T1218.010_regsvr32
Adversaries may abuse Regsvr32.exe to proxy execution of malicious code.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
DevOps & Security skills
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
T1218.011_rundll32
Adversaries may abuse rundll32.exe to proxy execution of malicious code.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1218.012_verclsid
Adversaries may abuse verclsid.exe to proxy execution of malicious code.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1218.013_mavinject
Adversaries may abuse mavinject.exe to proxy execution of malicious code.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1218.014_mmc
Adversaries may abuse mmc.exe to proxy execution of malicious .msc files.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1218.015_electron-applications
Adversaries may abuse components of the Electron framework to execute malicious code.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1218_system-binary-proxy-execution
Adversaries may bypass process and/or signature-based defenses by proxying execution of malicious content with signed, or otherwise trusted, binaries.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1219.001_ide-tunneling
Adversaries may abuse Integrated Development Environment (IDE) software with remote development features to establish an interactive command and control channel on target systems within a network.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1219.002_remote-desktop-software
An adversary may use legitimate desktop support software to establish an interactive command and control channel to target systems within networks.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1219.003_remote-access-hardware
An adversary may use legitimate remote access hardware to establish an interactive command and control channel to target systems within networks.
☆1.21k repo stars⑂201 repo forks
DevOps & Security