T1008 Fallback Channels
Adversaries may use fallback or alternate communication channels if the primary channel is compromised or inaccessible in order to maintain reliable command and control and to avoid data transfer thresholds.
Quién la usa · con noticias en Jábega
Reglas Sigma para cazarla
- Outlook Macro Execution Without Warning Setting Enabledhightest · windows
- Potential Persistence Via Outlook LoadMacroProviderOnBoot Settinghightest · windows
- Suspicious Outlook Macro Createdhightest · windows
- New Outlook Macro Createdmediumtest · windows
Reglas de SigmaHQ · Detection Rule License 1.1. Técnica de MITRE ATT&CK®.