ATT&CK technique
View on MITRE ATT&CK →
T1027.011
Fileless Storage
Stealth
4 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| sigma | Process Execution From Shared Memory Directory | experimental | 2026-06-20 |
| splunk | PowerShell WebRequest Using Memory Stream | production | 2026-05-13 |
| splunk | Windows Njrat Fileless Storage via Registry | production | 2026-05-13 |
| splunk | Windows Registry Payload Injection | production | 2026-05-13 |