Back to evidence

Sanitized live incident

Reconnaissance

Native source identity and targetable endpoints are private.

mediumopen
Confidence
96%
First seen
Sep 28, 10:35:04 PM PDT
Evidence through
Sep 28, 10:35:32 PM PDT
AI status
Pending
AI investigation is Pending

Deterministic signals remain live while the bounded assessment completes.

Observed impact

    Deterministic signals

    Http.surface enumeration92%

    Broad unauthenticated route and HTTP method enumeration observed

    263 observations · 12 http
    Http.php webshell enumeration96%

    Rapid enumeration of PHP and WordPress web-shell paths

    41 observations · 12 http