MITRE ATT&CK detection coverage

← Back to main site

Home/ MITRE Matrix/ Defense Evasion/ T1218.014

T1218.014MMC

T1218.014 — MMC is a MITRE ATT&CK technique in the Defense Evasion tactic. Clankerusecase tracks 6 detection use cases covering it.

Defense Evasion

View on the matrix → Filter Detection Library MITRE official spec ↗

6Use cases

0Articles

0Sub-techniques

1Tactic

↑ Parent technique: T1218 · System Binary Proxy Execution

Use cases covering this technique (6)

Mmc LOLBAS Execution Process Spawn ESCU actions · alerting P Possible Lateral Movement PowerShell Spawn ESCU actions · hunting P UAC Bypass MMC Load Unsigned Dll ESCU actions · alerting P Windows Execution of Microsoft MSC File In Suspicious Path ESCU actions · hunting P Windows GrimResource - MMC Process Accessing APDS DLL ESCU actions · alerting P Windows Mock Trusted Directory MSC File Creation ESCU actions · alerting P