Search Evasion Techniques

Names, Techniques, Definitions, Keywords

Technique Name	Technique ID's	Snippet(s)	Rules(s)	OS
WMI Event Subscriptions	U1353
Removing Commands from SELinux Audit Logs	U0312
Deleting Troubleshoot Information and Core Dumps	U0311
Manipulating Debug Logs	U0310
Clearing Kernel Message	U0309

WMI Event Subscriptions	PowerShell
Adding antivirus exception	Python
System Binary Proxy Execution: Rundll32	Delphi
Removing Commands from SELinux Audit Logs	bash
Deleting Troubleshoot Information and Core Dumps	bash

YARA_XprotectDecryption	YARA
YARA_SMTP_Exfiltration	YARA
Detect Disassembly Obfuscation Rogue Byte	YARA
VBAPurging	YARA
YARA_Detect_WindowsDefender_AVEmulator	YARA