Clankerusecase
MITRE ATT&CK detection coverage
 ← Back to main site
Home/ MITRE Matrix/ Defense Evasion/ T1202

T1202Indirect Command Execution

T1202 — Indirect Command Execution is a MITRE ATT&CK technique in the Defense Evasion tactic. Clankerusecase tracks 6 detection use cases covering it.

Defense Evasion
View on the matrix → Filter Detection Library MITRE official spec ↗
6Use cases
0Articles
0Sub-techniques
1Tactic

Use cases covering this technique (6)

Microsoft Intune Device Health Scripts ESCU actions · hunting P Microsoft Intune Mobile Apps ESCU actions · hunting P Windows Indirect Command Execution Via forfiles ESCU actions · alerting P Windows Indirect Command Execution Via pcalua ESCU actions · alerting P Windows Indirect Command Execution Via Series Of Forfiles ESCU actions · hunting P Windows RunMRU Command Execution ESCU actions · hunting P