| Behavior-chain detection for T1134.004 Access Token Manipulation: Parent PID Spoofing (Windows) - DET0489 (eb751740-80cd-4ec1-a989-8691bf7f2039) |
Detection Strategies |
Parent PID Spoofing - T1134.004 (93591901-3172-4e94-abf8-6034ab26f44a) |
Attack Pattern |
1 |
| Behavior-chain detection for T1134.004 Access Token Manipulation: Parent PID Spoofing (Windows) - DET0489 (eb751740-80cd-4ec1-a989-8691bf7f2039) |
Detection Strategies |
Analytic 1351 - AN1351 (312f9f86-b987-483c-8b1d-955415eea946) |
Analytics |
1 |
| Access Token Manipulation - T1134 (dcaa092b-7de9-4a21-977f-7fcb77e89c48) |
Attack Pattern |
Parent PID Spoofing - T1134.004 (93591901-3172-4e94-abf8-6034ab26f44a) |
Attack Pattern |
2 |