Search Evasion Techniques

Names, Techniques, Definitions, Keywords

Technique Name	Technique ID's	Snippet(s)	Rules(s)	OS
Indirect Memory Writing	U0525
WMI Event Subscriptions	U1353
Removing Commands from SELinux Audit Logs	U0312
Deleting Troubleshoot Information and Core Dumps	U0311
Manipulating Debug Logs	U0310

Indirect Memory Writing	Delphi
Debug Registers, Hardware Breakpoints	Python
Detecting Virtual Environment Artefacts	C
Checking Pipe	C
Detecting Online Sandbox	C#

detect_cuckoo_named_pipe	YARA
YARA_XprotectDecryption	YARA
YARA_SMTP_Exfiltration	YARA
Detect Disassembly Obfuscation Rogue Byte	YARA
VBAPurging	YARA