Home/ MITRE Matrix/ Lateral Movement/ T1091

T1091Replication Through Removable Media

T1091 — Replication Through Removable Media is a MITRE ATT&CK technique in the Lateral Movement tactic. Clankerusecase tracks 4 detection use cases covering it.

Lateral MovementInitial Access

View on the matrix → Filter Detection Library MITRE official spec ↗

4Use cases

0Articles

0Sub-techniques

2Tactics

Use cases covering this technique (4)

Windows Process Executed From Removable Media ESCU actions · hunting P Windows Replication Through Removable Media ESCU actions · alerting P Windows USBSTOR Registry Key Modification ESCU actions · hunting P Windows WPDBusEnum Registry Key Modification ESCU actions · hunting P