| Analytic 1375 - AN1375 (6eab700a-548f-48aa-8821-163682fe8bbe) |
Analytics |
Behavior‑chain detection for T1134.003 Make and Impersonate Token (Windows) - DET0498 (d9cf8032-7b53-4251-8519-a7ccbf6a027a) |
Detection Strategies |
1 |
| Behavior‑chain detection for T1134.003 Make and Impersonate Token (Windows) - DET0498 (d9cf8032-7b53-4251-8519-a7ccbf6a027a) |
Detection Strategies |
Make and Impersonate Token - T1134.003 (8cdeb020-e31e-4f88-a582-f53dcfbda819) |
Attack Pattern |
1 |
| Access Token Manipulation - T1134 (dcaa092b-7de9-4a21-977f-7fcb77e89c48) |
Attack Pattern |
Make and Impersonate Token - T1134.003 (8cdeb020-e31e-4f88-a582-f53dcfbda819) |
Attack Pattern |
2 |