CmdID

CmdID / Techniques / T1195

T1195.002 Supply Chain Compromise: Compromise Software Supply Chain

Adversaries may manipulate application software prior to receipt by a final consumer for the purpose of data or system compromise. MITRE ATT&CK

9 Sigma rules T1195.002 on attack.mitre.org

Part of

MITRE ATT&CK
T1195Supply Chain Compromise

Sigma rules tagged with it

process creation, the highest levels first
highAxios NPM Compromise Indicators - LinuxSwachchhanda Shrawan Poudel (Nextron Systems) · Linux
highAxios NPM Compromise Indicators - macOSSwachchhanda Shrawan Poudel (Nextron Systems) · macOS
highAxios NPM Compromise Indicators - WindowsSwachchhanda Shrawan Poudel (Nextron Systems) · Windows
highLiteLLM / TeamPCP Supply Chain Attack IndicatorsSwachchhanda Shrawan Poudel (Nextron Systems) · Linux
highShai-Hulud 2.0 Malicious NPM Package InstallationSwachchhanda Shrawan Poudel (Nextron Systems) · Windows
highShai-Hulud 2.0 Malicious NPM Package Installation - LinuxSwachchhanda Shrawan Poudel (Nextron Systems) · Linux
highShai-Hulud Malicious Bun ExecutionSwachchhanda Shrawan Poudel (Nextron Systems) · Windows
highShai-Hulud Malicious Bun Execution - LinuxSwachchhanda Shrawan Poudel (Nextron Systems) · Linux
highSuspicious Child Process of Notepad++ Updater - GUP.ExeSwachchhanda Shrawan Poudel (Nextron Systems) · Windows