Skip to content

Hide Navigation Hide TOC

Replace Desktop Wallpaper by Powershell (c5ac6a1e-9407-45f5-a0ce-ca9a0806a287)

An adversary may deface systems internal to an organization in an attempt to intimidate or mislead users. This may take the form of modifications to internal websites, or directly to user systems with the replacement of the desktop wallpaper

Cluster A Galaxy A Cluster B Galaxy B Level
Internal Defacement - T1491.001 (8c41090b-aa47-4331-986b-8c9a51a91103) Attack Pattern Replace Desktop Wallpaper by Powershell (c5ac6a1e-9407-45f5-a0ce-ca9a0806a287) Sigma-Rules 1
Defacement - T1491 (5909f20f-3c39-4795-be06-ef1ea40d350b) Attack Pattern Internal Defacement - T1491.001 (8c41090b-aa47-4331-986b-8c9a51a91103) Attack Pattern 2