| NTFS File Attributes - T1564.004 (f2857333-11d4-45bf-b064-2c28d8525be5) |
Attack Pattern |
Anchor - S0504 (5f1d4579-4e8f-48e7-860e-2da773ae432e) |
Malware |
1 |
| Ingress Tool Transfer - T1105 (e6919abc-99f9-4c6c-95a5-14761e7b2add) |
Attack Pattern |
Anchor - S0504 (5f1d4579-4e8f-48e7-860e-2da773ae432e) |
Malware |
1 |
| Non-Application Layer Protocol - T1095 (c21d5a77-d422-4a69-acd7-2c53c1faa34b) |
Attack Pattern |
Anchor - S0504 (5f1d4579-4e8f-48e7-860e-2da773ae432e) |
Malware |
1 |
| Code Signing - T1553.002 (32901740-b42c-4fdd-bc02-345b5dc57082) |
Attack Pattern |
Anchor - S0504 (5f1d4579-4e8f-48e7-860e-2da773ae432e) |
Malware |
1 |
| Windows Command Shell - T1059.003 (d1fcf083-a721-4223-aedf-bf8960798d62) |
Attack Pattern |
Anchor - S0504 (5f1d4579-4e8f-48e7-860e-2da773ae432e) |
Malware |
1 |
| DNS - T1071.004 (1996eef1-ced3-4d7f-bf94-33298cabbf72) |
Attack Pattern |
Anchor - S0504 (5f1d4579-4e8f-48e7-860e-2da773ae432e) |
Malware |
1 |
| SMB/Windows Admin Shares - T1021.002 (4f9ca633-15c5-463c-9724-bdcd54fde541) |
Attack Pattern |
Anchor - S0504 (5f1d4579-4e8f-48e7-860e-2da773ae432e) |
Malware |
1 |
| Software Packing - T1027.002 (deb98323-e13f-4b0c-8d94-175379069062) |
Attack Pattern |
Anchor - S0504 (5f1d4579-4e8f-48e7-860e-2da773ae432e) |
Malware |
1 |
| Fallback Channels - T1008 (f24faf46-3b26-4dbb-98f2-63460498e433) |
Attack Pattern |
Anchor - S0504 (5f1d4579-4e8f-48e7-860e-2da773ae432e) |
Malware |
1 |
| Execution Guardrails - T1480 (853c4192-4311-43e1-bfbb-b11b14911852) |
Attack Pattern |
Anchor - S0504 (5f1d4579-4e8f-48e7-860e-2da773ae432e) |
Malware |
1 |
| Cron - T1053.003 (2acf44aa-542f-4366-b4eb-55ef5747759c) |
Attack Pattern |
Anchor - S0504 (5f1d4579-4e8f-48e7-860e-2da773ae432e) |
Malware |
1 |
| System Information Discovery - T1082 (354a7f88-63fb-41b5-a801-ce3b377b36f1) |
Attack Pattern |
Anchor - S0504 (5f1d4579-4e8f-48e7-860e-2da773ae432e) |
Malware |
1 |
| System Network Configuration Discovery - T1016 (707399d6-ab3e-4963-9315-d9d3818cd6a0) |
Attack Pattern |
Anchor - S0504 (5f1d4579-4e8f-48e7-860e-2da773ae432e) |
Malware |
1 |
| Scheduled Task - T1053.005 (005a06c6-14bf-4118-afa0-ebcd8aebb0c9) |
Attack Pattern |
Anchor - S0504 (5f1d4579-4e8f-48e7-860e-2da773ae432e) |
Malware |
1 |
| Obfuscated Files or Information - T1027 (b3d682b6-98f2-4fb0-aa3b-b4df007ca70a) |
Attack Pattern |
Anchor - S0504 (5f1d4579-4e8f-48e7-860e-2da773ae432e) |
Malware |
1 |
| Service Execution - T1569.002 (f1951e8a-500e-4a26-8803-76d95c4554b4) |
Attack Pattern |
Anchor - S0504 (5f1d4579-4e8f-48e7-860e-2da773ae432e) |
Malware |
1 |
| File Deletion - T1070.004 (d63a3fb8-9452-4e9d-a60a-54be68d5998c) |
Attack Pattern |
Anchor - S0504 (5f1d4579-4e8f-48e7-860e-2da773ae432e) |
Malware |
1 |
| Windows Service - T1543.003 (2959d63f-73fd-46a1-abd2-109d7dcede32) |
