Compromise Software Supply Chain
Adversaries may manipulate application software prior to receipt by a final consumer for the purpose of data or system compromise. Supply chain compromise of software can take place in a number of ways, including manipulation of the application source code, manipulation of the update/distribution mechanism for that software, or replacing compiled releases with a modified version. Targeting may be specific to a desired victim set or may be distributed to a broad set of consumers but only move on...
BY SOURCE
PROCEDURES (16)
Auto-extracted: 4 detections for general monitoring
Auto-extracted: 2 detections for child process
Auto-extracted: 2 detections for parent process
Auto-extracted: 2 detections for dns
Auto-extracted: 2 detections for shellcode
Auto-extracted: 1 detections for exfiltrat
Auto-extracted: 1 detections for exfiltrat
Auto-extracted: 1 detections for registry monitoring
Auto-extracted: 1 detections for child process
Auto-extracted: 1 detections for suspicious
Auto-extracted: 1 detections for unusual
Auto-extracted: 1 detections for suspicious
Auto-extracted: 1 detections for network connection monitoring
Auto-extracted: 1 detections for exfiltrat
Auto-extracted: 1 detections for inject
Auto-extracted: 1 detections for persist