Home/ MITRE Matrix/ Defense Evasion/ T1027.011

T1027.011Fileless Storage

T1027.011 — Fileless Storage is a MITRE ATT&CK technique in the Defense Evasion tactic. Clankerusecase tracks 5 detection use cases covering it and 1 threat-intel article citing it.

Defense Evasion

View on the matrix → Filter Detection Library MITRE official spec ↗

5Use cases

1Articles

0Sub-techniques

1Tactic

↑ Parent technique: T1027 · Obfuscated Files or Information

Use cases covering this technique (5)

PowerShell WebRequest Using Memory Stream ESCU actions · alerting P Windows Njrat Fileless Storage via Registry ESCU actions · alerting P Windows Registry Payload Injection ESCU actions · alerting P [LLM] PurpleFox fileless infection: remote MSI via msiexec + reflective PE injection Bespoke install · alerting DSΣPDDCS [LLM] LionTail backdoor: DLL search-order hijack via phantom System32 DLLs Bespoke install · alerting DSΣPDDCS

Articles citing this technique (1)

crit Missed incidents, persistent threats, and response gaps: Insights from compromise assessment projects art-265