attack.t1027.003

Detects usage of findstr to identify and execute a lnk file as seen within the HHS redirect attack

Apr 28, 2026 · attack.stealth attack.t1027.003 ·

Detects extraction of files with usage of steghide binary, the adversaries may use this technique to prevent the detection of hidden information.

Apr 28, 2026 · attack.stealth attack.t1027.003 ·

Detects embedding of files with usage of steghide binary, the adversaries may use this technique to prevent the detection of hidden information.

Apr 28, 2026 · attack.stealth attack.t1027.003 ·

Detects appending of zip file to image

Apr 28, 2026 · attack.stealth attack.t1027.003 ·

Detects extracting of zip file from image file