1200KM / tag
attack.resource-development — sigma-tag tag
30 related reference pages for sigma-tag: attack.resource-development.
Meaning and evidence boundary
Navigation membership is based on explicit metadata in this pinned module, not a claim of detection effectiveness or live validation.
Related pages
- Antivirus Relevant File Paths Alerts · sigma-rule
- AWS KMS Imported Key Material Usage · sigma-rule
- Bitbucket Unauthorized Access To A Resource · sigma-rule
- Bitbucket Unauthorized Full Data Export Triggered · sigma-rule
- HackTool - PurpleSharp Execution · sigma-rule
- Hacktool Execution - Imphash · sigma-rule
- Hacktool Execution - PE Metadata · sigma-rule
- HybridConnectionManager Service Installation - Registry · sigma-rule
- Linux HackTool Execution · sigma-rule
- Okta Suspicious Activity Reported by End-user · sigma-rule
- Potential Execution of Sysinternals Tools · sigma-rule
- Potential Privilege Escalation To LOCAL SYSTEM · sigma-rule
- Potential PsExec Remote Execution · sigma-rule
- Program Executions in Suspicious Folders · sigma-rule
- ProxyLogon MSExchange OabVirtualDirectory · sigma-rule
- PsExec/PAExec Escalation to LOCAL SYSTEM · sigma-rule
- PUA - CsExec Execution · sigma-rule
- PUA - Sysinternal Tool Execution - Registry · sigma-rule
- PUA - Sysinternals Tools Execution - Registry · sigma-rule
- Relevant Anti-Virus Signature Keywords In Application Log · sigma-rule
- Relevant ClamAV Message · sigma-rule
- Renamed SysInternals DebugView Execution · sigma-rule
- Suspicious Download from Office Domain · sigma-rule
- Suspicious Execution Of Renamed Sysinternals Tools - Registry · sigma-rule
- Suspicious External WebDAV Execution · sigma-rule
- Suspicious Keyboard Layout Load · sigma-rule
- Uncommon File Created In Office Startup Folder · sigma-rule
- Usage of Renamed Sysinternals Tools - RegistrySet · sigma-rule
- VHD Image Download Via Browser · sigma-rule
- Windows Update Error · sigma-rule
Connected ecosystem references
Pinned research references. No browser attack runner, live simulation result or validated detector is asserted. Source mappings and validation limits are preserved. ATT&CK / Atomic provenance · Detection provenance.