Attack Pattern |
Anchor - S0504 (5f1d4579-4e8f-48e7-860e-2da773ae432e) |
Malware |
1 |
| Unix Shell - T1059.004 (a9d4b653-6915-42af-98b2-5758c4ceee56) |
Attack Pattern |
Anchor - S0504 (5f1d4579-4e8f-48e7-860e-2da773ae432e) |
Malware |
1 |
| Web Protocols - T1071.001 (df8b2a25-8bdf-4856-953c-a04372b1c161) |
Attack Pattern |
Anchor - S0504 (5f1d4579-4e8f-48e7-860e-2da773ae432e) |
Malware |
1 |
| NTFS File Attributes - T1564.004 (f2857333-11d4-45bf-b064-2c28d8525be5) |
Attack Pattern |
Hide Artifacts - T1564 (22905430-4901-4c2a-84f6-98243cb173f8) |
Attack Pattern |
2 |
| Subvert Trust Controls - T1553 (b83e166d-13d7-4b52-8677-dff90c548fd7) |
Attack Pattern |
Code Signing - T1553.002 (32901740-b42c-4fdd-bc02-345b5dc57082) |
Attack Pattern |
2 |
| Windows Command Shell - T1059.003 (d1fcf083-a721-4223-aedf-bf8960798d62) |
Attack Pattern |
Command and Scripting Interpreter - T1059 (7385dfaf-6886-4229-9ecd-6fd678040830) |
Attack Pattern |
2 |
| Application Layer Protocol - T1071 (355be19c-ffc9-46d5-8d50-d6a036c675b6) |
Attack Pattern |
DNS - T1071.004 (1996eef1-ced3-4d7f-bf94-33298cabbf72) |
Attack Pattern |
2 |
| SMB/Windows Admin Shares - T1021.002 (4f9ca633-15c5-463c-9724-bdcd54fde541) |
Attack Pattern |
Remote Services - T1021 (54a649ff-439a-41a4-9856-8d144a2551ba) |
Attack Pattern |
2 |
| Obfuscated Files or Information - T1027 (b3d682b6-98f2-4fb0-aa3b-b4df007ca70a) |
Attack Pattern |
Software Packing - T1027.002 (deb98323-e13f-4b0c-8d94-175379069062) |
Attack Pattern |
2 |
| Cron - T1053.003 (2acf44aa-542f-4366-b4eb-55ef5747759c) |
Attack Pattern |
Scheduled Task/Job - T1053 (35dd844a-b219-4e2b-a6bb-efa9a75995a9) |
Attack Pattern |
2 |
| Scheduled Task/Job - T1053 (35dd844a-b219-4e2b-a6bb-efa9a75995a9) |
Attack Pattern |
Scheduled Task - T1053.005 (005a06c6-14bf-4118-afa0-ebcd8aebb0c9) |
Attack Pattern |
2 |
| System Services - T1569 (d157f9d2-d09a-4efa-bb2a-64963f94e253) |
Attack Pattern |
Service Execution - T1569.002 (f1951e8a-500e-4a26-8803-76d95c4554b4) |
Attack Pattern |
2 |
| File Deletion - T1070.004 (d63a3fb8-9452-4e9d-a60a-54be68d5998c) |
Attack Pattern |
Indicator Removal - T1070 (799ace7f-e227-4411-baa0-8868704f2a69) |
Attack Pattern |
2 |
| Windows Service - T1543.003 (2959d63f-73fd-46a1-abd2-109d7dcede32) |
Attack Pattern |
Create or Modify System Process - T1543 (106c0cf6-bf73-4601-9aa8-0945c2715ec5) |
Attack Pattern |
2 |
| Unix Shell - T1059.004 (a9d4b653-6915-42af-98b2-5758c4ceee56) |
Attack Pattern |
Command and Scripting Interpreter - T1059 (7385dfaf-6886-4229-9ecd-6fd678040830) |
Attack Pattern |
2 |
| Application Layer Protocol - T1071 (355be19c-ffc9-46d5-8d50-d6a036c675b6) |
Attack Pattern |
Web Protocols - T1071.001 (df8b2a25-8bdf-4856-953c-a04372b1c161) |
Attack Pattern |
2 |