CmdID

CmdID / Techniques / T1059

T1059.006 Command and Scripting Interpreter: Python

Adversaries may abuse Python commands and scripts for execution. MITRE ATT&CK

1 program on CmdID 8 Sigma rules T1059.006 on attack.mitre.org

Part of

MITRE ATT&CK
T1059Command and Scripting Interpreter

Programs for it

documented by LOLBAS and GTFOBins, or named by its rules

Sigma rules tagged with it

process creation, the highest levels first
highAxios NPM Compromise Indicators - LinuxSwachchhanda Shrawan Poudel (Nextron Systems) · Linux
highEmotet Loader Execution Via .LNK File@kostastsale · Windows
highPython One-Liners with Base64 DecodingHugh Ryan (HueCodes), Swachchhanda Shrawan Poudel (Nextron Systems) · Windows
highPython One-Liners with Base64 Decoding - LinuxHugh Ryan (HueCodes), Swachchhanda Shrawan Poudel (Nextron Systems) · Linux
mediumSuspicious File Characteristics Due to Missing FieldsMarkus Neis, Sander Wiebing · Windows