CmdID

CmdID / Techniques

T1211 Exploitation for Stealth

Adversaries may exploit vulnerabilities to evade detection by hiding activity, suppressing logging, or operating within trusted or unmonitored components. MITRE ATT&CK

1 Sigma rule T1211 on attack.mitre.org

Sigma rules tagged with it

process creation, the highest levels first