# Alibabacloud Mining Attack Diagnosis

> Alibaba Cloud Security Center cryptomining (cryptojacking) diagnosis skill.

Alibaba Cloud Security Center cryptomining (cryptojacking) diagnosis skill.
Use when the user reports or suspects a mining infection, receives a mining
alert, or asks for mining alert detection, IOC extraction (pool IPs,
malicious domains, sample hashes, malicious processes), affected-asset
scoping, attack-surface analysis, entry-vector analysis, risk assessment,
prioritized remediation reporting, cryptomining incident response, or
mining risk detection. Triggers: "mining", "cryptomining",
"cryptojacking", "coin mining", "coin-mining", "miner", "mining alert",
"mining alerts", "mining pool", "pool IPs", "malicious domains",
"sample hashes", "malicious processes", "mining IOC", "IOC extraction",
"mining alert detection", "affected-asset scoping",
"attack-surface analysis", "entry-vector analysis", "risk assessment",
"prioritized remediation reporting", "cryptomining incident response",
"mining risk detection", "xmrig", "kdevtmpfsi", "kinsing", "sysrv",
"minerd", "Security Center", "ECS high CPU mining"

- Page: https://ss33.ai/skills/aliyun/alibabacloud-mining-attack-diagnosis-93616107261
- Publisher: aliyun
- Category: [Security](https://ss33.ai/skills/category/security-w9g95g) › [Threat intel & forensics](https://ss33.ai/skills/category/security-w9g95g/threat-intel-and-forensics-rt4m7u)
- Source: https://github.com/aliyun/alibabacloud-aiops-skills/blob/32598d65d9643343f0580393355f1e4803fc5007/skills/others/cseskillshub/alibabacloud-mining-attack-diagnosis/SKILL.md

## Skill

This skill's licence does not allow redistribution, so the store does not serve its text. Get it from the author: https://github.com/aliyun/alibabacloud-aiops-skills/blob/32598d65d9643343f0580393355f1e4803fc5007/skills/others/cseskillshub/alibabacloud-mining-attack-diagnosis/SKILL.md