T1608 Stage Capabilities
Adversaries may upload, install, or otherwise set up capabilities that can be used during targeting. MITRE ATT&CK
1 Sigma rule T1608 on attack.mitre.org
Sigma rules tagged with it
highSuspicious Download from Office DomainFlorian Roth (Nextron Systems), Nasreddine Bencherchali (Nextron Systems) · Windows