Home/ MITRE Matrix/ Resource Development/ T1588.002

T1588.002Tool

T1588.002 — Tool is a MITRE ATT&CK technique in the Resource Development tactic. Clankerusecase tracks 5 detection use cases covering it and 1 threat-intel article citing it.

Resource Development

View on the matrix → Filter Detection Library MITRE official spec ↗

5Use cases

1Articles

0Sub-techniques

1Tactic

↑ Parent technique: T1588 · Obtain Capabilities

Use cases covering this technique (5)

Windows NirSoft AdvancedRun ESCU actions · alerting P Windows NirSoft Tool Bundle File Created ESCU actions · hunting P Windows NirSoft Utilities ESCU actions · hunting P Cisco Secure Firewall - Connection to File Sharing Domain ESCU actions · hunting P [LLM] FrostyNeighbor Cobalt Strike beacon ViberPC.dll image load Bespoke install · hunting DSΣPDDCS

Articles citing this technique (1)

crit FrostyNeighbor: Fresh mischief and digital shenanigans art-309