CmdID

CmdID / Techniques / T1553

T1553.005 Subvert Trust Controls: Mark-of-the-Web Bypass

Adversaries may abuse specific file formats to subvert Mark-of-the-Web (MOTW) controls. MITRE ATT&CK

1 Sigma rule T1553.005 on attack.mitre.org

Part of

MITRE ATT&CK

T1553Subvert Trust Controls

Sigma rules tagged with it

process creation, the highest levels first

lowWindows MSIX Package Support Framework AI_STUBS ExecutionMichael Haag, Swachchhanda Shrawan Poudel (Nextron Systems) · Windows