Embedded executable file run via shortcut

Identifies execution of an embedded executable extracted from a shortcut (.lnk) file via script or command interpreters, a technique commonly used to deliver and launch payloads through malicious links.

• Plataforma: Windows
• Severidad: High
• Táctica MITRE: Ejecución
• Técnicas MITRE: T1204, T1204.002

Volver a todas las reglas