Home/ MITRE Matrix/ Execution/ T1072

T1072Software Deployment Tools

T1072 — Software Deployment Tools is a MITRE ATT&CK technique in the Execution tactic. Clankerusecase tracks 7 detection use cases covering it and 2 threat-intel articles citing it.

ExecutionLateral Movement

View on the matrix → Filter Detection Library MITRE official spec ↗

7Use cases

2Articles

0Sub-techniques

2Tactics

Use cases covering this technique (7)

Microsoft Intune Device Health Scripts ESCU actions · hunting P Microsoft Intune DeviceManagementConfigurationPolicies ESCU actions · hunting P Microsoft Intune Manual Device Management ESCU actions · hunting P Microsoft Intune Mobile Apps ESCU actions · hunting P Detection of tools built by NirSoft ESCU actions · hunting P [LLM] Masqueraded uxtheme.dll dropped outside Windows dirs via SysAid/RMM deployment (Cavern Manticore) Bespoke delivery · alerting DSΣPDDCS [LLM] Mass npm publish from a developer endpoint (worm self-replication) Bespoke actions · alerting DSPDDCS

Articles citing this technique (2)

high Iran War Cyber Threat Landscape | A Midyear Assessment on What Matters art-131

high Prevent npm and Python Supply Chain Attacks on Developer Machines with Package Configs art-315