Joined Adversary Simulation Manual

Ctrlk

Defense Evasion

Abuse Elevation Control Mechanism Access Token Manipulation BITS Jobs Deobfuscate-Decode Files or Information Direct Volume Access Execution Guardrails Exploitation for Defense Evasion File and Directory Permissions Modification Group Policy Modification Hide Artifacts Hijack Execution Flow Impair Defenses Indicator Removal on Host Indirect Command Execution Masquerading Modify Authentication Process Modify Cloud Compute Infrastructure Modify Registry Modify System Image Network Boundary Bridging Obfuscated Files or Information Pre-OS Boot Process Injection Rogue Domain Controller Rootkit Signed Binary Proxy Execution Signed Script Proxy Execution Subvert Trust Controls Template Injection Traffic Signaling Trusted Developer Utilities Proxy Execution Unused-Unsupported Cloud Regions Use Alternate Authentication Material Valid Accounts Virtualization-Sandbox Evasion Weaken Encryption XSL Script Processing

PreviousValid Accounts NextAbuse Elevation Control Mechanism

Last updated 4 years ago

Was this helpful?