| Detect Default File Association Hijack via Registry & Execution Correlation on Windows - DET0061 (61585647-dcc0-4c46-9333-c59796997826) |
Detection Strategies |
Change Default File Association - T1546.001 (98034fef-d9fb-4667-8dc4-2eab6231724c) |
Attack Pattern |
1 |
| Detect Default File Association Hijack via Registry & Execution Correlation on Windows - DET0061 (61585647-dcc0-4c46-9333-c59796997826) |
Detection Strategies |
Analytic 0170 - AN0170 (3ac58f14-32d6-4ce2-8aa7-e7c429dd6405) |
Analytics |
1 |
| Change Default File Association - T1546.001 (98034fef-d9fb-4667-8dc4-2eab6231724c) |
Attack Pattern |
Event Triggered Execution - T1546 (b6301b64-ef57-4cce-bb0b-77026f14a8db) |
Attack Pattern |
2 |