Hide Navigation Hide TOC

Uncommon Assistive Technology Applications Execution Via AtBroker.EXE (f24bcaea-0cd1-11eb-adc1-0242ac120002)

Detects the start of a non built-in assistive technology applications via "Atbroker.EXE".

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Uncommon Assistive Technology Applications Execution Via AtBroker.EXE (f24bcaea-0cd1-11eb-adc1-0242ac120002)	Sigma-Rules	System Binary Proxy Execution - T1218 (457c7820-d331-465a-915e-42f85500ccc4)	Attack Pattern	1