1200KM / tag
attack.t1059.002 — sigma-tag tag
7 related reference pages for sigma-tag: attack.t1059.002.
Meaning and evidence boundary
Navigation membership is based on explicit metadata in this pinned module, not a claim of detection effectiveness or live validation.
Related pages
- Clipboard Access Via OSAScript · sigma-rule
- JXA In-memory Execution Via OSAScript · sigma-rule
- MacOS Scripting Interpreter AppleScript · sigma-rule
- Osacompile Execution By Potentially Suspicious Applet/Osascript · sigma-rule
- OSACompile Run-Only Execution · sigma-rule
- Suspicious Execution via macOS Script Editor · sigma-rule
- Suspicious Microsoft Office Child Process - MacOS · sigma-rule
Connected ecosystem references
Pinned research references. No browser attack runner, live simulation result or validated detector is asserted. Source mappings and validation limits are preserved. ATT&CK / Atomic provenance · Detection provenance.