Skip to content

MISP galaxy

Home
Statistics
360net
360net
- 360.net Threat Actors
Agent threat rules
Agent threat rules
- Agent Threat Rules
Ammunitions
Ammunitions
- Ammunitions
Android
Android
- Android
Atrm
Atrm
- Azure Threat Research Matrix
Attck4fraud
Attck4fraud
- attck4fraud
Backdoor
Backdoor
- Backdoor
Banker
Banker
- Banker
Bhadra framework
Bhadra framework
- Bhadra Framework
Bitns
Bitns
- Busy is the New Stupid framework
Botnet
Botnet
- Botnet
Branded vulnerability
Branded vulnerability
- Branded Vulnerability
Cancer
Cancer
- Cancer
Cert eu govsector
Cert eu govsector
- Cert EU GovSector
China defence universities
China defence universities
- China Defence Universities Tracker
Cmtmf attack pattern
Cmtmf attack pattern
- CONCORDIA Mobile Modelling Framework - Attack Pattern
Country
Country
- Country
Cryptominers
Cryptominers
- Cryptominers
Disarm actortypes
Disarm actortypes
- Actor Types
Disarm countermeasures
Disarm countermeasures
- Countermeasures
Disarm detections
Disarm detections
- Detections
Disarm techniques
Disarm techniques
- Techniques
Election guidelines
Election guidelines
- Election guidelines
Entity
Entity
- Entity
Exercise world
Exercise world
- Synthetic Exercise World
Exploit kit
Exploit kit
- Exploit-Kit
Firearms
Firearms
- Firearms
First csirt services framework
First csirt services framework
- FIRST CSIRT Services Framework
First dns
First dns
- FIRST DNS Abuse Techniques Matrix
Gsma motif
Gsma motif
- GSMA MoTIF
Handicap
Handicap
- Handicap
Human kill chain
Human kill chain
- Human Layer Kill Chain
Intelligence agencies
Intelligence agencies
- Intelligence Agencies
Interpol dwva
Interpol dwva
- INTERPOL DWVA Taxonomy
It infrastructure equipment
It infrastructure equipment
- IT Infrastructure Equipment
Malpedia
Malpedia
- Malpedia
Microsoft activity group
Microsoft activity group
- Microsoft Activity Group actor
Misinfosec amitt misinformation pattern
Misinfosec amitt misinformation pattern
- Misinformation Pattern
Mitre analytic
Mitre analytic
- Analytics
Mitre atlas attack pattern
Mitre atlas attack pattern
- MITRE ATLAS Attack Pattern
Mitre atlas course of action
Mitre atlas course of action
- MITRE ATLAS Course of Action
Mitre attack pattern
Mitre attack pattern
- Attack Pattern
Mitre course of action
Mitre course of action
- Course of Action
Mitre d3fend
Mitre d3fend
- MITRE D3FEND
Mitre data component
Mitre data component
- mitre-data-component
Mitre data source
Mitre data source
- mitre-data-source
Mitre detection strategy
Mitre detection strategy
- Detection Strategies
Mitre engage framework
Mitre engage framework
- MITRE Engage Framework
Mitre fraud framework
Mitre fraud framework
- MITRE Fight Fraud Framework
Mitre ics assets
Mitre ics assets
- Assets
Mitre ics groups
Mitre ics groups
- Groups
Mitre ics levels
Mitre ics levels
- Levels
Mitre ics software
Mitre ics software
- Software
Mitre ics tactics
Mitre ics tactics
- Tactics
Mitre intrusion set
Mitre intrusion set
- Intrusion Set
Mitre malware
Mitre malware
- Malware
Mitre tool
Mitre tool
- mitre-tool
Nace
Nace
- NACE
Naics
Naics
- NAICS
Nato
Nato
- Index
Nice framework competency areas
Nice framework competency areas
- NICE Competency areas
Nice framework knowledges
Nice framework knowledges
- NICE Knowledges
Nice framework opm codes
Nice framework opm codes
- OPM codes in cybersecurity
Nice framework skills
Nice framework skills
- NICE Skills
Nice framework tasks
Nice framework tasks
- NICE Tasks
Nice framework work roles
Nice framework work roles
- NICE Work Roles
O365 exchange techniques
O365 exchange techniques
- o365-exchange-techniques
Online service
Online service
- online-service
Operating system
Operating system
- Operating Systems
Preventive measure
Preventive measure
- Preventive Measure
Producer
Producer
- Producer
Ransomware
Ransomware
- Ransomware
Rat
Rat
- RAT
Region
Region
- Regions UN M49
Rmm tool
Rmm tool
- RMM tools
Rsit
Rsit
- rsit
Scor about
Scor about
- SCOR - About
Scor space shield mitigations
Scor space shield mitigations
- SCOR SPACE-SHIELD Mitigations
Scor space shield tactics
Scor space shield tactics
- SCOR SPACE-SHIELD Tactics
Scor space shield techniques
Scor space shield techniques
- SCOR SPACE-SHIELD Techniques
Scor sparta mitigations
Scor sparta mitigations
- SCOR SPARTA Mitigations
Scor sparta tactics
Scor sparta tactics
- SCOR SPARTA Tactics
Scor sparta techniques
Scor sparta techniques
- SCOR SPARTA Techniques
Sector
Sector
- Sector
Sigma rules
Sigma rules
- Sigma-Rules
Social dark patterns
Social dark patterns
- Dark Patterns
Sod matrix
Sod matrix
- SoD Matrix
Software vendor
Software vendor
- Software Vendor
Sparta mitigations
Sparta mitigations
- SPARTA Mitigations
Sparta tactics
Sparta tactics
- SPARTA Tactics
Sparta techniques
Sparta techniques
- SPARTA Techniques
Stalkerware
Stalkerware
- Stalkerware
Stealer
Stealer
- Stealer
Surveillance vendor
Surveillance vendor
- Surveillance Vendor
Target information
Target information
- Target Information
Taxonomy of fraud
Taxonomy of fraud
- Taxonomy of Fraud
Tds
Tds
- TDS
Tea matrix
Tea matrix
- Tea Matrix
Terrorist groups
Terrorist groups
- Canada Listed Terrorist Entities
Threat actor
Threat actor
- Threat Actor
Tidal campaigns
Tidal campaigns
- Tidal Campaigns
Tidal groups
Tidal groups
- Tidal Groups
Tidal references
Tidal references
- Tidal References
Tidal software
Tidal software
- Tidal Software
Tidal tactic
Tidal tactic
- Tidal Tactic
Tidal technique
Tidal technique
- Tidal Technique
Tmss
Tmss
- Threat Matrix for storage services
Tool
Tool
- Tool
Uavs
Uavs
- UAVs/UCAVs
Ukhsa culture collections
Ukhsa culture collections
- UKHSA Culture Collections
Veris framework
Veris framework
- VERIS Framework
Wiper
Wiper
- Wiper

Hide Navigation Hide TOC

Uninstall Sysinternals Sysmon (6a5f68d1-c4b5-46b9-94ee-5324892ea939)

Detects the removal of Sysmon, which could be a potential attempt at defense evasion

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Disable or Modify Tools - T1685 (bbde9781-60aa-4b8a-a911-895b0c1b3872)	Attack Pattern	Uninstall Sysinternals Sysmon (6a5f68d1-c4b5-46b9-94ee-5324892ea939)	Sigma-Rules	1