T1027.009 Embedded Payloads
Subtécnica de T1027 Obfuscated Files or Information
Adversaries may embed payloads within other files to conceal malicious content from defenses. Otherwise seemingly benign files (such as scripts and executables) may be abused to carry and obfuscate malicious payloads and content. In some cases, embedded payloads may also enable adversaries to [Subvert Trust Controls](https://attack.mitre.org/techniques/T1553) by not impacting execution controls…
Quién la usa · con noticias en Jábega
Reglas Sigma para cazarla
- Powershell Token Obfuscation - Process Creationhightest · windows
Reglas de SigmaHQ · Detection Rule License 1.1. Técnica de MITRE ATT&CK®.