T1036.004 Masquerade Task or Service

Adversaries may attempt to manipulate the name of a task or service to make it appear legitimate or benign. Tasks/services executed by the Task Scheduler or systemd will typically be given a name and/or description.(Citation: TechNet Schtasks)(Citation: Systemd Service Units) Windows services will have a service name as well as a display name. Many benign tasks and services exist that have…

Ficha en MITRE ATT&CK ↗

Reglas de SigmaHQ · Detection Rule License 1.1. Técnica de MITRE ATT&CK®.