CmdID

CmdID / Techniques / T1036

T1036.004 Masquerading: Masquerade Task or Service

Adversaries may attempt to manipulate the name of a task or service to make it appear legitimate or benign. MITRE ATT&CK

2 Sigma rules T1036.004 on attack.mitre.org

Part of

MITRE ATT&CK
T1036Masquerading

Sigma rules tagged with it

process creation, the highest levels first
highOperation Wocao ActivityFlorian Roth (Nextron Systems), frack113 · Windows
highScheduled Task Creation Masquerading as System ProcessesSwachchhanda Shrawan Poudel (Nextron Systems) · Windows