1200KM / tag
attack.t1059.007 — sigma-tag tag
21 related reference pages for sigma-tag: attack.t1059.007.
Meaning and evidence boundary
Navigation membership is based on explicit metadata in this pinned module, not a claim of detection effectiveness or live validation.
Related pages
- Adwind RAT / JRAT File Artifact · sigma-rule
- AppLocker Prevented Application or Script from Running · sigma-rule
- Csc.EXE Execution Form Potentially Suspicious Parent · sigma-rule
- Cscript/Wscript Uncommon Script Extension Execution · sigma-rule
- HackTool - CACTUSTORCH Remote Thread Creation · sigma-rule
- HackTool - Koadic Execution · sigma-rule
- HTML Help HH.EXE Suspicious Child Process · sigma-rule
- JXA In-memory Execution Via OSAScript · sigma-rule
- MSHTA Execution with Suspicious File Extensions · sigma-rule
- Node Process Executions · sigma-rule
- NodeJS Execution of JavaScript File · sigma-rule
- Potential Dropper Script Execution Via WScript/CScript/MSHTA · sigma-rule
- Potential In-Memory Download And Compile Of Payloads · sigma-rule
- Potential Remote SquiblyTwo Technique Execution · sigma-rule
- Potentially Suspicious Inline JavaScript Execution via NodeJS Binary · sigma-rule
- Script Interpreter Spawning Credential Scanner - Windows · sigma-rule
- Suspicious Deno File Written from Remote Source · sigma-rule
- Suspicious HH.EXE Execution · sigma-rule
- Suspicious Installer Package Child Process · sigma-rule
- WScript or CScript Dropper - File · sigma-rule
- XSL Script Execution Via WMIC.EXE · sigma-rule
Connected ecosystem references
Pinned research references. No browser attack runner, live simulation result or validated detector is asserted. Source mappings and validation limits are preserved. ATT&CK / Atomic provenance · Detection provenance.