1200KM / tag
attack.t1218.001 — sigma-tag tag
5 related reference pages for sigma-tag: attack.t1218.001.
Meaning and evidence boundary
Navigation membership is based on explicit metadata in this pinned module, not a claim of detection effectiveness or live validation.
Related pages
- HH.EXE Execution · sigma-rule
- HTML Help HH.EXE Suspicious Child Process · sigma-rule
- OneNote.EXE Execution of Malicious Embedded Scripts · sigma-rule
- Remote CHM File Download/Execution Via HH.EXE · sigma-rule
- Suspicious HH.EXE Execution · sigma-rule
Connected ecosystem references
Pinned research references. No browser attack runner, live simulation result or validated detector is asserted. Source mappings and validation limits are preserved. ATT&CK / Atomic provenance · Detection provenance.