MITRE ATT&CK detection coverage

← Back to main site

Home/ MITRE Matrix/ Defense Evasion/ T1220

T1220XSL Script Processing

T1220 — XSL Script Processing is a MITRE ATT&CK technique in the Defense Evasion tactic. Clankerusecase tracks 3 detection use cases covering it.

Defense Evasion

View on the matrix → Filter Detection Library MITRE official spec ↗

3Use cases

0Articles

0Sub-techniques

1Tactic

Use cases covering this technique (3)

Cisco NVM - Suspicious Network Connection Initiated via MsXsl ESCU actions · hunting P WMIC XSL Execution via URL ESCU actions · alerting P XSL Script Execution With WMIC ESCU actions · alerting P