Technique List

Technique Name Technique ID's Categories Has Snippet(s) Has Rules(s) Creation Date
Volume Shadow Copy Service (VSC,VSS) Deletion U0305 T1070.004 Defense Evasion [Mitre], Anti-Forensic 1 year, 7 months
User Interaction (Are you human?) U1339 E1204 Sandbox Evasion 2 years, 2 months
Access Token Manipulation: Parent PID Spoofing U1234 T1134.004 Defense Evasion [Mitre], Process Manipulating 2 years, 2 months
Killing Windows Event Log U0304 Anti-Forensic 2 years, 2 months
Process Ghosting U1232 Process Manipulating 2 years, 3 months
Process Herpaderping U1231 Process Manipulating 2 years, 3 months
LocalSize(0) U0128 Anti-Debugging 2 years, 5 months
Detecting Online Sandbox U1338 Sandbox Evasion 2 years, 6 months
File Melt U1007 Others 2 years, 7 months
Execution Guardrails: Environmental Keying T1480.001 Defense Evasion [Mitre] 2 years, 10 months
Indicator Removal: Timestomp U0303 T1070.006 Defense Evasion [Mitre], Anti-Forensic 2 years, 10 months
Debug Registers, Hardware Breakpoints U0127 B0001.005 Anti-Debugging 2 years, 10 months
Anti Yara Rules U1001 Others 2 years, 10 months
Breaking BaDDEr U1201 Process Manipulating 2 years, 11 months
DNS API Injection U1202 Process Manipulating 2 years, 11 months
CLIPBRDWNDCLASS U1203 Process Manipulating 2 years, 11 months
WordWarping U1204 Process Manipulating 2 years, 11 months
EditWordBreakProc U1229 Process Manipulating 2 years, 11 months
OLEUM U1206 Process Manipulating 2 years, 11 months
Listplanting U1207 Process Manipulating 2 years, 11 months
Treepoline U1208 Process Manipulating 2 years, 11 months
ConsoleWindowClass U1209 Process Manipulating 2 years, 11 months
Bypass User Account Control T1548.002 Defense Evasion [Mitre] 2 years, 11 months
GetForegroundWindow U1301 Sandbox Evasion 2 years, 12 months
Thermal Zone Temperature U1302 Sandbox Evasion 3 years
Checking Malware Name U1303 U0401 Sandbox Evasion, Anti-Monitoring 3 years
RDTSCP U1304 Sandbox Evasion 3 years
API Hammering U1305 B0003.012 Sandbox Evasion 3 years
Process Reimaging U1210 Process Manipulating 3 years, 4 months
Malvertising U1002 Others 4 years, 5 months

Filter