CmdID

CmdID / Techniques / T1036

T1036.006 Masquerading: Space after Filename

Adversaries can hide a program's true filetype by changing the extension of a file. MITRE ATT&CK

1 Sigma rule T1036.006 on attack.mitre.org

Part of

MITRE ATT&CK
T1036Masquerading

Sigma rules tagged with it

process creation, the highest levels first
lowSpace After Filename - macOSremotephone · macOS