Hiding Files with Attrib.exe (4281cb20-2994-4580-aa63-c8b86d019934)

Detects usage of attrib.exe to hide files from users.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Hidden Files and Directories - T1564.001 (ec8fc7e2-b356-455c-8db5-2e37be158e7d)	Attack Pattern	Hiding Files with Attrib.exe (4281cb20-2994-4580-aa63-c8b86d019934)	Sigma-Rules	1
Hidden Files and Directories - T1564.001 (ec8fc7e2-b356-455c-8db5-2e37be158e7d)	Attack Pattern	Hide Artifacts - T1564 (22905430-4901-4c2a-84f6-98243cb173f8)	Attack Pattern	2