CmdID

CmdID / Techniques

T1608 Stage Capabilities

Adversaries may upload, install, or otherwise set up capabilities that can be used during targeting. MITRE ATT&CK

1 Sigma rule T1608 on attack.mitre.org

Sigma rules tagged with it

process creation, the highest levels first
highSuspicious Download from Office DomainFlorian Roth (Nextron Systems), Nasreddine Bencherchali (Nextron Systems) · Windows