Home/ MITRE Matrix/ Defense Evasion/ T1027.010

T1027.010Command Obfuscation

T1027.010 — Command Obfuscation is a MITRE ATT&CK technique in the Defense Evasion tactic. Clankerusecase tracks 3 detection use cases covering it and 1 threat-intel article citing it.

Defense Evasion

View on the matrix → Filter Detection Library MITRE official spec ↗

3Use cases

1Articles

0Sub-techniques

1Tactic

↑ Parent technique: T1027 · Obfuscated Files or Information

Use cases covering this technique (3)

Windows Command Obfuscation with Environment Variable Substrings ESCU actions · hunting P Windows PowerShell Process Implementing Manual Base64 Decoder ESCU actions · hunting P [LLM] Cruciferra known-sample SHA256 execution/write Bespoke exploit · hunting DSΣPDDCS

Articles citing this technique (1)

crit Cruciferra Crypter Uses BYOVD and Process Ghosting to Hide Windows Malware art-65