1200KM / tag
attack.s0029 — sigma-tag tag
11 related reference pages for sigma-tag: attack.s0029.
Meaning and evidence boundary
Navigation membership is based on explicit metadata in this pinned module, not a claim of detection effectiveness or live validation.
Related pages
- CSExec Service File Creation · sigma-rule
- HackTool Service Registration or Execution · sigma-rule
- PSEXEC Remote Execution File Artefact · sigma-rule
- PsExec Service File Creation · sigma-rule
- PsExec Service Installation · sigma-rule
- PsExec Tool Execution From Suspicious Locations - PipeName · sigma-rule
- PUA - NirCmd Execution · sigma-rule
- PUA - NirCmd Execution As LOCAL SYSTEM · sigma-rule
- PUA - NSudo Execution · sigma-rule
- PUA - RunXCmd Execution · sigma-rule
- RemCom Service File Creation · sigma-rule
Connected ecosystem references
Pinned research references. No browser attack runner, live simulation result or validated detector is asserted. Source mappings and validation limits are preserved. ATT&CK / Atomic provenance · Detection provenance.