Skip to content

Hide Navigation Hide TOC

Shadow Stack Comparisons (856204a9-0a3e-59e8-8858-f75f1ed09aea)

Comparing a call stack in system memory with a shadow call stack maintained by the processor to determine unauthorized shellcode activity.

Cluster A Galaxy A Cluster B Galaxy B Level
Shadow Stack Comparisons (856204a9-0a3e-59e8-8858-f75f1ed09aea) MITRE D3FEND Exploitation for Credential Access - T1212 (9c306d8d-cde7-4b4c-b6e8-d0bb16caca36) Attack Pattern 1
Shadow Stack Comparisons (856204a9-0a3e-59e8-8858-f75f1ed09aea) MITRE D3FEND Exploitation for Client Execution - T1203 (be2dcee9-a7a7-4e38-afd6-21b31ecc3d63) Attack Pattern 1
Exploitation for Privilege Escalation - T1068 (b21c3b2d-02e6-45b1-980b-e69051040839) Attack Pattern Shadow Stack Comparisons (856204a9-0a3e-59e8-8858-f75f1ed09aea) MITRE D3FEND 1
Shadow Stack Comparisons (856204a9-0a3e-59e8-8858-f75f1ed09aea) MITRE D3FEND Exploitation of Remote Services - T1210 (9db0cf3a-a3c9-4012-8268-123b9db6fd82) Attack Pattern 1
Shadow Stack Comparisons (856204a9-0a3e-59e8-8858-f75f1ed09aea) MITRE D3FEND Exploitation for Defense Evasion - T1211 (fe926152-f431-4baf-956c-4ad3cb0bf23b) Attack Pattern 1