Update Mappings for MBC (part 9)

This commit is contained in:
ryan 2022-08-30 09:15:15 -04:00
parent d65bb1ebd6
commit 86f8ac6ccd
4 changed files with 8 additions and 0 deletions

View file

@ -7,6 +7,8 @@ rule:
scope: function
att&ck:
- Discovery::File and Directory Discovery [T1083]
mbc:
- Discovery::File and Directory Discovery [E1083]
examples:
- 7351f8a40c5450557b24622417fc478d:0x405438
features:

View file

@ -8,6 +8,8 @@ rule:
scope: function
att&ck:
- Discovery::File and Directory Discovery [T1083]
mbc:
- Discovery::File and Directory Discovery [E1083]
references:
- https://github.com/hfiref0x/TDL/blob/cc4b46ae1c939b14a22a734a727b163f873a41b5/Source/Furutaka/sup.c#L315
examples:

View file

@ -8,6 +8,8 @@ rule:
scope: function
att&ck:
- Discovery::File and Directory Discovery [T1083]
mbc:
- Discovery::File and Directory Discovery [E1083]
examples:
- 5f66b82558ca92e54e77f216ef4c066c:0x40640E
features:

View file

@ -7,6 +7,8 @@ rule:
scope: function
att&ck:
- Execution::Command and Scripting Interpreter::PowerShell [T1059.001]
mbc:
- Execution::Command and Scripting Interpreter [E1059]
examples:
- 692f7fd6d198e804d6af98eb9e390d61:0x6000004
features: