Anti-Monitoring
| Technique Name | Technique ID's | Snippet(s) | Rules(s) | OS |
|---|---|---|---|---|
| Detecting Running Process: EnumProcess API | U0109 U0405 U1306 | |||
| Kill Process | U0403 | |||
| Parent Process Detection | U0404 | |||
| Detecting Window with FindWindow API | U0406 U0123 | |||
| Unloading Sysmon Driver | U0407 | |||
| Checking Malware Name | U1303 U0401 |