Home/ MITRE Matrix/ Defense Evasion/ T1127

T1127Trusted Developer Utilities Proxy Execution

T1127 — Trusted Developer Utilities Proxy Execution is a MITRE ATT&CK technique in the Defense Evasion tactic. Clankerusecase tracks 3 detection use cases covering it.

Defense EvasionExecution

View on the matrix → Filter Detection Library MITRE official spec ↗

3Use cases

0Articles

3Sub-techniques

2Tactics

Sub-techniques (3)

T1127.002 · ClickOnce T1127.003 · JamPlus T1127.001 · MSBuild

Use cases covering this technique (3)

ETW Registry Disabled ESCU actions · alerting P Suspicious microsoft workflow compiler rename ESCU actions · hunting P Suspicious microsoft workflow compiler usage ESCU actions · alerting P