Hide Navigation Hide TOC User Session Init Config Analysis (a15581c3-dacb-513e-a7bc-54f76a4b2554) Analyzing modifications to user session config files such as .bashrc or .bash_profile. Cluster A Galaxy A Cluster B Galaxy B Level Hidden Users - T1564.002 (8c4aef43-48d5-49aa-b2af-c0cd58d30c3d) Attack Pattern User Session Init Config Analysis (a15581c3-dacb-513e-a7bc-54f76a4b2554) MITRE D3FEND 1 User Session Init Config Analysis (a15581c3-dacb-513e-a7bc-54f76a4b2554) MITRE D3FEND Unix Shell Configuration Modification - T1546.004 (b63a34e8-0a61-4c97-a23b-bf8a2ed812e2) Attack Pattern 1 Hidden Users - T1564.002 (8c4aef43-48d5-49aa-b2af-c0cd58d30c3d) Attack Pattern Hide Artifacts - T1564 (22905430-4901-4c2a-84f6-98243cb173f8) Attack Pattern 2 Event Triggered Execution - T1546 (b6301b64-ef57-4cce-bb0b-77026f14a8db) Attack Pattern Unix Shell Configuration Modification - T1546.004 (b63a34e8-0a61-4c97-a23b-bf8a2ed812e2) Attack Pattern 2