1200KM / tag
attack.t1485 — sigma-tag tag
19 related reference pages for sigma-tag: attack.t1485.
Meaning and evidence boundary
Navigation membership is based on explicit metadata in this pinned module, not a claim of detection effectiveness or live validation.
Related pages
- AWS EFS Fileshare Mount Modified or Deleted · sigma-rule
- AWS EKS Cluster Created or Deleted · sigma-rule
- Azure Container Registry Created or Deleted · sigma-rule
- Azure Device or Configuration Modified or Deleted · sigma-rule
- Azure Kubernetes Cluster Created or Deleted · sigma-rule
- Azure Kubernetes Network Policy Change · sigma-rule
- Azure Kubernetes RoleBinding/ClusterRoleBinding Modified and Deleted · sigma-rule
- Azure Kubernetes Secret or Config Object Access · sigma-rule
- Azure Kubernetes Sensitive Role Access · sigma-rule
- Azure Kubernetes Service Account Modified or Deleted · sigma-rule
- DD File Overwrite · sigma-rule
- Deleted Data Overwritten Via Cipher.EXE · sigma-rule
- Fsutil Suspicious Invocation · sigma-rule
- Microsoft 365 - Unusual Volume of File Deletion · sigma-rule
- MSSQL Destructive Query · sigma-rule
- Overwriting the File with Dev Zero or Null · sigma-rule
- Potential File Overwrite Via Sysinternals SDelete · sigma-rule
- Potential Secure Deletion with SDelete · sigma-rule
- Renamed Sysinternals Sdelete Execution · sigma-rule
Connected ecosystem references
Pinned research references. No browser attack runner, live simulation result or validated detector is asserted. Source mappings and validation limits are preserved. ATT&CK / Atomic provenance · Detection provenance.