{"id":5674,"date":"2020-10-19T13:37:17","date_gmt":"2020-10-19T11:37:17","guid":{"rendered":"http:\/\/www.cytomic.ai\/tendencias\/id-700102\/"},"modified":"2024-05-13T10:21:44","modified_gmt":"2024-05-13T08:21:44","slug":"id-700102","status":"publish","type":"post","link":"https:\/\/www.cytomic.ai\/es\/soporte\/id-700102\/","title":{"rendered":"Informaci\u00f3n relacionada con las t\u00e9cnicas de Exploit"},"content":{"rendered":"[vc_row type=&#8221;full_width_background&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; equal_height=&#8221;yes&#8221; content_placement=&#8221;middle&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; bg_color=&#8221;#7e5994&#8243; scene_position=&#8221;center&#8221; top_padding=&#8221;12&#8243; bottom_padding=&#8221;12&#8243; text_color=&#8221;light&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221; shape_type=&#8221;&#8221;][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;3\/5&#8243; tablet_width_inherit=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221; bg_image_animation=&#8221;none&#8221;][\/vc_column][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/5&#8243; tablet_width_inherit=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221; bg_image_animation=&#8221;none&#8221;]<div class=\"iwithtext\"><div class=\"iwt-icon\"> <img decoding=\"async\" src=\"https:\/\/www.cytomic.ai\/src\/uploads\/2020\/03\/support-tiny.svg\" alt=\"\" \/> <\/div><div class=\"iwt-text\"> +34 900 840 407 <\/div><div class=\"clear\"><\/div><\/div>[\/vc_column][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/5&#8243; tablet_width_inherit=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221; bg_image_animation=&#8221;none&#8221;]<div class=\"iwithtext\"><div class=\"iwt-icon\"> <img decoding=\"async\" src=\"https:\/\/www.cytomic.ai\/src\/uploads\/2020\/03\/contact-tiny.svg\" alt=\"\" \/> <\/div><div class=\"iwt-text\"> support@cytomic.ai <\/div><div class=\"clear\"><\/div><\/div>[\/vc_column][\/vc_row][vc_row type=&#8221;full_width_content&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; equal_height=&#8221;yes&#8221; content_placement=&#8221;top&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; scene_position=&#8221;center&#8221; text_color=&#8221;dark&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221; shape_type=&#8221;&#8221;][vc_column column_padding=&#8221;padding-5-percent&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; background_color=&#8221;#f3f3f3&#8243; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/3&#8243; tablet_width_inherit=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221; bg_image_animation=&#8221;none&#8221;][split_line_heading animation_type=&#8221;default&#8221;]<a href=\"#title1\">Productos Relacionados<\/a><\/p>\n<p><a href=\"#title2\">Introducci\u00f3n<\/a>[\/split_line_heading][\/vc_column][vc_column column_padding=&#8221;padding-5-percent&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;2\/3&#8243; tablet_width_inherit=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221; bg_image_animation=&#8221;none&#8221;][vc_column_text]\n<h3>Informaci\u00f3n relacionada con las t\u00e9cnicas de Exploit<\/h3>\n[\/vc_column_text][vc_column_text css=&#8221;.vc_custom_1610098076316{padding-top: 40px !important;padding-bottom: 20px !important;}&#8221;]\n<h6 id=\"title1\">Productos Relacionados<\/h6>\n[\/vc_column_text][vc_column_text]\n<ul>\n<li>Advanced