Skip to content

Hide Navigation Hide TOC

Detect Winlogon Helper DLL Abuse via Registry and Process Artifacts on Windows - DET0404 (63135c50-7c7a-4a44-a053-28abd2388f21)

None

Cluster A Galaxy A Cluster B Galaxy B Level
Detect Winlogon Helper DLL Abuse via Registry and Process Artifacts on Windows - DET0404 (63135c50-7c7a-4a44-a053-28abd2388f21) Detection Strategies Analytic 1133 - AN1133 (e8569cdc-a018-4eee-95d9-5979cebae519) Analytics 1
Detect Winlogon Helper DLL Abuse via Registry and Process Artifacts on Windows - DET0404 (63135c50-7c7a-4a44-a053-28abd2388f21) Detection Strategies Winlogon Helper DLL - T1547.004 (6836813e-8ec8-4375-b459-abb388cb1a35) Attack Pattern 1
Boot or Logon Autostart Execution - T1547 (1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf) Attack Pattern Winlogon Helper DLL - T1547.004 (6836813e-8ec8-4375-b459-abb388cb1a35) Attack Pattern 2