1200KM / tag
attack.t1059.003 — sigma-tag tag
27 related reference pages for sigma-tag: attack.t1059.003.
Meaning and evidence boundary
Navigation membership is based on explicit metadata in this pinned module, not a claim of detection effectiveness or live validation.
Related pages
- AppLocker Prevented Application or Script from Running · sigma-rule
- AWS EC2 Startup Shell Script Change · sigma-rule
- Command Line Execution with Suspicious URL and AppData Strings · sigma-rule
- Conhost.exe CommandLine Path Traversal · sigma-rule
- DNS Query by Finger Utility · sigma-rule
- HackTool - CrackMapExec Execution · sigma-rule
- HackTool - CrackMapExec Execution Patterns · sigma-rule
- HackTool - Jlaive In-Memory Assembly Execution · sigma-rule
- HackTool - Koadic Execution · sigma-rule
- HackTool - RedMimicry Winnti Playbook Execution · sigma-rule
- HTML Help HH.EXE Suspicious Child Process · sigma-rule
- Network Connection Initiated via Finger.EXE · sigma-rule
- OpenEDR Spawning Command Shell · sigma-rule
- Operator Bloopers Cobalt Strike Commands · sigma-rule
- Operator Bloopers Cobalt Strike Modules · sigma-rule
- Potential CommandLine Path Traversal Via Cmd.EXE · sigma-rule
- Powershell Execute Batch Script · sigma-rule
- Powershell Executed From Headless ConHost Process · sigma-rule
- PUA - AdvancedRun Execution · sigma-rule
- Read Contents From Stdin Via Cmd.EXE · sigma-rule
- Remote Access Tool - ScreenConnect Command Execution · sigma-rule
- Remote Access Tool - ScreenConnect File Transfer · sigma-rule
- Remote Access Tool - ScreenConnect Remote Command Execution · sigma-rule
- Remote Access Tool - ScreenConnect Temporary File · sigma-rule
- Suspicious HH.EXE Execution · sigma-rule
- Suspicious HWP Sub Processes · sigma-rule
- Suspicious Usage of For Loop with Recursive Directory Search in CMD · sigma-rule
Connected ecosystem references
Pinned research references. No browser attack runner, live simulation result or validated detector is asserted. Source mappings and validation limits are preserved. ATT&CK / Atomic provenance · Detection provenance.