T1480.002 Mutual Exclusion
Subtécnica de T1480 Execution Guardrails
Adversaries may constrain execution or actions based on the presence of a mutex associated with malware. A mutex is a locking mechanism used to synchronize access to a resource. Only one thread or process can acquire a mutex at a given time.(Citation: Microsoft Mutexes) While local mutexes only exist within a given process, allowing multiple threads to synchronize access to a resource, system…
Quién la usa · con noticias en Jábega
Reglas Sigma para cazarla
SigmaHQ no tiene reglas para esta técnica.
Reglas de SigmaHQ · Detection Rule License 1.1. Técnica de MITRE ATT&CK®.