| Behavior-chain detection for T1134.002 Create Process with Token (Windows) - DET0456 (78aa8d17-c96f-4ba9-b431-f91157f38553) |
Detection Strategies |
Analytic 1253 - AN1253 (0929e9c5-2e1a-4cc1-a9c5-df081b180201) |
Analytics |
1 |
| Behavior-chain detection for T1134.002 Create Process with Token (Windows) - DET0456 (78aa8d17-c96f-4ba9-b431-f91157f38553) |
Detection Strategies |
Create Process with Token - T1134.002 (677569f9-a8b0-459e-ab24-7f18091fa7bf) |
Attack Pattern |
1 |
| Access Token Manipulation - T1134 (dcaa092b-7de9-4a21-977f-7fcb77e89c48) |
Attack Pattern |
Create Process with Token - T1134.002 (677569f9-a8b0-459e-ab24-7f18091fa7bf) |
Attack Pattern |
2 |