THREATOPS

THREAT OPS › Threat News › Network Anomaly Detection in KATA

Network Anomaly Detection in KATA

medsecurelistPublished 2026-07-31

<p><img alt="" class="attachment-securelist-huge-promo size-securelist-huge-promo wp-post-image" height="400" src="https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2026/07/31090131/kata-nad-featured-image-scaled-1-990x400.jpg" width="990" /></p><h2 id="introduction">Introduction</h2> <p>Once the attacker has breached the corporate network, subsequent stages of the attack often inv

MITRE ATT&CK techniques

IP AddressesT1590.005
DNS ServerT1583.002
AS-REP RoastingT1558.004
DHCP SpoofingT1557.003
CredentialsT1589.001
DNS ServerT1584.002
Domain AccountsT1078.002
KerberoastingT1558.003

Indicators of compromise

https://www.kaspersky.com/enterprise-security/anti-targeted-attack-platform?icid=gl_sl_post-kata_sm-team_839dfa6f6cbc16e1url
https://support.kaspersky.com/kata/8.0/308163url
media.kasperskycontenthub.comdomain

Original source: https://securelist.com/tr/network-anomaly-detection-in-kata/120892/