Hide Navigation Hide TOC Search-ms and WebDAV Suspicious Indicators in URL (5039f3d2-406a-4c1a-9350-7a5a85dc84c2) Detects URL pattern used by search(-ms)/WebDAV initial access campaigns. Cluster A Galaxy A Cluster B Galaxy B Level Search-ms and WebDAV Suspicious Indicators in URL (5039f3d2-406a-4c1a-9350-7a5a85dc84c2) Sigma-Rules Phishing - T1566 (a62a8db3-f23a-4d8f-afd6-9dbc77e7813b) Attack Pattern 1 Search-ms and WebDAV Suspicious Indicators in URL (5039f3d2-406a-4c1a-9350-7a5a85dc84c2) Sigma-Rules Compromise Infrastructure - T1584 (7e3beebd-8bfe-4e7b-a892-e44ab06a75f9) Attack Pattern 1