EXPLORE
← Back to Explore
T1564.001

Hidden Files and Directories

Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches (<code>di...

LinuxWindowsmacOS
23
Detections
3
Sources
12
Threat Actors

BY SOURCE

15elastic7sigma1splunk_escu

PROCEDURES (12)

Registry4 detections

Auto-extracted: 4 detections for registry

Process Creation Monitoring4 detections

Auto-extracted: 4 detections for process creation monitoring

Suspicious2 detections

Auto-extracted: 2 detections for suspicious

Unusual2 detections

Auto-extracted: 2 detections for unusual

General Monitoring2 detections

Auto-extracted: 2 detections for general monitoring

Evasion2 detections

Auto-extracted: 2 detections for evasion

Persist2 detections

Auto-extracted: 2 detections for persist

Suspicious1 detections

Auto-extracted: 1 detections for suspicious

Unusual1 detections

Auto-extracted: 1 detections for unusual

Persist1 detections

Auto-extracted: 1 detections for persist

Cloud Monitoring1 detections

Auto-extracted: 1 detections for cloud monitoring

Evasion1 detections

Auto-extracted: 1 detections for evasion

DETECTIONS (23)