1200KM / tag
attack.t1036.005 — sigma-tag tag
14 related reference pages for sigma-tag: attack.t1036.005.
Meaning and evidence boundary
Navigation membership is based on explicit metadata in this pinned module, not a claim of detection effectiveness or live validation.
Related pages
- Creation Of Pod In System Namespace · sigma-rule
- Files With System DLL Name In Unsuspected Locations · sigma-rule
- Files With System Process Name In Unsuspected Locations · sigma-rule
- Flash Player Update from Suspicious Location · sigma-rule
- Potential Binary Impersonating Sysinternals Tools · sigma-rule
- Potential MsiExec Masquerading · sigma-rule
- Scheduled Task Creation Masquerading as System Processes · sigma-rule
- Suspicious Files in Default GPO Folder · sigma-rule
- Suspicious Process Masquerading As SvcHost.EXE · sigma-rule
- Suspicious Scheduled Task Creation via Masqueraded XML File · sigma-rule
- Uncommon Svchost Command Line Parameter · sigma-rule
- Uncommon Svchost Parent Process · sigma-rule
- Unsigned .node File Loaded · sigma-rule
- Windows Processes Suspicious Parent Directory · sigma-rule
Connected ecosystem references
Pinned research references. No browser attack runner, live simulation result or validated detector is asserted. Source mappings and validation limits are preserved. ATT&CK / Atomic provenance · Detection provenance.