Exploitation for Client Execution
Adversaries may exploit software vulnerabilities in client applications to execute code. Vulnerabilities can exist in software due to unsecure coding practices that can lead to unanticipated behavior. Adversaries can take advantage of certain vulnerabilities through targeted exploitation for the purpose of arbitrary code execution. Oftentimes the most valuable exploits to an offensive toolkit are those that can be used to obtain code execution on a remote system because they can be used to gain ...
BY SOURCE
PROCEDURES (44)
Auto-extracted: 10 detections for general monitoring
Auto-extracted: 4 detections for attachment
Auto-extracted: 3 detections for child process
Auto-extracted: 3 detections for phish
Auto-extracted: 3 detections for network connection monitoring
Auto-extracted: 2 detections for azure
Auto-extracted: 2 detections for download
Auto-extracted: 2 detections for script execution monitoring
Auto-extracted: 2 detections for aws
Auto-extracted: 2 detections for child process
Auto-extracted: 2 detections for remote
Auto-extracted: 2 detections for service
Auto-extracted: 2 detections for parent process
Auto-extracted: 1 detections for lateral
Auto-extracted: 1 detections for suspicious
Auto-extracted: 1 detections for remote
Auto-extracted: 1 detections for email security
Auto-extracted: 1 detections for command line monitoring
Auto-extracted: 1 detections for api
Auto-extracted: 1 detections for office
Auto-extracted: 1 detections for authentication monitoring
Auto-extracted: 1 detections for email
Auto-extracted: 1 detections for remote
Auto-extracted: 1 detections for child process
Auto-extracted: 1 detections for macro
Auto-extracted: 1 detections for office
Auto-extracted: 1 detections for lateral
Auto-extracted: 1 detections for email
Auto-extracted: 1 detections for bypass
Auto-extracted: 1 detections for attachment
Auto-extracted: 1 detections for macro
Auto-extracted: 1 detections for download
Auto-extracted: 1 detections for aws
Auto-extracted: 1 detections for suspicious
Auto-extracted: 1 detections for suspicious
Auto-extracted: 1 detections for child process
Auto-extracted: 1 detections for api
Auto-extracted: 1 detections for office
Auto-extracted: 1 detections for bypass
Auto-extracted: 1 detections for service
Auto-extracted: 1 detections for inject
Auto-extracted: 1 detections for inject
Auto-extracted: 1 detections for process creation monitoring
Auto-extracted: 1 detections for download