EPDR<\/li>\n<\/ul>\n[\/vc_column_text][vc_column_text css=&#8221;.vc_custom_1610098092659{padding-top: 40px !important;padding-bottom: 20px !important;}&#8221;]\n<h6 id=\"title1\">Introducci\u00f3n<\/h6>\n[\/vc_column_text][vc_column_text]Desde la <a href=\"http:\/\/www.cytomic.ai\/es\/soporte\/id-700086\/\" target=\"_blank\" rel=\"noopener noreferrer\">Release III<\/a> de Advanced EPDR\/EDR se muestra, dentro de la actividad de exploits, la t\u00e9cnica de exploit que ha sido detectada, junto al programa que se ha visto comprometido.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-5678\" src=\"http:\/\/www.cytomic.ai\/src\/uploads\/2020\/10\/cytomicIII-es.png\" alt=\"\" width=\"501\" height=\"181\" srcset=\"https:\/\/www.cytomic.ai\/src\/uploads\/2020\/10\/cytomicIII-es.png 1300w, https:\/\/www.cytomic.ai\/src\/uploads\/2020\/10\/cytomicIII-es-300x108.png 300w, https:\/\/www.cytomic.ai\/src\/uploads\/2020\/10\/cytomicIII-es-1024x370.png 1024w, https:\/\/www.cytomic.ai\/src\/uploads\/2020\/10\/cytomicIII-es-768x278.png 768w\" sizes=\"auto, (max-width: 501px) 100vw, 501px\" \/><\/p>\n<p>En la siguiente tabla podr\u00e1s encontrar las diferentes t\u00e9cnicas monitorizadas, as\u00ed como una breve descripci\u00f3n de estas:<\/p>\n<table border=\"1\" width=\"782\">\n<tbody>\n<tr>\n<td width=\"179\"><strong>Nombre de la T\u00e9cnica<\/strong><\/td>\n<td width=\"464\"><strong>Descripci\u00f3n de la T\u00e9cnica<\/strong><\/td>\n<\/tr>\n<tr>\n<td width=\"179\">Exploit\/Metasploit<\/td>\n<td width=\"464\">Detecci\u00f3n por firmas de shellcodes de metasploit<\/td>\n<\/tr>\n<tr>\n<td width=\"179\">Exploit\/ReflectiveLoader<\/td>\n<td width=\"464\">Carga de ejecutable de forma reflectiva (metasploit, cobalt strike, etc)<\/td>\n<\/tr>\n<tr>\n<td width=\"179\">Exploit\/RemoteAPCInjection<\/td>\n<td width=\"464\">Inyecci\u00f3n remota de c\u00f3digo v\u00eda APCs<\/td>\n<\/tr>\n<tr>\n<td width=\"179\">Exploit\/DynamicExec<\/td>\n<td width=\"464\">Ejecuci\u00f3n de c\u00f3digo en p\u00e1ginas sin permisos de ejecuci\u00f3n (solo 32 bits)<\/td>\n<\/tr>\n<tr>\n<td width=\"179\">Exploit\/HookBypass<\/td>\n<td width=\"464\">Bypass del hook en funciones en ejecuci\u00f3n<\/td>\n<\/tr>\n<tr>\n<td width=\"179\">Exploit\/ShellcodeBehavior<\/td>\n<td width=\"464\">Ejecuci\u00f3n de c\u00f3digo en p\u00e1ginas MEM_PRIVATE que no corresponden a un PE<\/td>\n<\/tr>\n<tr>\n<td width=\"179\">Exploit\/ROP1<\/td>\n<td width=\"464\">Ejecuci\u00f3n de APIs de gesti\u00f3n de memoria estando el stack fuera de los l\u00edmites del hilo<\/td>\n<\/tr>\n<tr>\n<td width=\"179\">Exploit\/IE_GodMode<\/td>\n<td width=\"464\">T\u00e9cnica GodMode en Internet Explorer<\/td>\n<\/tr>\n<tr>\n<td width=\"179\">Exploit\/RunPE<\/td>\n<td width=\"464\">T\u00e9cnicas de Process hollowing \/ RunPE<\/td>\n<\/tr>\n<tr>\n<td width=\"179\">Exploit\/PsReflectiveLoader1<\/td>\n<td width=\"464\">Powershell &#8211; Carga de ejecutable de forma reflectiva (mimikatz, etc)<\/td>\n<\/tr>\n<tr>\n<td width=\"179\">Exploit\/PsReflectiveLoader2<\/td>\n<td width=\"464\">Powershell &#8211; Carga de ejecutable de forma reflectiva (mimikatz, etc)<\/td>\n<\/tr>\n<tr>\n<td width=\"179\">Exploit\/NetReflectiveLoader<\/td>\n<td width=\"464\">Carga reflectiva .NET (Assembly.Load)<\/td>\n<\/tr>\n<tr>\n<td width=\"179\">Exploit\/JS2DOT<\/td>\n<td width=\"464\">T\u00e9cnica JS2DOT<\/td>\n<\/tr>\n<tr>\n<td