Search Evasion Techniques

Names, Techniques, Definitions, Keywords

Technique Name	Technique ID's	Snippet(s)	Rules(s)	OS
Default Windows Wallpaper Check	U1351
Event Triggered Execution: Linux Inotify	U1245 T1546
Replication Through Removable Media	U1012 T1091
VBA Purging	U0524
QEMU CPU brand evasion	U1350

Virtualization/Sandbox Evasion: User Activity Based Checks	Python
Default Windows Wallpaper Check	Golang
Abusing the Return Pointer	Assembly
Impossible Disassembly	Rust
Detecting Virtual Environment Process	C++

Detect Disassembly Obfuscation Rogue Byte	YARA
VBAPurging	YARA
YARA_Detect_WindowsDefender_AVEmulator	YARA
YARA_Detect_AlKhaser_AntiDebug_WriteWatch	YARA
Impair Defenses Through Disable Windows Event Logging was Detected	SIGMA