CmdID

CmdID / Techniques

T1689 Downgrade Attack

Adversaries may downgrade or use a version of system features that may be outdated, vulnerable, and/or does not support updated security controls. MITRE ATT&CK

1 Sigma rule T1689 on attack.mitre.org

Sigma rules tagged with it

process creation, the highest levels first
mediumLSA PPL Protection Setting Modification via CommandLineFlorian Roth (Nextron Systems), Swachchhanda Shrawan Poudel (Nextron Systems) · Windows