1200KM / tag
attack.t1082 — sigma-tag tag
31 related reference pages for sigma-tag: attack.t1082.
Meaning and evidence boundary
Navigation membership is based on explicit metadata in this pinned module, not a claim of detection effectiveness or live validation.
Related pages
- Bitbucket User Details Export Attempt Detected · sigma-rule
- Bitbucket User Permissions Export Attempt · sigma-rule
- Cisco Discovery · sigma-rule
- Container Residence Discovery Via Proc Virtual FS · sigma-rule
- Docker Container Discovery Via Dockerenv Listing · sigma-rule
- HackTool - PCHunter Execution · sigma-rule
- HackTool - winPEAS Execution · sigma-rule
- HackTool - WinPwn Execution · sigma-rule
- HackTool - WinPwn Execution - ScriptBlock · sigma-rule
- Network Reconnaissance Activity · sigma-rule
- OS Architecture Discovery Via Grep · sigma-rule
- Potential Container Discovery Via Inodes Listing · sigma-rule
- Potential GobRAT File Discovery Via Grep · sigma-rule
- Potential Product Class Reconnaissance Via Wmic.EXE · sigma-rule
- Potential Suspicious Activity Using SeCEdit · sigma-rule
- PUA - System Informer Execution · sigma-rule
- Suspicious Execution of Hostname · sigma-rule
- Suspicious Execution of Systeminfo · sigma-rule
- Suspicious Kernel Dump Using Dtrace · sigma-rule
- Suspicious Query of MachineGUID · sigma-rule
- System and Hardware Information Discovery · sigma-rule
- System Disk And Volume Reconnaissance Via Wmic.EXE · sigma-rule
- System Info Discovery via Sysinfo Syscall · sigma-rule
- System Information Discovery · sigma-rule
- System Information Discovery - Auditd · sigma-rule
- System Information Discovery Using Ioreg · sigma-rule
- System Information Discovery Using sw_vers · sigma-rule
- System Information Discovery Using System_Profiler · sigma-rule
- System Information Discovery via Registry Queries · sigma-rule
- System Information Discovery Via Sysctl - MacOS · sigma-rule
- Uncommon System Information Discovery Via Wmic.EXE · sigma-rule
Connected ecosystem references
Pinned research references. No browser attack runner, live simulation result or validated detector is asserted. Source mappings and validation limits are preserved. ATT&CK / Atomic provenance · Detection provenance.