
Technique List
Technique Name | Technique ID's | Categories | Has Snippet(s) | Has Rules(s) | Creation Date |
---|---|---|---|---|---|
Listplanting | U1207 | Process Manipulating | 1 year, 9 months | ||
Treepoline | U1208 | Process Manipulating | 1 year, 9 months | ||
ConsoleWindowClass | U1209 | Process Manipulating | 1 year, 9 months | ||
Bypass User Account Control | T1548.002 | Defense Evasion [Mitre] | 1 year, 9 months | ||
GetForegroundWindow | U1301 | Sandbox Evasion | 1 year, 9 months | ||
Thermal Zone Temperature | U1302 | Sandbox Evasion | 1 year, 9 months | ||
Checking Malware Name | U1303 U0401 | Anti-Monitoring, Sandbox Evasion | 1 year, 9 months | ||
RDTSCP | U1304 | Sandbox Evasion | 1 year, 9 months | ||
API Hammering | U1305 | Sandbox Evasion | 1 year, 9 months | ||
Process Reimaging | U1210 | Process Manipulating | 2 years, 1 month | ||
Malvertising | U1002 | Others | 3 years, 2 months | ||
C2 via Social Networks | U0901 | Network Evasion | 3 years, 2 months | ||
Peer to peer C2 | U0902 | Network Evasion | 3 years, 2 months | ||
Tor Network C2 | U0903 | Network Evasion | 3 years, 2 months | ||
DNS Hijacking | U0904 | Network Evasion | 3 years, 2 months | ||
DNS Tunneling | U0905 | Network Evasion | 3 years, 2 months | ||
Domain Generation Algorithm | U0906 | Network Evasion | 3 years, 2 months | ||
Fast Flux | U0907 | Network Evasion | 3 years, 2 months | ||
NTFS Files Attributes | U0501 | Antivirus Evasion | 3 years, 3 months | ||
Hiding Mechanisms | U1003 | Others | 3 years, 3 months | ||
Wiping or Encrypting | U0301 | Anti-Forensic | 3 years, 3 months | ||
Clear Windows Event Logs | T1070.001 U0302 | Anti-Forensic, Defense Evasion [Mitre] | 3 years, 3 months | ||
Kill Process | U0403 | Anti-Monitoring | 3 years, 3 months | ||
Opaque Predicate | U0201 | Anti-Disassembly | 3 years, 3 months | ||
Code Transposition | U0202 | Anti-Disassembly | 3 years, 3 months | ||
Register Reassignment | U0203 | Anti-Disassembly | 3 years, 3 months | ||
Inserting Garbage Bytes | U0204 | Anti-Disassembly | 3 years, 3 months | ||
Call Trick | U0205 | Anti-Disassembly | 3 years, 3 months | ||
NOP Sled | U0206 | Anti-Disassembly | 3 years, 3 months | ||
Inline Hooking | U1211 | Process Manipulating | 3 years, 3 months |