Técnica MITRE ATT&CK · stealth

`T1564.001` Hidden Files and Directories

Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files…

Ficha en MITRE ATT&CK ↗

Quién la usa · con noticias en Jábega

TeamPCP

Reglas Sigma para cazarla

PowerShell Logging Disabled Via Registry Key Tamperinghightest · windows
Registry Persistence via Service in Safe Modehightest · windows
Set Suspicious Files as System Files Using Attrib.EXEhightest · windows
Atomic MacOS Stealer - Persistence Indicatorshighexperimental · macos
Displaying Hidden Files Feature Disabledmediumtest · windows
Hiding Files with Attrib.exemediumtest · windows
Use Icacls to Hide File to Everyonemediumtest · windows

Reglas de SigmaHQ · Detection Rule License 1.1. Técnica de MITRE ATT&CK®.