Antivirus/EDR Evasion

Technique Name	Technique ID's	Has Snippet(s)	Has Rules(s)
FuncIn	U0132 U0221 U0308
NTFS Files Attributes	U0501
Code Cave	U0502
Stolen certificate	U0503
Redirect Antivirus Website	U0504
Shortcut Hiding	U0505
Fake Signature	U0506
Adding antivirus exception	U0507
Disabling Antivirus	U0508 F0004
File Splitting	U0509
Bypassing Static Heuristic	U0510
File Format Confusion	U0511
Big File	U0512
Fingerprinting Emulator	U0513
PE Format Manipulation	U0514
Evading Specific Signature	U0515
Evading Hash Signature	U0516
Mark-Of-The-Web (MOTW) Bypass	U0517
Return Address Spoofing	U0518
Unloading Module with FreeLibrary	U0519
Hell's Gate	U0520
Evasion using direct Syscalls	U0521
DLL Unhooking	U0522
Runtime Function Decryption	U0523