AT — 1 record

Attack Techniques

How a single technique works in practice, where it shows up in telemetry, and what reliably detects it.

1 record

AT-0004high

Living Off the Land: Detecting Execution That Uses Nothing but Trusted Binaries

When every tool in the intrusion ships with the operating system, signature-based detection has nothing to match. What remains is relationship, context and frequency.

Attack Techniques07 May 20263 min