Hide Artifacts
Adversaries may attempt to hide artifacts associated with their behaviors to evade detection. Operating systems may have features to hide various artifacts, such as important system files and administrative task execution, to avoid disrupting user work environments and prevent users from changing files or features on the system. Adversaries may abuse these features to hide artifacts such as files, directories, user accounts, or other system activity to evade detection.(Citation: Sofacy Komplex T...
BY SOURCE
PROCEDURES (30)
Auto-extracted: 5 detections for process creation monitoring
Auto-extracted: 4 detections for general monitoring
Auto-extracted: 2 detections for evasion
Auto-extracted: 2 detections for persist
Auto-extracted: 2 detections for exfiltrat
Auto-extracted: 2 detections for privilege
Auto-extracted: 2 detections for kernel
Auto-extracted: 2 detections for registry
Auto-extracted: 2 detections for suspicious
Auto-extracted: 1 detections for evasion
Auto-extracted: 1 detections for masquerad
Auto-extracted: 1 detections for child process
Auto-extracted: 1 detections for parent process
Auto-extracted: 1 detections for service
Auto-extracted: 1 detections for driver
Auto-extracted: 1 detections for service
Auto-extracted: 1 detections for child process
Auto-extracted: 1 detections for unusual
Auto-extracted: 1 detections for script execution monitoring
Auto-extracted: 1 detections for parent process
Auto-extracted: 1 detections for network connection monitoring
Auto-extracted: 1 detections for container
Auto-extracted: 1 detections for driver
Auto-extracted: 1 detections for persist
Auto-extracted: 1 detections for registry monitoring
Auto-extracted: 1 detections for masquerad
Auto-extracted: 1 detections for unusual
Auto-extracted: 1 detections for unusual
Auto-extracted: 1 detections for cloud monitoring
Auto-extracted: 1 detections for suspicious