Files
Ryan Xu f7d92d59fa Staging (#124)
- Updating capa detection in behaviors
- Newsletter
- Conti malware
- pafish faq
2023-09-20 15:57:32 -04:00

1.7 KiB

ID OB0006
Created 1 August 2019
Last Modified 8 May 2023

Defense Evasion

Behaviors that enable malware to evade detection.

  • Alternative Installation Location B0027
  • Bootkit F0013
  • Bypass DEP B0037
  • Component Firmware F0009
  • Conditional Execution B0025
  • Covert Location B0040
  • Disable or Evade Security Tools F0004
  • Hide Artifacts E1564
  • Hidden Files and Directories F0005
  • Hijack Execution Flow F0015
  • Indicator Blocking F0006
  • Install Insecure or Malicious Configuration B0047
  • Modify Registry E1112
  • Obfuscated Files or Information E1027
  • Polymorphic Code B0029
  • Process Injection E1055
  • Rootkit E1014
  • Self Deletion F0007
  • Software Packing F0001