T1055.013_process-doppelgnging
Adversaries may inject malicious code into process via process doppelgänging in order to evade process-based defenses as well as possibly elevate privileges.
1.21k repo starsObserved in 1 repos
DevOps & Security
DevOps & Security skills
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
T1055.014_vdso-hijacking
Adversaries may inject malicious code into processes via VDSO hijacking in order to evade process-based defenses as well as possibly elevate privileges.
1.21k repo starsObserved in 1 repos
DevOps & Security
T1055.015_listplanting
Adversaries may abuse list-view controls to inject malicious code into hijacked processes in order to evade process-based defenses as well as possibly elevate privileges.
1.21k repo starsObserved in 1 repos
DevOps & Security
T1055_process-injection
Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges.
1.21k repo starsObserved in 1 repos
DevOps & Security
T1056.001_keylogging
Adversaries may log user keystrokes to intercept credentials as the user types them.
1.21k repo starsObserved in 1 repos
DevOps & Security
T1056.002_gui-input-capture
Adversaries may mimic common operating system GUI components to prompt users for credentials with a seemingly legitimate prompt.
1.21k repo starsObserved in 1 repos
DevOps & Security
T1056.003_web-portal-capture
Adversaries may install code on externally facing portals, such as a VPN login page, to capture and transmit credentials of users who attempt to log into the service.
1.21k repo starsObserved in 1 repos
DevOps & Security
T1056.004_credential-api-hooking
Adversaries may hook into Windows application programming interface (API) functions and Linux system functions to collect user credentials.
1.21k repo starsObserved in 1 repos
DevOps & Security
T1056_input-capture
Adversaries may use methods of capturing user input to obtain credentials or collect information.
1.21k repo starsObserved in 1 repos
DevOps & Security
T1057_process-discovery
Adversaries may attempt to get information about running processes on a system.
1.21k repo starsObserved in 1 repos
DevOps & Security