CmdID

CmdID / Techniques

T1189 Drive-by Compromise

Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. MITRE ATT&CK

1 Sigma rule T1189 on attack.mitre.org

Sigma rules tagged with it

process creation, the highest levels first
mediumSuspicious Browser Child Process - MacOSSohan G (D4rkCiph3r) · macOS