| DET0010 |
Behavioral Detection of Event Triggered Execution Across Platforms |
T1546 |
| DET0364 |
Behavioral Detection Strategy for WMI Execution Abuse on Windows |
T1047 |
| DET0086 |
Detect WMI Event Subscription for Persistence via WmiPrvSE Process and MOF Compilation |
T1546.003 |
| DET0344 |
Detection Strategy for Fileless Storage via Registry, WMI, and Shared Memory |
T1027.011 |
| DET0474 |
Environmental Keying Discovery-to-Decryption Behavioral Chain Detection Strategy |
T1480.001 |
| DET0562 |
Multi-Platform Execution Guardrails Environmental Validation Detection Strategy |
T1480 |
| DET0418 |
Windows DACL Manipulation Behavioral Chain Detection Strategy |
T1222.001 |