width=\"179\">Exploit\/Covenant<\/td>\n<td width=\"464\">Detecci\u00f3n framework de Covenant<\/td>\n<\/tr>\n<tr>\n<td width=\"179\">Exploit\/DumpLsass<\/td>\n<td width=\"464\">Dumpeo de memoria del proceso lsass<\/td>\n<\/tr>\n<tr>\n<td width=\"179\">Exploit\/APC_Exec<\/td>\n<td width=\"464\">Ejecuci\u00f3n de c\u00f3digo local v\u00eda APC<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>Adicionalmente, se ha a\u00f1adido la posibilidad de excluir la detecci\u00f3n de una t\u00e9cnica para un programa concreto. De esta forma, en el caso de que el cliente quiera permitir, por cualquier cosa, una excepci\u00f3n para un proceso o programa concreto, puede hacerse, y seguir protegiendo al resto de procesos frente a ese intento de explotaci\u00f3n.<br \/>\nPara ello, en la detecci\u00f3n del exploit, dentro del tooltip accesible desde <strong>Acci\u00f3n<\/strong>, existe la opci\u00f3n de <strong>No volver a detectar<\/strong>.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-5680\" src=\"http:\/\/www.cytomic.ai\/src\/uploads\/2020\/10\/cytomicIII2-es.png\" alt=\"\" width=\"600\" height=\"333\" srcset=\"https:\/\/www.cytomic.ai\/src\/uploads\/2020\/10\/cytomicIII2-es.png 1300w, https:\/\/www.cytomic.ai\/src\/uploads\/2020\/10\/cytomicIII2-es-300x166.png 300w, https:\/\/www.cytomic.ai\/src\/uploads\/2020\/10\/cytomicIII2-es-1024x568.png 1024w, https:\/\/www.cytomic.ai\/src\/uploads\/2020\/10\/cytomicIII2-es-768x426.png 768w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/>[\/vc_column_text][\/vc_column][\/vc_row]\n","protected":false},"excerpt":{"rendered":"<p>[vc_row type=&#8221;full_width_background&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; equal_height=&#8221;yes&#8221; content_placement=&#8221;middle&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; bg_color=&#8221;#7e5994&#8243; scene_position=&#8221;center&#8221; top_padding=&#8221;12&#8243; bottom_padding=&#8221;12&#8243; text_color=&#8221;light&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221; shape_type=&#8221;&#8221;][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221;&#8230;<\/p>\n","protected":false},"author":4,"featured_media":414,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[33,27],"tags":[],"class_list":{"0":"post-5674","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-epdr","8":"category-soporte"},"_links":{"self":[{"href":"https:\/\/www.cytomic.ai\/es\/wp-json\/wp\/v2\/posts\/5674","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cytomic.ai\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cytomic.ai\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cytomic.ai\/es\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cytomic.ai\/es\/wp-json\/wp\/v2\/comments?post=5674"}],"version-history":[{"count":4,"href":"https:\/\/www.cytomic.ai\/es\/wp-json\/wp\/v2\/posts\/5674\/revisions"}],"predecessor-version":[{"id":8314,"href":"https:\/\/www.cytomic.ai\/es\/wp-json\/wp\/v2\/posts\/5674\/revisions\/8314"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cytomic.ai\/es\/wp-json\/wp\/v2\/media\/414"}],"wp:attachment":[{"href":"https:\/\/www.cytomic.ai\/es\/wp-json\/wp\/v2\/media?parent=5674"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cytomic.ai\/es\/wp-json\/wp\/v2\/categories?post=5674"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cytomic.ai\/es\/wp-json\/wp\/v2\/tags?post=5674"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}