CmdID / Techniques / T1195
T1195.002 Supply Chain Compromise: Compromise Software Supply Chain
Adversaries may manipulate application software prior to receipt by a final consumer for the purpose of data or system compromise. MITRE ATT&CK
9 Sigma rules T1195.002 on attack.mitre.org
Part of
T1195Supply Chain Compromise
Sigma rules tagged with it
highAxios NPM Compromise Indicators - WindowsSwachchhanda Shrawan Poudel (Nextron Systems) · Windows
highLiteLLM / TeamPCP Supply Chain Attack IndicatorsSwachchhanda Shrawan Poudel (Nextron Systems) · Linux
highShai-Hulud 2.0 Malicious NPM Package InstallationSwachchhanda Shrawan Poudel (Nextron Systems) · Windows
highShai-Hulud 2.0 Malicious NPM Package Installation - LinuxSwachchhanda Shrawan Poudel (Nextron Systems) · Linux
highSuspicious Child Process of Notepad++ Updater - GUP.ExeSwachchhanda Shrawan Poudel (Nextron Systems) · Windows