Technique List

Technique Name	Technique ID's	Categories	Creation Date
WMI Event Subscriptions	U1353	Sandbox Evasion	1 month
Removing Commands from SELinux Audit Logs	U0312	Anti-Forensic	3 months, 3 weeks
Deleting Troubleshoot Information and Core Dumps	U0311	Anti-Forensic	3 months, 3 weeks
Manipulating Debug Logs	U0310	Anti-Forensic	3 months, 3 weeks
Clearing Kernel Message	U0309	Anti-Forensic	3 months, 3 weeks
XProtect Encryption Abuse	U0711	Data Obfuscation	3 months, 3 weeks
kernel flag inspection via sysctl	U0135	Anti-Debugging	3 months, 3 weeks
Exfiltration via SMTP	U0912	Network Evasion	3 months, 4 weeks
XBEL Recently Opened Files Check	U1352	Sandbox Evasion	4 months
Default Windows Wallpaper Check	U1351	Sandbox Evasion	5 months
Event Triggered Execution: Linux Inotify	U1245 T1546	Process Manipulating	5 months, 2 weeks
Replication Through Removable Media	U1012 T1091	Defense Evasion [Mitre], Others	6 months, 2 weeks
VBA Purging	U0524	Antivirus/EDR Evasion	7 months, 2 weeks
QEMU CPU brand evasion	U1350	Sandbox Evasion	8 months
bochs CPU oversights evasion	U1349	Sandbox Evasion	8 months, 1 week
Al-Khaser_WriteWatch	U0134	Anti-Debugging	8 months, 2 weeks
WinDefAVEmu_goatfiles	U1348	Sandbox Evasion	8 months, 2 weeks
IPV4/IPV6 Obfuscation	U0710	Data Obfuscation	8 months, 2 weeks
AppInit DLL Injection	U1244 T1546	Process Manipulating, Defense Evasion [Mitre]	8 months, 2 weeks
VboxEnumShares	U1347	Sandbox Evasion	8 months, 2 weeks
Cronos-Crypter	U1437	Packers	8 months, 2 weeks
Odd Thread Count	U1346	Sandbox Evasion	8 months, 2 weeks
Hyper-V Signature	U1345	Sandbox Evasion	8 months, 2 weeks
NtDelayExecution	U1344 U0133	Sandbox Evasion, Anti-Debugging	8 months, 2 weeks
Runtime Function Decryption	U0523	Antivirus/EDR Evasion	1 year, 1 month
BlockInput	U1011	Others	1 year, 1 month
Retrieve HDD Information	U1343	Sandbox Evasion	1 year, 1 month
BuildCommDCBAndTimeoutA	U1342 T1497.002	Sandbox Evasion	1 year, 1 month
LimeCrypter	U1436	Packers	1 year, 3 months
PyArmor	U1435	Packers	1 year, 3 months

Technique List

Filter