Clankerusecase
MITRE ATT&CK detection coverage
← Back to main site
Home/ MITRE Matrix/ Defense Evasion/ T1564.004

T1564.004NTFS File Attributes

T1564.004 — NTFS File Attributes is a MITRE ATT&CK technique in the Defense Evasion tactic. Clankerusecase tracks 4 detection use cases covering it.

Defense Evasion
View on the matrix → Filter Detection Library MITRE official spec ↗
4Use cases
0Articles
0Sub-techniques
1Tactic

Use cases covering this technique (4)

Windows Alternate DataStream - Base64 Content ESCU actions · alerting P Windows Alternate DataStream - Executable Content ESCU actions · alerting P Windows Alternate DataStream - Process Execution ESCU actions · alerting P Windows SymbolicLink-Testing-Tools Utility Execution ESCU actions · alerting P