attack.t1036.008 | Detection.FYI

Rename Common File to DLL File

Aug 28, 2023 · attack.defense_evasion attack.t1036.008 ·
Share on:

Detects cases in which a file gets renamed to .dll, which often happens to bypass perimeter protection

Read More
Potential Homoglyph Attack Using Lookalike Characters

May 10, 2023 · attack.defense_evasion attack.t1036 attack.t1036.003 attack.t1036.008 ·
Share on:

Detects the presence of unicode characters which are homoglyphs, or identical in appearance, to ASCII letter characters. This is used as an obfuscation and masquerading techniques. Only "perfect" homoglyphs are included; these are characters that are indistinguishable from ASCII characters and thus may make excellent candidates for homoglyph attack characters.

Read More