Compromise Host Software Binary
Adversaries may modify host software binaries to establish persistent access to systems. Software binaries/executables provide a wide range of system commands or services, programs, and libraries. Common software binaries are SSH clients, FTP clients, email clients, web browsers, and many other user or server applications. Adversaries may establish persistence though modifications to host software binaries. For example, an adversary may replace or otherwise infect a legitimate application binar...
BY SOURCE
PROCEDURES (12)
Auto-extracted: 3 detections for service
Auto-extracted: 2 detections for process creation monitoring
Auto-extracted: 2 detections for privilege
Auto-extracted: 2 detections for credential
Auto-extracted: 1 detections for masquerad
Auto-extracted: 1 detections for credential
Auto-extracted: 1 detections for inject
Auto-extracted: 1 detections for suspicious
Auto-extracted: 1 detections for unusual
Auto-extracted: 1 detections for unusual
Auto-extracted: 1 detections for unusual
Auto-extracted: 1 detections for masquerad