CmdID

CmdID / Techniques / T1564

T1564.001 Hide Artifacts: Hidden Files and Directories

Adversaries may set files and directories to be hidden to evade detection mechanisms. MITRE ATT&CK

4 Sigma rules T1564.001 on attack.mitre.org

Part of

MITRE ATT&CK
T1564Hide Artifacts

Sigma rules tagged with it

process creation, the highest levels first
highSet Suspicious Files as System Files Using Attrib.EXENasreddine Bencherchali (Nextron Systems) · Windows
mediumHiding Files with Attrib.exeSami Ruohonen · Windows
mediumUse Icacls to Hide File to Everyonefrack113 · Windows
lowSet Files as System Files Using Attrib.EXEfrack113 · Windows