Use NTFS Short Name in Image (3ef5605c-9eb9-47b0-9a71-b727e6aa5c3b)

Detect use of the Windows 8.3 short name. Which could be used as a method to avoid Image based detection

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Use NTFS Short Name in Image (3ef5605c-9eb9-47b0-9a71-b727e6aa5c3b)	Sigma-Rules	NTFS File Attributes - T1564.004 (f2857333-11d4-45bf-b064-2c28d8525be5)	Attack Pattern	1
Hide Artifacts - T1564 (22905430-4901-4c2a-84f6-98243cb173f8)	Attack Pattern	NTFS File Attributes - T1564.004 (f2857333-11d4-45bf-b064-2c28d8525be5)	Attack Pattern	2