Técnica MITRE ATT&CK · stealth

`T1211` Exploitation for Stealth

Adversaries may exploit vulnerabilities to evade detection by hiding activity, suppressing logging, or operating within trusted or unmonitored components. Adversaries may exploit a system or application vulnerability to avoid detection while maintaining access within an environment. Exploitation occurs when an adversary leverages a programming flaw to execute code in a manner that minimizes…

Ficha en MITRE ATT&CK ↗

Quién la usa · con noticias en Jábega

APT28

Reglas Sigma para cazarla

Audit CVE Eventcriticaltest · windows
Microsoft Malware Protection Engine Crashhightest · windows
Microsoft Malware Protection Engine Crash - WERhightest · windows
Writing Of Malicious Files To The Fonts Foldermediumtest · windows

Reglas de SigmaHQ · Detection Rule License 1.1. Técnica de MITRE ATT&CK®.