ATT&CK technique
View on MITRE ATT&CK →
T1027.013
Encrypted/Encoded File
Stealth
6 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Data Encrypted via OpenSSL Utility | production | 2026-09-18 |
| elastic | ROT Encoded Python Script Execution | production | 2026-09-18 |
| elastic | PowerShell Script with Encryption/Decryption Capabilities | production | 2026-09-18 |
| elastic | Suspicious Portable Executable Encoded in Powershell Script | production | 2026-09-18 |
| elastic | Deprecated - Encoded Executable Stored in the Registry | deprecated | 2026-08-19 |
| splunk | Windows Obfuscated Files or Information via RAR SFX | production | 2026-06-08 |