network resources by inhibiting access to accounts utilized by legitimate users. Accounts may be deleted, locked, or manipulated (ex: changed credentials) to remove access to accounts. Adversaries may also subsequently log off and/or perform a System Shutdown/Reboot to set malicious changes into place.")
- 15:14, 26 January 2023 SourMilk talk contribs created page Category:Impact (Created page with "The adversary is trying to manipulate, interrupt, or destroy your systems and data. Impact consists of techniques that adversaries use to disrupt availability or compromise integrity by manipulating business and operational processes. Techniques used for impact can include destroying or tampering with data. In some cases, business processes can look fine, but may have been altered to benefit the adversaries’ goals. These techniques might be used by adversaries to foll...")
- 13:38, 25 January 2023 SourMilk talk contribs created page Mimikatz (Created page with "Category:Tools") Tag: Visual edit
- 13:26, 22 January 2023 SourMilk talk contribs created page Hack the box (Created page with "REDIRECT ''Category:HackTheBox''") Tag: Visual edit
- 10:36, 22 January 2023 SourMilk talk contribs created page Investigation (Created page with "[Category:Medium] ==Enumeration== ===Nmap=== <syntaxhighlight lang="bash"> Starting Nmap 7.93 ( https://nmap.org ) at 2023-01-22 08:16 MST Nmap scan report for 10.129.10.145 Host is up (0.12s latency). Not shown: 998 closed tcp ports (conn-refused) PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 8.2p1 Ubuntu 4ubuntu0.5 (Ubuntu Linux; protocol 2.0) | ssh-hostkey: | 3072 2f1e6306aa6ebbcc0d19d4152674c6d9 (RSA) | 256 274520add2faa73a8373d97c79abf30b (ECDSA) |_...") Tag: Visual edit: Switched
- 10:05, 21 January 2023 SourMilk talk contribs deleted page Active Scanning (content was: "This is a test Active Scanning:Reconnaissance", and the only contributor was "Ali3nw3rx" (talk))
- 00:33, 21 January 2023 SourMilk talk contribs deleted page Active Scanning:Reconnaissance (content was: "", and the only contributor was "Ali3nw3rx" (talk))
- 00:21, 21 January 2023 SourMilk talk contribs created page Cloud Accounts (Created page with "Category:Valid Accounts")
- 00:20, 21 January 2023 SourMilk talk contribs created page Local Accounts (Created page with "Category:Valid Accounts")
- 00:20, 21 January 2023 SourMilk talk contribs created page Domain Accounts (Created page with "Category:Valid Accounts") Tag: Visual edit: Switched
- 00:19, 21 January 2023 SourMilk talk contribs created page Default Accounts (Created page with "Category:Valid Accounts") Tag: Visual edit
- 00:19, 21 January 2023 SourMilk talk contribs created page Category:Valid Accounts (Created page with "Category:Initial Access") Tag: Visual edit: Switched
- 00:18, 21 January 2023 SourMilk talk contribs deleted page Valid Accounts (content was: "Category:Initial Access", and the only contributor was "SourMilk" (talk))
- 00:18, 21 January 2023 SourMilk talk contribs created page Valid Accounts (Created page with "Category:Initial Access")
- 00:18, 21 January 2023 SourMilk talk contribs created page Trusted Relationship (Created page with "Category:Initial Access")
- 00:17, 21 January 2023 SourMilk talk contribs created page Compromise Hardware Supply Chain (Created page with "Category:Supply Chain Compromise")
- 00:17, 21 January 2023 SourMilk talk contribs created page Compromise Software Supply Chain (Created page with "Category:Supply Chain Compromise")
- 00:17, 21 January 2023 SourMilk talk contribs created page Compromise Software Dependencies and Development Tools (Created page with "Category:Supply Chain Compromise")
- 00:17, 21 January 2023 SourMilk talk contribs created page Category:Supply Chain Compromise (Created page with "Category:Initial Access") Tag: Visual edit: Switched
- 00:16, 21 January 2023 SourMilk talk contribs deleted page Supply Chain Compromise (content was: "Category:Initial Access", and the only contributor was "SourMilk" (talk))
- 00:16, 21 January 2023 SourMilk talk contribs created page Supply Chain Compromise (Created page with "Category:Initial Access")
- 00:15, 21 January 2023 SourMilk talk contribs created page Replication Through Removable Media (Created page with "Category:Initial Access")
- 00:15, 21 January 2023 SourMilk talk contribs created page Spearphishing via Service (Created page with "Category:Phishing")
- 00:15, 21 January 2023 SourMilk talk contribs created page Spearphishing Link (Created page with "Category:Phishing") Tag: Visual edit: Switched
- 00:14, 21 January 2023 SourMilk talk contribs created page Spearphishing Attachment (Created page with "Category:Phishing") Tag: Visual edit
- 00:14, 21 January 2023 SourMilk talk contribs created page Category:Phishing (Created page with "Category:Initial Access") Tag: Visual edit: Switched
- 00:13, 21 January 2023 SourMilk talk contribs created page Hardware Additions (Created page with "Category:Initial Access")
- 00:13, 21 January 2023 SourMilk talk contribs created page External Remote Services (Created page with "Category:Initial Access")
- 00:10, 21 January 2023 SourMilk talk contribs created page Exploit Public-Facing Application (Created page with "{{Infobox Creating Exploit Public-Facing Application | name = | image = | image_size = | caption = | alternate_name = | country = | region = | creator = | course = | type = | served = | main_ingredient = | variations = | calories = | other = }}")
- 00:08, 21 January 2023 SourMilk talk contribs created page Drive-by Compromise (Created page with "Category:Initial Access") Tag: Visual edit: Switched
- 00:07, 21 January 2023 SourMilk talk contribs created page Category:Initial Access (Created blank page) Tag: Visual edit
- 23:56, 20 January 2023 SourMilk talk contribs created page Category:Insane (Created page with "Category:HackTheBox")
- 23:56, 20 January 2023 SourMilk talk contribs created page Category:Hard (Created page with "Category:HackTheBox")
- 23:55, 20 January 2023 SourMilk talk contribs created page Category:Medium (Created page with "Category:HackTheBox") Tag: Visual edit: Switched
- 23:42, 20 January 2023 SourMilk talk contribs created page Category:Easy (Created blank page) Tag: Visual edit